$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c30a8ef9-d88d-3512-a09f-c24916de3193.roa File: c30a8ef9-d88d-3512-a09f-c24916de3193.roa (raw, json) Hash identifier: IekV621h1oMnm1Do8CBj60KVHoERrXftaeWH87kj8gY= Subject key identifier: 44:AE:ED:FD:97:34:FB:B6:A5:1E:6E:58:EF:08:78:37:6F:F5:6A:82 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584540BCA81A92C1A8B3E97CA958 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c30a8ef9-d88d-3512-a09f-c24916de3193.roa Signing time: Mon 18 Mar 2024 22:17:56 +0000 ROA not before: Mon 18 Mar 2024 22:17:56 +0000 ROA not after: Sun 16 Jun 2024 22:17:56 +0000 asID: 36040 IP address blocks: 136.22.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:bc:a8:1a:92:c1:a8:b3:e9:7c:a9:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 18 22:17:56 2024 GMT Not After : Jun 16 22:17:56 2024 GMT Subject: CN=5e01005a-640f-4382-950c-ab3be1eae6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:76:b8:b7:2d:45:7a:8d:ca:4f:28:88:93: 0a:a6:66:da:fb:a0:5d:a7:fe:c6:e9:be:19:54:f3: 7d:37:82:88:4a:59:f7:da:ce:23:93:8f:5d:05:ca: 48:af:33:cd:0d:dc:8a:27:6f:cc:72:c8:0f:21:24: c1:fc:e2:b9:30:ef:aa:81:13:5b:75:be:4d:30:be: 05:16:8c:59:0c:1f:89:a4:35:f0:0c:bd:92:4a:1e: 42:7d:f5:be:15:d5:3c:8b:6e:6f:43:bb:55:8a:2f: b5:5e:67:0f:0b:97:97:87:39:8f:63:bb:b0:de:4f: 26:e1:bb:11:44:3f:99:9e:6b:c8:69:60:5a:37:a3: 64:0b:37:70:9f:45:ea:24:8c:1e:3c:db:e6:c2:e7: ac:31:00:e7:7a:2a:af:73:fb:5c:e3:d2:1b:c0:38: 06:f6:3c:d9:f4:aa:5a:f0:ac:72:bd:b8:f0:d2:7f: 3a:ca:98:85:9a:be:1f:f4:ad:57:51:15:9d:d4:08: 1a:d0:9d:5f:e5:c1:7f:de:9d:42:26:8b:06:cc:ef: b7:ce:b1:31:ab:f9:0e:d2:c3:b3:7f:ef:a1:42:2b: a7:0c:30:49:cc:62:66:7f:5c:39:36:c3:75:75:15: a7:85:2c:ea:c6:7c:09:0d:a5:12:c0:fe:a9:f9:73: 44:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AE:ED:FD:97:34:FB:B6:A5:1E:6E:58:EF:08:78:37:6F:F5:6A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c30a8ef9-d88d-3512-a09f-c24916de3193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f1:e7:b8:92:54:32:54:7b:1f:a5:f6:64:a5:d5:38:47:c0: 3c:64:94:91:ad:57:d1:c3:07:dd:52:c7:1e:b5:12:8e:61:eb: 5b:39:18:d3:c9:66:9b:96:d8:52:bf:1a:a6:2d:02:05:b0:ba: e1:0e:6d:34:67:8d:05:0f:c0:81:94:b2:c9:f4:6e:09:c9:de: b9:ec:64:e2:8b:95:13:2f:c8:c4:2f:95:51:a9:2f:f2:0d:a8: aa:21:1d:54:b1:2c:fe:bd:b5:8e:7d:02:52:94:44:8a:7f:c6: f2:53:dc:c3:d4:b9:ac:0d:f7:de:11:3d:2d:f1:e7:c0:5f:2f: 75:b3:24:c5:02:0f:33:3b:72:86:fa:42:6b:2b:bf:bc:7e:45: 64:eb:26:eb:e5:57:42:ad:6e:57:9b:e3:19:f7:bd:47:e1:9c: 0f:35:d7:ae:b3:ca:85:e0:24:13:eb:71:8c:0b:32:1f:74:d5: ea:fb:1e:c9:c2:97:ae:15:50:1f:63:19:ee:bc:0e:ef:9b:fc: b9:06:fb:9f:4c:93:30:fb:0d:29:b2:5f:99:9c:df:95:12:17: ce:cd:41:0a:ae:f6:69:ba:bf:ad:50:2b:27:87:ba:f4:3d:c5: 2a:a1:f1:bf:85:e4:0f:dd:d4:d6:12:54:be:78:18:cb:dd:dd: dd:40:3c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAvKgaksGos+l8qVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MDMxODIyMTc1NloXDTI0MDYxNjIyMTc1NlowLzEtMCsGA1UEAxMk NWUwMTAwNWEtNjQwZi00MzgyLTk1MGMtYWIzYmUxZWFlNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjt2uLctRXqNyk8oiJMKpmba+6Bdp/7G6b4Z VPN9N4KISln32s4jk49dBcpIrzPNDdyKJ2/McsgPISTB/OK5MO+qgRNbdb5NML4F FoxZDB+JpDXwDL2SSh5CffW+FdU8i25vQ7tVii+1XmcPC5eXhzmPY7uw3k8m4bsR RD+ZnmvIaWBaN6NkCzdwn0XqJIwePNvmwuesMQDneiqvc/tc49IbwDgG9jzZ9Kpa 8Kxyvbjw0n86ypiFmr4f9K1XURWd1Aga0J1f5cF/3p1CJosGzO+3zrExq/kO0sOz f++hQiunDDBJzGJmf1w5NsN1dRWnhSzqxnwJDaUSwP6p+XNEyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESu7f2XNPu2pR5uWO8IeDdv9WqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYzMwYThlZjktZDg4ZC0z NTEyLWEwOWYtYzI0OTE2ZGUzMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7x57iSVDJUex+l9mSl1ThHwDxklJGtV9HDB91Sxx61Eo5h61s5GNPJ ZpuW2FK/GqYtAgWwuuEObTRnjQUPwIGUssn0bgnJ3rnsZOKLlRMvyMQvlVGpL/IN qKohHVSxLP69tY59AlKURIp/xvJT3MPUuawN994RPS3x58BfL3WzJMUCDzM7cob6 Qmsrv7x+RWTrJuvlV0Ktbleb4xn3vUfhnA81166zyoXgJBPrcYwLMh901er7HsnC l64VUB9jGe68Du+b/LkG+59MkzD7DSmyX5mc35USF87NQQqu9mm6v61QKyeHuvQ9 xSqh8b+F5A/d1NYSVL54GMvd3d1APBQ= -----END CERTIFICATE-----Generated at Sun May 19 01:56:25 2024 by rpki-client on console-fra.rpki-client.org