$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa File: 33af6a38-02b6-3f92-bf22-40f73c436cc1.roa (raw, json) Hash identifier: aRrtIhm0Nrks35QZVvz5U9LBd+BPZf+qEDr62eTrlD8= Subject key identifier: 8C:37:E5:99:CB:02:E9:6B:D5:52:53:03:A7:4F:7E:05:B2:49:56:0E Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584540BAD1049858A94472B838FD Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa Signing time: Mon 18 Mar 2024 22:14:13 +0000 ROA not before: Mon 18 Mar 2024 22:14:13 +0000 ROA not after: Sun 16 Jun 2024 22:14:13 +0000 asID: 36040 IP address blocks: 136.22.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:ba:d1:04:98:58:a9:44:72:b8:38:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 18 22:14:13 2024 GMT Not After : Jun 16 22:14:13 2024 GMT Subject: CN=61dcea76-799e-4ed7-8925-c8ad42aa2332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:c9:d9:f3:61:77:7b:9e:79:55:ef:2b:1c: d4:5c:2e:21:eb:54:5d:d9:68:a8:7a:eb:08:cb:6a: 8f:cc:a6:35:1d:45:6c:1b:15:f8:23:b1:15:14:ac: 44:60:75:12:0a:41:ac:3d:8d:86:83:a9:a9:c4:5a: 3f:7c:2f:16:c0:34:48:27:95:52:8f:ee:ce:94:64: b7:c7:66:35:be:93:7b:a9:57:c4:5c:f5:ec:af:7d: a4:05:fd:81:01:6c:f7:f2:ce:2f:e3:23:86:d2:ec: 20:6e:bc:3b:a3:cc:5e:2c:1c:fd:ce:d9:3b:42:ef: aa:b6:a4:b5:51:ce:c9:64:e7:e9:b8:77:ad:9f:54: fe:28:2a:30:85:80:4a:70:8b:46:7c:48:08:89:4e: ba:79:23:b0:4b:de:dc:d6:df:31:f7:32:5f:43:ba: 3f:b7:63:5b:17:bf:58:90:36:e0:00:83:82:bb:8a: 80:b4:a6:1f:15:95:73:34:1c:fe:47:64:18:4b:70: d3:da:bf:42:ce:a8:26:0e:04:1d:93:0e:3c:b7:99: 2e:a4:18:f3:66:bc:a4:b7:4b:ca:18:1e:e4:b5:70: 1f:89:66:ce:8a:8d:e6:e1:45:65:a0:f2:93:6c:2f: 81:39:18:87:c5:9f:5e:c4:c1:1b:75:c4:fe:a7:5f: f7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:37:E5:99:CB:02:E9:6B:D5:52:53:03:A7:4F:7E:05:B2:49:56:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d8:65:27:40:ab:a5:56:46:14:36:27:09:53:cd:5b:56:7a: ed:4e:8a:7f:b4:b3:b8:2a:13:0a:e3:e7:f2:f6:8e:75:8c:31: 8e:6f:63:ca:72:ac:74:35:89:16:71:c5:ce:cd:be:c1:bc:31: 01:4e:47:03:67:87:79:83:c8:78:e7:73:5c:7b:24:0b:f0:da: 6f:86:71:b8:94:be:7e:7c:36:5f:0f:94:bf:c8:75:36:3d:be: 4f:64:c1:56:37:45:57:60:75:f3:7e:e0:ee:60:11:c1:33:c2: 28:e9:d8:f8:f2:e9:b9:18:46:37:da:ef:ba:78:20:b4:f9:64: 56:92:95:fa:b6:3c:b1:86:27:1c:0a:32:f5:28:12:4b:a3:b3: 13:ee:54:a9:ea:ed:1d:c6:46:fd:22:55:bc:54:86:83:6d:85: ed:f0:69:6e:6d:70:7d:d2:a8:db:2d:b5:75:40:40:06:86:b1: 7b:bd:34:f5:4b:1c:65:b8:30:cf:9b:54:10:1d:4a:1b:57:f8: a1:47:47:08:9f:62:da:a0:f3:d9:ad:ab:84:9f:ee:72:71:cd: 04:1f:7f:a5:8d:e5:12:ea:c2:be:b0:17:41:a2:b8:9b:1b:5f: af:ff:f2:26:10:1c:06:10:89:c7:ee:57:7b:5e:12:fd:7f:36: fc:15:85:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAutEEmFipRHK4OP0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MDMxODIyMTQxM1oXDTI0MDYxNjIyMTQxM1owLzEtMCsGA1UEAxMk NjFkY2VhNzYtNzk5ZS00ZWQ3LTg5MjUtYzhhZDQyYWEyMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0XJ2fNhd3ueeVXvKxzUXC4h61Rd2WioeusI y2qPzKY1HUVsGxX4I7EVFKxEYHUSCkGsPY2Gg6mpxFo/fC8WwDRIJ5VSj+7OlGS3 x2Y1vpN7qVfEXPXsr32kBf2BAWz38s4v4yOG0uwgbrw7o8xeLBz9ztk7Qu+qtqS1 Uc7JZOfpuHetn1T+KCowhYBKcItGfEgIiU66eSOwS97c1t8x9zJfQ7o/t2NbF79Y kDbgAIOCu4qAtKYfFZVzNBz+R2QYS3DT2r9CzqgmDgQdkw48t5kupBjzZrykt0vK GB7ktXAfiWbOio3m4UVloPKTbC+BORiHxZ9exMEbdcT+p1/3hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIw35ZnLAulr1VJTA6dPfgWySVYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMzNhZjZhMzgtMDJiNi0z ZjkyLWJmMjItNDBmNzNjNDM2Y2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHYZSdAq6VWRhQ2JwlTzVtWeu1Oin+0s7gqEwrj5/L2jnWMMY5vY8py rHQ1iRZxxc7NvsG8MQFORwNnh3mDyHjnc1x7JAvw2m+GcbiUvn58Nl8PlL/IdTY9 vk9kwVY3RVdgdfN+4O5gEcEzwijp2Pjy6bkYRjfa77p4ILT5ZFaSlfq2PLGGJxwK MvUoEkujsxPuVKnq7R3GRv0iVbxUhoNthe3waW5tcH3SqNsttXVAQAaGsXu9NPVL HGW4MM+bVBAdShtX+KFHRwifYtqg89mtq4Sf7nJxzQQff6WN5RLqwr6wF0GiuJsb X6//8iYQHAYQicfuV3teEv1/NvwVhdQ= -----END CERTIFICATE-----Generated at Mon May 27 03:12:17 2024 by rpki-client on console-ams.rpki-client.org