$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa File: ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa (raw, json) Hash identifier: lxDSJZ9EC6X0B5TMfHoRopPaOBeyIhaOBlK6utFrc0g= Subject key identifier: D5:BE:C1:8F:85:87:92:52:C0:C9:6A:65:86:A8:AE:68:28:DF:3C:B8 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584540BB49A2B26AA36922FEC600 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa Signing time: Mon 18 Mar 2024 22:15:10 +0000 ROA not before: Mon 18 Mar 2024 22:15:10 +0000 ROA not after: Sun 16 Jun 2024 22:15:10 +0000 asID: 36040 IP address blocks: 136.22.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:bb:49:a2:b2:6a:a3:69:22:fe:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 18 22:15:10 2024 GMT Not After : Jun 16 22:15:10 2024 GMT Subject: CN=3c9ae840-6118-4733-b4bd-ae0904a3eb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:40:26:0f:7e:3c:d5:a1:ff:b6:cc:b7:ae:7a: fc:03:80:45:ac:ae:6d:e2:a1:e6:bc:3c:d5:d3:7a: 25:67:f1:1b:a1:b5:07:a3:2b:83:0b:6c:50:8c:6e: 24:bf:fb:64:a4:e4:f1:0b:6a:0e:54:57:e6:ab:73: 87:c1:43:96:bd:e0:be:88:9e:d9:2b:bd:ec:b7:55: b4:8b:e6:d2:14:83:e4:d6:db:ee:fd:e6:3d:1c:d4: fc:a9:e9:1a:59:e5:09:32:82:d3:3d:2f:cc:48:b9: 91:fc:15:4a:75:cb:7e:3f:39:9d:37:6b:fa:bf:d4: 7d:85:56:e2:31:38:7e:9e:05:df:37:dd:be:01:eb: c1:6d:a2:6e:72:6a:e1:c1:d8:64:f6:e9:71:fc:d4: 31:4d:60:0f:31:ab:01:70:3b:57:29:46:90:ae:1d: be:f7:de:05:0d:72:65:89:ec:ee:f2:4d:c0:0b:07: f5:5d:48:c1:a1:56:e0:77:25:d8:e9:b0:06:1b:5f: fd:5a:c6:98:33:30:e5:8f:18:f1:e7:2f:bb:c9:f3: e5:d7:84:78:b9:f9:aa:d7:00:b7:dd:18:ff:40:6c: 0d:14:5b:ba:ab:b6:3f:f5:31:0b:c5:a3:d4:98:e5: 11:38:f9:d1:32:f0:93:e0:88:81:6e:09:2c:45:2d: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:C1:8F:85:87:92:52:C0:C9:6A:65:86:A8:AE:68:28:DF:3C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f3:a4:f6:ce:65:59:b8:50:2d:dd:ca:0e:fb:98:59:e7:9d: c4:5b:9e:63:33:c1:13:f4:ce:f0:90:0c:20:81:7e:a4:3a:f9: 2c:99:22:74:12:df:7a:3a:15:fe:44:e9:76:b2:0c:55:6b:2a: db:ed:4d:5a:c0:09:86:dd:37:0b:37:8d:bf:a8:84:db:fc:4a: 7f:90:72:c0:44:8c:94:70:07:cf:e2:af:25:87:3a:54:3b:b0: f6:80:16:0f:bd:c1:1f:fb:3b:9d:67:c2:54:dc:e6:87:a1:97: 32:69:e3:f6:d4:e4:4d:61:85:90:55:a5:6d:8c:4c:ab:2b:f1: 9c:b0:6e:f0:1e:99:45:5a:de:db:49:0b:d3:c3:0a:a5:fe:ad: f9:5c:c4:d4:54:01:4b:75:51:cb:fa:2b:50:76:b8:94:b1:f2: 51:78:08:02:c0:93:d2:67:9d:9f:75:51:3d:a4:e2:58:11:02: f7:42:f7:1d:55:a6:be:59:0e:8d:44:a8:e1:49:e0:66:5e:a2: 07:50:cc:c1:b0:60:ab:32:35:f9:2f:1a:d8:06:d5:f5:45:97: 04:4f:06:d4:a8:fa:f8:e2:a6:09:5d:7f:51:cd:a3:19:69:27: 5a:1f:b3:b8:2d:ac:57:99:23:56:5e:11:73:5c:3d:09:5f:08: cc:e8:65:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAu0mismqjaSL+xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MDMxODIyMTUxMFoXDTI0MDYxNjIyMTUxMFowLzEtMCsGA1UEAxMk M2M5YWU4NDAtNjExOC00NzMzLWI0YmQtYWUwOTA0YTNlYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UAmD3481aH/tsy3rnr8A4BFrK5t4qHmvDzV 03olZ/EbobUHoyuDC2xQjG4kv/tkpOTxC2oOVFfmq3OHwUOWveC+iJ7ZK73st1W0 i+bSFIPk1tvu/eY9HNT8qekaWeUJMoLTPS/MSLmR/BVKdct+PzmdN2v6v9R9hVbi MTh+ngXfN92+AevBbaJucmrhwdhk9ulx/NQxTWAPMasBcDtXKUaQrh2+994FDXJl iezu8k3ACwf1XUjBoVbgdyXY6bAGG1/9WsaYMzDljxjx5y+7yfPl14R4ufmq1wC3 3Rj/QGwNFFu6q7Y/9TELxaPUmOUROPnRMvCT4IiBbgksRS0HowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW+wY+Fh5JSwMlqZYaormgo3zy4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNkMzhlODItOTJiMi0z NDg5LTlkMmQtZTMzZjE4ZjI5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3zpPbOZVm4UC3dyg77mFnnncRbnmMzwRP0zvCQDCCBfqQ6+SyZInQS 33o6Ff5E6XayDFVrKtvtTVrACYbdNws3jb+ohNv8Sn+QcsBEjJRwB8/iryWHOlQ7 sPaAFg+9wR/7O51nwlTc5oehlzJp4/bU5E1hhZBVpW2MTKsr8ZywbvAemUVa3ttJ C9PDCqX+rflcxNRUAUt1Ucv6K1B2uJSx8lF4CALAk9JnnZ91UT2k4lgRAvdC9x1V pr5ZDo1EqOFJ4GZeogdQzMGwYKsyNfkvGtgG1fVFlwRPBtSo+vjipgldf1HNoxlp J1ofs7gtrFeZI1ZeEXNcPQlfCMzoZSI= -----END CERTIFICATE-----Generated at Sun May 19 01:56:25 2024 by rpki-client on console-fra.rpki-client.org