$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa File: 9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa (raw, json) Hash identifier: fRVy8jQNeLAn4iMKbil2LZRUbBTioHPZZ4crmX1Eta0= Subject key identifier: 99:E2:42:90:17:0F:7A:34:B1:92:98:D2:6A:8A:61:89:59:19:86:45 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F432858480BDA5855CE08A98196C80140 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 7029 IP address blocks: 172.120.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:58:55:ce:08:a9:81:96:c8:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=c2c45c9c-1f37-44e1-8f2b-cbf4a44b8ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:40:59:1f:23:45:52:eb:83:22:72:c7:f9:7e: b8:ea:2f:b3:82:40:e2:2f:85:6b:84:c5:8c:33:78: 51:3e:e8:3f:f8:e3:b9:30:39:5d:0e:36:c2:10:57: 4b:51:d3:16:92:ba:d3:38:9a:10:ce:14:63:2e:6f: f5:a2:4e:1d:e3:a3:59:ff:e4:23:7b:36:6c:52:32: d3:a6:56:70:08:df:d3:ca:0f:f8:cb:1e:95:56:65: b9:39:f8:5e:29:d3:4a:3c:03:c4:9d:ae:bb:73:25: 5f:6e:7a:c8:6b:33:0d:c4:23:47:28:a2:a3:1b:7b: db:7a:a3:1a:ca:95:e6:26:c7:0e:45:28:5b:c7:9b: 52:47:e4:a8:a1:f5:f5:47:00:49:68:0a:c9:b7:5c: bc:b7:b8:ee:56:15:06:42:c6:09:d3:50:7b:ba:f5: 75:99:5e:51:91:b4:cc:79:37:33:01:10:69:7d:87: b1:87:30:2f:54:a8:51:cd:c5:37:be:0a:19:a4:c5: ee:31:89:8f:75:35:e1:ec:42:84:c0:71:47:06:29: 74:24:55:b4:59:2c:46:46:44:b2:a7:27:07:91:8e: 6e:bf:3e:66:09:a0:74:2e:c6:74:6f:83:ce:1f:1a: d6:26:42:14:05:e0:e0:a5:2c:a5:f1:b6:ac:f3:1f: c7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E2:42:90:17:0F:7A:34:B1:92:98:D2:6A:8A:61:89:59:19:86:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9b4a9ca1-e294-357f-8256-0dabb1a5afdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f1:73:88:e5:b0:02:74:2f:ab:23:83:f4:23:0e:c6:a9:91: 2e:6d:0a:77:9f:62:10:c6:ac:4e:db:d3:a7:01:90:b0:ce:3c: 01:57:77:fc:d2:4d:bb:41:c2:dc:da:c4:76:7a:47:62:39:e9: af:e6:96:3b:e9:63:41:18:b4:06:e6:31:38:24:4f:7e:ec:50: 85:d3:1d:54:0f:bc:88:f5:a3:27:0b:4d:08:1a:27:7b:1d:b2: ce:f2:67:a2:a6:b7:2e:00:cb:a7:42:1c:71:c6:77:d5:a5:79: 2f:7c:73:fd:8a:e8:de:1e:fb:ad:3f:f7:36:b1:19:f9:a7:30: f7:4f:e9:cd:06:d1:3e:f1:c5:4f:11:9a:d4:b7:92:f1:4d:5d: 92:56:ad:50:fc:c4:54:54:40:13:14:55:a2:dd:3e:4e:1c:cc: 21:37:5f:9f:70:02:58:1e:52:c6:c6:91:61:3f:f7:7e:1c:7d: ca:b3:d9:d0:9b:13:ec:6b:99:e8:36:ea:8a:0f:6b:98:23:90: cb:a3:8d:3d:63:4b:9a:ce:d5:02:da:07:1b:f7:04:53:e7:83: d8:52:4e:f4:82:07:fb:de:af:2d:60:e6:bf:75:5d:ce:41:d9: 38:d7:85:1f:49:5a:63:f2:6d:a3:30:c9:f1:31:3d:15:2c:10: ec:37:cf:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2lhVzgipgZbIAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk YzJjNDVjOWMtMWYzNy00NGUxLThmMmItY2JmNGE0NGI4YWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EBZHyNFUuuDInLH+X646i+zgkDiL4VrhMWM M3hRPug/+OO5MDldDjbCEFdLUdMWkrrTOJoQzhRjLm/1ok4d46NZ/+QjezZsUjLT plZwCN/Tyg/4yx6VVmW5OfheKdNKPAPEna67cyVfbnrIazMNxCNHKKKjG3vbeqMa ypXmJscORShbx5tSR+SoofX1RwBJaArJt1y8t7juVhUGQsYJ01B7uvV1mV5RkbTM eTczARBpfYexhzAvVKhRzcU3vgoZpMXuMYmPdTXh7EKEwHFHBil0JFW0WSxGRkSy pycHkY5uvz5mCaB0LsZ0b4POHxrWJkIUBeDgpSyl8bas8x/HtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJniQpAXD3o0sZKY0mqKYYlZGYZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWI0YTljYTEtZTI5NC0z NTdmLTgyNTYtMGRhYmIxYTVhZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvxc4jlsAJ0L6sjg/QjDsapkS5tCnefYhDGrE7b06cBkLDOPAFXd/zS TbtBwtzaxHZ6R2I56a/mljvpY0EYtAbmMTgkT37sUIXTHVQPvIj1oycLTQgaJ3sd ss7yZ6Kmty4Ay6dCHHHGd9WleS98c/2K6N4e+60/9zaxGfmnMPdP6c0G0T7xxU8R mtS3kvFNXZJWrVD8xFRUQBMUVaLdPk4czCE3X59wAlgeUsbGkWE/934cfcqz2dCb E+xrmeg26ooPa5gjkMujjT1jS5rO1QLaBxv3BFPng9hSTvSCB/very1g5r91Xc5B 2TjXhR9JWmPybaMwyfExPRUsEOw3z0g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:57 2025 by rpki-client