$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4bfc0d6e-df24-3fa2-9edd-7e0ac726eeef.roa File: 4bfc0d6e-df24-3fa2-9edd-7e0ac726eeef.roa (raw, json) Hash identifier: bGU4qvIfqzY2QrhDKj+urHmAHcndcSTs2lSxuLp4iyQ= Subject key identifier: 28:A9:DE:3A:94:AE:48:69:7D:F3:FA:16:FE:C8:06:DA:8B:56:83:6E Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285847B5314C0084ED282818180300 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4bfc0d6e-df24-3fa2-9edd-7e0ac726eeef.roa Signing time: Wed 30 Oct 2024 01:00:32 +0000 ROA not before: Wed 30 Oct 2024 01:00:32 +0000 ROA not after: Tue 28 Jan 2025 02:00:32 +0000 asID: 396253 IP address blocks: 136.228.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:31:4c:00:84:ed:28:28:18:18:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Oct 30 01:00:32 2024 GMT Not After : Jan 28 02:00:32 2025 GMT Subject: CN=074a2660-0bd2-4b2b-8a81-9ecaa229bcd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:41:c9:6c:2b:bb:79:25:f1:9c:a3:7d:74: 13:37:8a:24:15:a1:d2:2e:4e:20:e3:e1:50:78:92: f7:15:a8:f1:35:1d:04:29:80:eb:b7:b1:d6:a8:0c: 29:16:2a:73:0b:38:cd:40:4f:4c:e1:fd:cf:0f:d8: 50:00:84:b2:f5:3c:de:65:37:08:c7:a9:34:4a:8c: ba:cd:3c:4b:68:02:56:73:f7:32:e0:ef:d7:22:7c: 64:aa:cd:97:bf:0a:b5:32:b9:1a:85:72:44:aa:5d: 7e:22:77:54:6d:3e:72:4b:67:a5:87:84:4f:54:4a: bf:39:c1:e5:4f:37:c3:5a:fa:46:e9:67:d8:30:31: bd:b1:c7:67:42:72:54:0d:d7:9c:66:39:04:da:3b: 69:83:eb:b5:2a:71:f5:43:07:be:86:36:a9:9d:0d: 3c:80:f8:c0:07:ec:86:9b:00:8c:e9:26:11:3c:ec: bd:46:99:cd:3e:77:b2:14:a5:ea:38:d2:5d:b2:70: 22:a6:cb:09:50:22:0f:37:29:92:d6:9e:eb:51:7e: bf:cc:8f:fc:3c:0e:54:99:11:3e:10:ad:ed:fc:af: 08:a1:81:f4:6d:bb:61:6d:ce:1c:94:3e:76:6e:09: f7:cf:60:c8:89:0f:41:ad:5d:69:e5:c5:17:2f:cc: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A9:DE:3A:94:AE:48:69:7D:F3:FA:16:FE:C8:06:DA:8B:56:83:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/4bfc0d6e-df24-3fa2-9edd-7e0ac726eeef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b3:f5:91:2c:7d:73:ce:77:3f:39:8c:e7:81:61:33:64:6c: dd:bf:be:d2:70:0b:54:9e:d1:ec:05:85:b0:a4:2b:35:83:cd: a5:5d:f6:dd:54:7d:21:d0:1b:eb:0c:9f:9f:03:c4:60:5a:40: 8d:17:6e:41:2e:e2:58:ab:a0:18:ce:72:24:f0:61:e7:b3:82: d7:0d:6c:f4:19:b7:4e:b4:c2:f5:4a:9d:50:73:88:92:a5:72: 2a:86:d9:22:9b:a1:74:e8:3a:c1:3e:a4:f6:c8:a2:41:a3:12: e9:1f:40:6e:3c:2e:59:4f:e1:c6:9a:94:ee:f4:9e:51:28:b7: 1a:6d:6d:50:43:f4:ee:92:dd:41:c3:77:cb:30:cb:0e:27:48: ec:b7:c8:87:40:c5:87:26:fc:46:bd:71:fd:93:af:20:9b:78: cf:7e:89:9a:ea:09:81:a3:8e:b1:ca:7d:ad:d4:53:4f:c8:f7: 59:e4:88:88:04:b6:3b:2c:59:25:0a:08:8f:30:ec:0a:89:63: f3:23:ab:8b:9e:f5:3c:40:ee:00:5c:e0:61:64:66:2b:39:40: 01:71:cf:e9:81:2e:b6:d6:49:b2:0c:5a:01:eb:74:07:42:b9: 84:e1:fa:90:6d:fd:93:21:cd:39:c1:d0:93:6b:b3:49:18:e9: 18:ae:c2:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MUwAhO0oKBgYAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk MDc0YTI2NjAtMGJkMi00YjJiLThhODEtOWVjYWEyMjliY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubVByWwru3kl8ZyjfXQTN4okFaHSLk4g4+FQ eJL3FajxNR0EKYDrt7HWqAwpFipzCzjNQE9M4f3PD9hQAISy9TzeZTcIx6k0Soy6 zTxLaAJWc/cy4O/XInxkqs2Xvwq1MrkahXJEql1+IndUbT5yS2elh4RPVEq/OcHl TzfDWvpG6WfYMDG9scdnQnJUDdecZjkE2jtpg+u1KnH1Qwe+hjapnQ08gPjAB+yG mwCM6SYRPOy9RpnNPneyFKXqONJdsnAipssJUCIPNymS1p7rUX6/zI/8PA5UmRE+ EK3t/K8IoYH0bbthbc4clD52bgn3z2DIiQ9BrV1p5cUXL8wBuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCip3jqUrkhpffP6Fv7IBtqLVoNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNGJmYzBkNmUtZGYyNC0z ZmEyLTllZGQtN2UwYWM3MjZlZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOT6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmz9ZEsfXPOdz85jOeBYTNkbN2/vtJwC1Se0ewFhbCkKzWDzaVd9t1U fSHQG+sMn58DxGBaQI0XbkEu4liroBjOciTwYeezgtcNbPQZt060wvVKnVBziJKl ciqG2SKboXToOsE+pPbIokGjEukfQG48LllP4caalO70nlEotxptbVBD9O6S3UHD d8swyw4nSOy3yIdAxYcm/Ea9cf2TryCbeM9+iZrqCYGjjrHKfa3UU0/I91nkiIgE tjssWSUKCI8w7AqJY/Mjq4ue9TxA7gBc4GFkZis5QAFxz+mBLrbWSbIMWgHrdAdC uYTh+pBt/ZMhzTnB0JNrs0kY6Riuwkc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:00 2024 by rpki-client on console-ams.rpki-client.org