$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7d99713b-7d25-3093-ab34-f2c85c41254a.roa File: 7d99713b-7d25-3093-ab34-f2c85c41254a.roa (raw, json) Hash identifier: +oaMNED75eCzP7qbtzUtp82I+9KKN47jsCaq6TWA9gs= Subject key identifier: 1E:A9:E9:8C:E4:97:C8:9B:3E:27:2B:77:C4:F2:B5:1F:56:88:EB:F9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285847F68CF22B4DC36BCD0C2F07C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7d99713b-7d25-3093-ab34-f2c85c41254a.roa Signing time: Fri 22 Nov 2024 10:52:48 +0000 ROA not before: Fri 22 Nov 2024 10:52:48 +0000 ROA not after: Thu 20 Feb 2025 10:52:48 +0000 asID: 149440 IP address blocks: 172.252.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f6:8c:f2:2b:4d:c3:6b:cd:0c:2f:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 22 10:52:48 2024 GMT Not After : Feb 20 10:52:48 2025 GMT Subject: CN=fa585c50-9560-4598-b0ef-1a4bb54e7d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:5b:82:fc:c3:45:d0:79:3a:99:94:7a:16: 10:93:48:c7:ca:70:28:43:ae:3c:a4:45:7e:9d:fc: b0:f7:d7:86:3d:30:35:bf:93:dc:11:83:b8:a1:49: 7e:b9:a3:07:e4:e9:3f:4d:49:96:8a:aa:dd:94:f1: 0e:d7:69:7c:a9:9a:fa:ca:a0:07:c0:1d:37:a7:9b: 51:c4:35:0f:66:f2:eb:91:4e:bb:69:b7:56:7f:e0: ee:d6:21:f6:54:5a:6a:09:a8:e4:6e:67:6f:18:60: f4:69:2c:4b:fa:e8:e8:90:c5:77:b0:9e:51:9f:71: 32:4c:4c:dd:c1:2e:38:18:4e:97:cc:e2:4c:68:a1: ec:0d:b0:24:17:34:56:bc:e7:05:d1:db:69:e1:b4: 83:97:1e:17:9e:5a:25:f4:0e:b7:97:46:aa:d2:8f: d2:08:09:6a:52:e9:23:52:81:a8:1c:9e:ce:0b:a9: 68:b6:1b:f4:e3:aa:db:ba:0a:a9:09:d3:e0:44:6b: 8b:e2:43:3a:8f:f8:2d:38:26:8b:d8:ec:b1:de:7b: ab:be:7a:86:34:bf:99:67:58:00:34:51:13:47:13: f4:22:5a:67:18:7e:60:fd:a9:03:59:a9:44:c7:c4: d8:c0:ed:08:19:24:a7:c7:a2:ec:0d:86:af:d2:f3: 90:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A9:E9:8C:E4:97:C8:9B:3E:27:2B:77:C4:F2:B5:1F:56:88:EB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7d99713b-7d25-3093-ab34-f2c85c41254a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6e:a7:37:f4:21:78:5d:48:9b:30:de:44:84:c9:a1:6b:01: ed:da:7b:42:a6:20:0a:c6:f8:da:c6:0f:26:51:25:b9:74:89: 5a:bf:51:36:db:01:fe:1e:cf:9f:7f:7b:ba:9b:52:bd:95:6f: 0c:f9:90:57:a1:73:5f:a2:e1:ef:75:76:16:e5:85:36:f1:2e: c0:70:dd:93:0b:63:70:7a:c3:71:5a:f2:da:0d:a5:d3:a9:7b: 25:b6:f0:2c:1a:73:c6:23:37:60:46:4f:03:12:00:d6:f9:b6: 5b:a6:d5:88:57:ae:a1:1b:b5:67:b4:31:c5:af:aa:db:06:f9: a6:d1:fe:e4:92:eb:de:c7:a3:d6:53:ac:b8:18:99:4b:ac:57: 09:90:90:9a:83:72:a8:09:63:65:80:bf:7c:20:43:90:96:5a: 32:23:a6:14:ef:5c:3d:90:18:c6:d4:3b:18:0e:3a:44:c6:fa: 56:c0:26:2d:47:da:86:c9:0b:97:e7:bc:d2:f7:cd:28:f6:8c: 0a:22:d2:12:c1:b4:9a:36:47:64:ae:a2:e5:1c:20:e2:26:2f: 56:2b:d8:f5:dd:94:bf:bb:dd:18:90:5a:81:2e:9c:49:f0:98: 8d:cd:18:db:79:87:58:02:e5:42:12:4b:d2:53:7c:b5:22:08: f4:2b:7c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf2jPIrTcNrzQwvB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI0MTEyMjEwNTI0OFoXDTI1MDIyMDEwNTI0OFowLzEtMCsGA1UEAxMk ZmE1ODVjNTAtOTU2MC00NTk4LWIwZWYtMWE0YmI1NGU3ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGhbgvzDRdB5OpmUehYQk0jHynAoQ648pEV+ nfyw99eGPTA1v5PcEYO4oUl+uaMH5Ok/TUmWiqrdlPEO12l8qZr6yqAHwB03p5tR xDUPZvLrkU67abdWf+Du1iH2VFpqCajkbmdvGGD0aSxL+ujokMV3sJ5Rn3EyTEzd wS44GE6XzOJMaKHsDbAkFzRWvOcF0dtp4bSDlx4Xnlol9A63l0aq0o/SCAlqUukj UoGoHJ7OC6lothv046rbugqpCdPgRGuL4kM6j/gtOCaL2Oyx3nurvnqGNL+ZZ1gA NFETRxP0IlpnGH5g/akDWalEx8TYwO0IGSSnx6LsDYav0vOQgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6p6Yzkl8ibPicrd8TytR9WiOv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvN2Q5OTcxM2ItN2QyNS0z MDkzLWFiMzQtZjJjODVjNDEyNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9upzf0IXhdSJsw3kSEyaFrAe3ae0KmIArG+NrGDyZRJbl0iVq/UTbb Af4ez59/e7qbUr2Vbwz5kFehc1+i4e91dhblhTbxLsBw3ZMLY3B6w3Fa8toNpdOp eyW28Cwac8YjN2BGTwMSANb5tlum1YhXrqEbtWe0McWvqtsG+abR/uSS697Ho9ZT rLgYmUusVwmQkJqDcqgJY2WAv3wgQ5CWWjIjphTvXD2QGMbUOxgOOkTG+lbAJi1H 2obJC5fnvNL3zSj2jAoi0hLBtJo2R2SuouUcIOImL1Yr2PXdlL+73RiQWoEunEnw mI3NGNt5h1gC5UISS9JTfLUiCPQrfEA= -----END CERTIFICATE-----Generated at Mon Nov 25 03:17:28 2024 by rpki-client on console-ams.rpki-client.org