$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/96c64ad6-d0c9-355b-93c7-c8fe03d4c136.roa File: 96c64ad6-d0c9-355b-93c7-c8fe03d4c136.roa (raw, json) Hash identifier: WTV5XWhmGjSE6H6bk30hazhYPBq4FoXk4DS6PahvH0Y= Subject key identifier: 57:D8:53:67:1F:1F:7C:D3:7A:B5:D1:05:98:8C:C1:1A:68:44:95:59 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858479EDBD6CA314C42603AEBC380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/96c64ad6-d0c9-355b-93c7-c8fe03d4c136.roa Signing time: Tue 22 Oct 2024 01:00:31 +0000 ROA not before: Tue 22 Oct 2024 01:00:31 +0000 ROA not after: Mon 20 Jan 2025 02:00:31 +0000 asID: 397293 IP address blocks: 172.252.142.0/24 maxlen: 24 172.252.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9e:db:d6:ca:31:4c:42:60:3a:eb:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 22 01:00:31 2024 GMT Not After : Jan 20 02:00:31 2025 GMT Subject: CN=63a81f2f-0abe-4d8a-b15e-83b5bff73a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b9:f9:fe:3c:6a:25:2b:75:e3:4f:73:a9:b6: a1:81:ce:03:b5:42:0b:ab:c9:d3:52:7d:3b:50:c7: 22:aa:87:a7:1d:ef:ba:81:ab:fe:1f:05:d0:02:e1: 9b:3d:11:37:be:fd:6a:df:bf:36:74:1b:73:56:b0: 33:77:ad:9b:74:bb:5f:30:8e:21:ae:1a:ba:33:b8: 0d:8a:c2:34:16:b8:a9:6a:0d:f6:eb:96:8f:a8:5e: 35:63:df:bd:4f:32:7e:c2:69:34:82:37:0b:e0:73: 97:20:96:62:37:a4:79:28:13:97:7e:a7:c2:cb:64: 1a:84:70:33:fd:70:cc:18:f7:9c:7e:c9:dc:39:e7: fe:a1:75:56:3d:19:18:2d:19:cc:34:84:1f:5b:df: fd:63:c3:0f:99:d9:3c:eb:35:09:f1:99:33:68:12: 10:87:e7:de:9d:e3:42:62:1c:6a:a2:d7:14:6c:58: e3:7f:a2:c6:4a:5d:01:d4:a7:b4:00:81:e1:9d:9c: 86:f9:5b:9d:83:03:92:70:f7:96:6d:67:75:c5:53: 44:86:74:cb:10:f0:85:eb:26:ba:78:1f:b5:56:0d: 35:50:61:92:13:76:4c:88:c1:74:8a:f2:0a:92:00: c4:8d:3c:46:0c:28:8a:ca:c0:b5:77:94:5f:24:0e: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D8:53:67:1F:1F:7C:D3:7A:B5:D1:05:98:8C:C1:1A:68:44:95:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/96c64ad6-d0c9-355b-93c7-c8fe03d4c136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.142.0/24 172.252.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:67:13:fd:89:4f:73:4a:0a:5a:6a:91:58:22:c2:36:c4:05: fa:67:03:f5:da:ed:b9:d9:ad:a4:fe:58:f6:35:a8:3b:8e:8c: 44:df:b6:cb:d6:07:13:65:f6:f3:80:3e:d4:4d:e8:2f:6c:83: 2d:e1:b7:cb:ee:fd:d0:3c:de:33:65:45:fc:a3:36:e6:5c:b8: b7:be:c1:2e:2f:b5:b0:0b:25:a5:c2:1e:5a:56:24:40:b8:63: 35:db:be:f1:47:0a:54:41:76:f6:b2:02:87:f5:a4:c7:f9:a3: bf:80:b7:77:3a:f9:d9:23:c0:ac:07:29:0b:0b:f5:09:35:ba: e0:a1:1f:d0:6b:f9:ae:d2:2f:3d:6e:85:d4:06:72:98:39:29: 12:a9:34:4d:af:e4:b8:72:2e:4c:22:a3:71:78:31:c8:c2:5b: c1:00:b4:ab:08:31:f5:40:c9:6e:f2:38:f5:58:ac:25:c4:66: 4f:ed:59:69:a8:28:ad:48:e9:ea:91:90:67:7a:b9:b2:44:34: 2e:b6:3f:1d:af:6e:1c:7d:29:ee:18:79:48:9e:e8:2e:51:fb: 7a:9e:cf:62:14:92:12:8b:eb:ff:9b:84:7b:24:8e:5f:d6:7f: 0c:5b:4c:2e:15:0c:20:83:ec:c1:82:81:18:47:c5:a3:81:aa: 05:ab:9f:b5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEee29bKMUxCYDrrw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI0MTAyMjAxMDAzMVoXDTI1MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NjNhODFmMmYtMGFiZS00ZDhhLWIxNWUtODNiNWJmZjczYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7n5/jxqJSt1409zqbahgc4DtUILq8nTUn07 UMciqoenHe+6gav+HwXQAuGbPRE3vv1q3782dBtzVrAzd62bdLtfMI4hrhq6M7gN isI0Fripag3265aPqF41Y9+9TzJ+wmk0gjcL4HOXIJZiN6R5KBOXfqfCy2QahHAz /XDMGPecfsncOef+oXVWPRkYLRnMNIQfW9/9Y8MPmdk86zUJ8ZkzaBIQh+feneNC YhxqotcUbFjjf6LGSl0B1Ke0AIHhnZyG+VudgwOScPeWbWd1xVNEhnTLEPCF6ya6 eB+1Vg01UGGSE3ZMiMF0ivIKkgDEjTxGDCiKysC1d5RfJA6vAQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFfYU2cfH3zTerXRBZiMwRpoRJVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTZjNjRhZDYtZDBjOS0z NTViLTkzYzctYzhmZTAzZDRjMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArPyOAwQA rPzSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHxnE/2JT3NKClpqkVgiwjbEBfpnA/Xa7bnZraT+WPY1qDuO jETftsvWBxNl9vOAPtRN6C9sgy3ht8vu/dA83jNlRfyjNuZcuLe+wS4vtbALJaXC HlpWJEC4YzXbvvFHClRBdvayAof1pMf5o7+At3c6+dkjwKwHKQsL9Qk1uuChH9Br +a7SLz1uhdQGcpg5KRKpNE2v5LhyLkwio3F4McjCW8EAtKsIMfVAyW7yOPVYrCXE Zk/tWWmoKK1I6eqRkGd6ubJENC62Px2vbhx9Ke4YeUie6C5R+3qez2IUkhKL6/+b hHskjl/WfwxbTC4VDCCD7MGCgRhHxaOBqgWrn7U= -----END CERTIFICATE-----Generated at Fri Nov 22 04:25:59 2024 by rpki-client on console-fra.rpki-client.org