$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa File: ecf5042d-a001-3491-a272-514979cae084.roa (raw, json) Hash identifier: hzLuT6rCF673qTOPh6f1eQbRsfucu+vDRVWPxrP9TIM= Subject key identifier: 62:82:5F:20:27:90:58:E3:B8:9C:35:A3:19:F9:34:A6:66:C0:55:C9 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584540B8A1E44134822743AACE80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa Signing time: Mon 18 Mar 2024 22:09:49 +0000 ROA not before: Mon 18 Mar 2024 22:09:49 +0000 ROA not after: Sun 16 Jun 2024 22:09:49 +0000 asID: 36040 IP address blocks: 136.22.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:b8:a1:e4:41:34:82:27:43:aa:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 18 22:09:49 2024 GMT Not After : Jun 16 22:09:49 2024 GMT Subject: CN=d2317526-da73-4d40-93bf-6877b4fec176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:27:61:2d:56:e8:89:3b:99:50:de:ff:33:bb: 72:ef:db:ca:3a:c3:65:29:ab:28:1e:de:94:38:cf: be:85:42:85:ac:a9:bf:71:93:34:86:65:e5:50:0a: b0:0e:1c:82:7b:07:8f:b1:ab:ce:aa:c1:71:7e:e0: 89:11:c3:64:85:b0:4a:99:7b:3d:1c:da:5f:68:6e: ad:50:62:93:dc:38:de:19:10:ef:7b:08:88:bd:54: e5:6f:c2:f7:63:dd:3c:26:12:09:09:f4:96:ef:23: b5:77:8a:69:f1:46:c0:7b:5f:42:52:10:1b:26:fb: 6e:f5:ae:62:76:56:8b:5c:58:09:2b:ef:3e:04:d3: c6:93:37:02:2c:ba:28:d2:ab:01:7b:eb:d9:d9:4f: f7:f1:ae:54:c1:16:cc:a5:c8:a7:48:91:2e:3b:a2: 6b:35:85:e5:c1:e1:cc:86:5a:1c:d3:9e:a5:f5:d1: 00:84:8f:7c:b1:6c:5a:a2:b7:e5:2d:94:98:a1:4a: 98:2e:3d:e2:82:04:10:02:80:28:28:8e:78:85:5f: 2b:0e:26:89:bf:8a:11:5e:79:fe:47:64:75:d4:df: fe:32:1a:8e:62:f6:a0:6a:89:aa:04:95:95:7e:6d: e2:7b:84:5e:2f:ee:28:00:98:e6:7a:c4:3d:50:02: 1f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:5F:20:27:90:58:E3:B8:9C:35:A3:19:F9:34:A6:66:C0:55:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:82:29:4f:1f:d2:b8:35:35:3e:60:d2:9a:32:af:5c:7e:4e: 6f:e4:53:92:39:2c:b7:82:e9:75:b8:ef:3a:ab:e5:3b:03:2a: 66:fc:9c:fb:5b:91:70:17:8e:11:4b:40:81:ce:01:a2:be:4d: 1f:42:a5:4c:be:e1:2a:61:79:20:39:e8:57:94:0c:cf:15:72: 68:02:da:23:e9:25:c9:66:37:33:c9:b9:ce:21:c4:30:23:ef: 21:22:b2:7a:5e:b6:38:fc:1b:8b:67:4a:0d:14:79:f6:2d:f0: 38:b8:67:b8:8f:27:fc:d6:b7:e9:14:27:76:04:7b:9a:5d:9c: cd:51:73:00:26:07:2e:8d:23:e5:85:13:fb:22:26:e8:2a:2a: b8:d1:5a:ee:64:30:74:1f:1a:4f:e9:7a:27:be:b8:96:ee:c1: 94:f1:ba:4b:95:41:c7:f1:36:25:e8:1e:78:bc:ed:de:ff:bb: 63:1b:44:67:40:f1:35:5b:9c:29:e7:c4:e3:32:5f:c8:1e:7d: 44:32:e0:08:1e:19:d6:ad:6e:88:bb:01:82:21:eb:01:a6:2e: 53:53:bd:86:00:84:b3:92:c6:cc:dc:02:f0:0b:d7:bc:a3:aa: 14:3c:a8:5f:50:64:fc:25:d1:ee:18:dc:70:a2:09:e7:bd:30: a1:86:ae:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAuKHkQTSCJ0OqzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MDMxODIyMDk0OVoXDTI0MDYxNjIyMDk0OVowLzEtMCsGA1UEAxMk ZDIzMTc1MjYtZGE3My00ZDQwLTkzYmYtNjg3N2I0ZmVjMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmydhLVboiTuZUN7/M7ty79vKOsNlKasoHt6U OM++hUKFrKm/cZM0hmXlUAqwDhyCewePsavOqsFxfuCJEcNkhbBKmXs9HNpfaG6t UGKT3DjeGRDvewiIvVTlb8L3Y908JhIJCfSW7yO1d4pp8UbAe19CUhAbJvtu9a5i dlaLXFgJK+8+BNPGkzcCLLoo0qsBe+vZ2U/38a5UwRbMpcinSJEuO6JrNYXlweHM hloc056l9dEAhI98sWxaorflLZSYoUqYLj3iggQQAoAoKI54hV8rDiaJv4oRXnn+ R2R11N/+MhqOYvagaomqBJWVfm3ie4ReL+4oAJjmesQ9UAIfMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKCXyAnkFjjuJw1oxn5NKZmwFXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNmNTA0MmQtYTAwMS0z NDkxLWEyNzItNTE0OTc5Y2FlMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmCKU8f0rg1NT5g0poyr1x+Tm/kU5I5LLeC6XW47zqr5TsDKmb8nPtb kXAXjhFLQIHOAaK+TR9CpUy+4SpheSA56FeUDM8VcmgC2iPpJclmNzPJuc4hxDAj 7yEisnpetjj8G4tnSg0UefYt8Di4Z7iPJ/zWt+kUJ3YEe5pdnM1RcwAmBy6NI+WF E/siJugqKrjRWu5kMHQfGk/peie+uJbuwZTxukuVQcfxNiXoHni87d7/u2MbRGdA 8TVbnCnnxOMyX8gefUQy4AgeGdatboi7AYIh6wGmLlNTvYYAhLOSxszcAvAL17yj qhQ8qF9QZPwl0e4Y3HCiCee9MKGGrmM= -----END CERTIFICATE-----Generated at Sun May 19 01:56:25 2024 by rpki-client on console-fra.rpki-client.org