$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa File: a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa (raw, json) Hash identifier: fA1HlqQzjZHriHStvlCQUbDF3RPuY0+Ygeg7ySr5glE= Subject key identifier: 20:47:83:32:27:5E:15:04:6B:44:30:FC:D1:47:F0:91:DE:0B:8F:55 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F432858471FD5F74A7625DCE1B2E3B340 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 20115 IP address blocks: 172.220.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:f7:4a:76:25:dc:e1:b2:e3:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=9ea05a4b-b37a-4f40-9576-75895c832e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:59:5a:09:f1:d6:12:20:c9:94:47:21:82: 50:65:db:07:62:81:85:0f:04:58:4d:19:76:6d:76: 5e:e1:a0:09:8e:a6:53:ca:42:9a:c1:32:a1:bf:9d: c4:40:6e:3e:e1:f3:45:c2:ef:ff:e2:35:88:22:a6: 0d:1a:37:cf:68:17:5c:c9:57:70:72:7f:70:c7:7d: 1e:8a:4c:24:95:3d:ae:9c:bc:df:09:b6:7b:18:28: 3a:7c:9c:01:b4:c5:84:aa:cd:bd:ca:3a:b4:78:01: ff:df:8a:2e:3f:01:fc:2d:e0:d8:95:53:33:e5:4d: dc:92:6f:0c:e7:e6:1a:85:93:bd:da:f6:ed:93:51: 8d:d5:a7:f7:f1:1d:f4:11:9e:06:17:b4:77:df:d9: fb:cf:0f:8d:40:16:eb:2e:00:95:6a:80:1d:56:d1: 02:98:a2:d1:c7:ed:da:48:68:68:2f:81:1d:75:6d: 2c:63:9a:b5:ba:2d:d4:56:66:9e:8a:d9:19:95:a4: 0d:11:a8:32:53:18:de:1d:18:26:99:a5:eb:8c:b1: 4e:e4:8c:26:e4:9f:9c:5c:1e:44:44:03:0c:27:d4: 6a:5c:5e:f8:dd:6d:3d:87:5b:9a:d7:d9:33:48:fd: 51:b6:dc:3d:b7:91:ea:57:2c:05:7d:50:f9:d8:9d: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:47:83:32:27:5E:15:04:6B:44:30:FC:D1:47:F0:91:DE:0B:8F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.220.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:8a:5b:36:fd:18:2c:cd:ff:a7:b7:cb:7c:2e:64:23:d5:f9: 86:a7:88:db:43:ff:8e:07:e3:05:70:c1:36:31:34:e7:59:37: e6:08:c1:b1:8a:2b:1f:68:93:a1:98:f2:c8:a0:ab:10:bb:0b: 8b:d2:4e:88:b9:38:e2:07:81:0e:c4:f3:0c:61:d6:bd:85:51: 0d:90:fd:39:8e:93:ae:89:04:96:3c:8a:c4:44:2f:29:6a:90: f6:8d:00:90:59:93:d9:59:c9:35:7d:d1:75:da:e2:12:3c:4c: cf:88:d8:ea:94:72:60:2e:8f:1f:6e:0e:cb:6c:b9:93:42:db: 8e:66:45:0a:12:a1:0d:64:03:1a:80:dd:4a:fb:99:09:56:b9: a5:8a:db:0d:2b:36:2a:6a:f8:4f:5e:8d:dc:11:3b:af:53:f0: 49:05:d4:d0:19:7b:6c:60:a3:db:26:81:19:5c:d4:05:eb:d7: 1e:c5:a0:77:0b:38:b6:37:c6:f4:f8:d1:60:66:d3:49:d1:9d: 26:82:6a:f6:8f:42:43:c5:a2:38:3c:d9:11:d1:ed:23:19:c3: d5:d0:93:ad:11:ff:b1:1d:0c:52:7d:b5:5c:ac:4c:cc:10:8d: 19:df:1d:f2:08:71:1e:36:ff:ff:b4:90:e0:2d:dc:b4:f3:78: 1e:59:a2:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1fdKdiXc4bLjs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OWVhMDVhNGItYjM3YS00ZjQwLTk1NzYtNzU4OTVjODMyZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoJZWgnx1hIgyZRHIYJQZdsHYoGFDwRYTRl2 bXZe4aAJjqZTykKawTKhv53EQG4+4fNFwu//4jWIIqYNGjfPaBdcyVdwcn9wx30e ikwklT2unLzfCbZ7GCg6fJwBtMWEqs29yjq0eAH/34ouPwH8LeDYlVMz5U3ckm8M 5+YahZO92vbtk1GN1af38R30EZ4GF7R339n7zw+NQBbrLgCVaoAdVtECmKLRx+3a SGhoL4EddW0sY5q1ui3UVmaeitkZlaQNEagyUxjeHRgmmaXrjLFO5Iwm5J+cXB5E RAMMJ9RqXF743W09h1ua19kzSP1Rttw9t5HqVywFfVD52J0+RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBHgzInXhUEa0Qw/NFH8JHeC49VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTVlMGZlZDUtYWYwNi0z ZmRhLTk4ODgtZWZiY2NiY2JkNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrNzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+KWzb9GCzN/6e3y3wuZCPV+YaniNtD/44H4wVwwTYxNOdZN+YIwbGK Kx9ok6GY8sigqxC7C4vSToi5OOIHgQ7E8wxh1r2FUQ2Q/TmOk66JBJY8isRELylq kPaNAJBZk9lZyTV90XXa4hI8TM+I2OqUcmAujx9uDstsuZNC245mRQoSoQ1kAxqA 3Ur7mQlWuaWK2w0rNipq+E9ejdwRO69T8EkF1NAZe2xgo9smgRlc1AXr1x7FoHcL OLY3xvT40WBm00nRnSaCavaPQkPFojg82RHR7SMZw9XQk60R/7EdDFJ9tVysTMwQ jRnfHfIIcR42//+0kOAt3LTzeB5ZooY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org