$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3948676-e195-39f2-b148-3a5b5c060da4.roa File: a3948676-e195-39f2-b148-3a5b5c060da4.roa (raw, json) Hash identifier: sFCpKw5JKTo6czqPohh/mB28U6u9N6/mH8mIp7VLbzg= Subject key identifier: 67:05:C4:B5:DC:58:54:27:C5:4B:70:F3:FB:23:F0:B9:52:28:D6:98 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285847F1B75AEC3DC3EE3BB7D7DF80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3948676-e195-39f2-b148-3a5b5c060da4.roa Signing time: Wed 20 Nov 2024 17:19:12 +0000 ROA not before: Wed 20 Nov 2024 17:19:12 +0000 ROA not after: Tue 18 Feb 2025 17:19:12 +0000 asID: 6939 IP address blocks: 172.120.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:b7:5a:ec:3d:c3:ee:3b:b7:d7:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 20 17:19:12 2024 GMT Not After : Feb 18 17:19:12 2025 GMT Subject: CN=3b16d8d0-93a9-4291-9e8f-20557a20afc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:e0:86:5f:af:ad:c4:76:d0:6f:f6:2a:50: 15:5b:aa:25:85:ad:67:e7:f0:11:25:50:33:78:ff: fb:8f:2c:f5:b5:3f:34:4a:de:8b:8b:bc:36:73:a5: 35:42:4f:7a:3c:8b:81:04:73:19:1e:1f:19:9e:0b: 8a:d6:27:fc:4e:ac:21:8b:13:8b:80:85:9e:7b:bc: 6e:d8:d8:85:39:37:1d:2c:e3:32:ad:96:c7:b9:82: 47:2e:d5:1e:29:f3:ee:aa:f4:aa:34:18:7a:66:1f: b7:cb:94:fc:68:7b:12:64:29:a2:23:67:4a:6f:ef: b1:1a:dd:11:1a:f4:54:ba:34:ec:34:4a:10:f6:f8: e0:c9:51:95:05:27:a8:21:55:70:58:47:42:3d:ce: 2b:0e:07:bf:39:63:ea:c4:85:66:7c:c4:ec:d7:f6: 4b:92:01:9b:b5:b7:80:12:7d:c4:68:a1:03:d2:de: de:de:d0:4e:df:70:8b:34:37:6c:9f:57:c4:a7:e6: eb:6a:fa:4e:da:7c:01:7a:76:1e:64:e7:5a:4a:72: b9:b7:b8:52:a6:ff:02:7a:2a:43:30:37:d2:fd:04: ab:22:44:00:26:c5:88:cf:9d:62:2c:e7:89:2a:3d: 1e:f6:ed:8d:98:3d:5b:f4:ae:92:d6:2f:4a:2d:63: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:C4:B5:DC:58:54:27:C5:4B:70:F3:FB:23:F0:B9:52:28:D6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3948676-e195-39f2-b148-3a5b5c060da4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1a:50:a3:ef:76:2f:0a:7c:d1:5b:87:2b:64:ad:9c:62:34: 3e:aa:58:01:fb:a2:98:58:bc:7a:47:6f:76:6b:46:a8:0c:cc: cb:54:b5:09:74:cd:f8:44:4b:1b:ef:7f:03:95:56:c8:92:98: 5f:c7:d7:b1:e8:fa:fd:f3:46:0d:a4:8c:95:71:38:b0:e0:d5: 87:89:a1:9e:a1:26:6b:45:42:c4:18:d2:1e:bb:32:f9:8a:9c: 42:66:0b:10:7d:b5:5c:c5:17:f2:40:aa:7f:ae:15:ad:c2:30: 88:e2:fb:b8:5f:9c:b0:4f:e6:2f:7b:e9:9c:57:6d:28:3d:2d: 65:06:92:38:ed:8e:a9:22:89:54:a7:ba:f1:f3:3c:96:7e:ac: ae:a8:33:7a:0c:64:be:ac:68:18:a8:49:b4:cf:f2:b3:82:91: 02:38:4c:f5:da:57:11:69:1b:c5:43:96:47:9a:b0:0b:af:59: 86:20:e5:51:a7:d5:fc:39:99:3a:8e:1c:27:70:88:60:57:3b: 47:9e:cb:6a:93:0e:97:2b:fb:a3:53:04:d0:26:84:e4:6d:58: ec:e4:85:98:6a:58:c4:b3:23:5a:c1:e5:ae:d5:3e:77:35:d7: b9:9c:e1:9b:e7:6a:9c:4e:56:35:4a:20:23:6c:1d:db:c3:f6: 56:9a:2d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxt1rsPcPuO7fX34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI0MTEyMDE3MTkxMloXDTI1MDIxODE3MTkxMlowLzEtMCsGA1UEAxMk M2IxNmQ4ZDAtOTNhOS00MjkxLTllOGYtMjA1NTdhMjBhZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue/ghl+vrcR20G/2KlAVW6olha1n5/ARJVAz eP/7jyz1tT80St6Li7w2c6U1Qk96PIuBBHMZHh8ZnguK1if8TqwhixOLgIWee7xu 2NiFOTcdLOMyrZbHuYJHLtUeKfPuqvSqNBh6Zh+3y5T8aHsSZCmiI2dKb++xGt0R GvRUujTsNEoQ9vjgyVGVBSeoIVVwWEdCPc4rDge/OWPqxIVmfMTs1/ZLkgGbtbeA En3EaKED0t7e3tBO33CLNDdsn1fEp+bravpO2nwBenYeZOdaSnK5t7hSpv8CeipD MDfS/QSrIkQAJsWIz51iLOeJKj0e9u2NmD1b9K6S1i9KLWONQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcFxLXcWFQnxUtw8/sj8LlSKNaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTM5NDg2NzYtZTE5NS0z OWYyLWIxNDgtM2E1YjVjMDYwZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4aUKPvdi8KfNFbhytkrZxiND6qWAH7ophYvHpHb3ZrRqgMzMtUtQl0 zfhESxvvfwOVVsiSmF/H17Ho+v3zRg2kjJVxOLDg1YeJoZ6hJmtFQsQY0h67MvmK nEJmCxB9tVzFF/JAqn+uFa3CMIji+7hfnLBP5i976ZxXbSg9LWUGkjjtjqkiiVSn uvHzPJZ+rK6oM3oMZL6saBioSbTP8rOCkQI4TPXaVxFpG8VDlkeasAuvWYYg5VGn 1fw5mTqOHCdwiGBXO0eey2qTDpcr+6NTBNAmhORtWOzkhZhqWMSzI1rB5a7VPnc1 17mc4ZvnapxOVjVKICNsHdvD9laaLR8= -----END CERTIFICATE-----Generated at Fri Nov 22 04:26:00 2024 by rpki-client on console-fra.rpki-client.org