$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa File: 24d72aa4-d799-3e57-a378-ee35680b2c9c.roa (raw, json) Hash identifier: 2ACt6u8WZOD2Fo5A0SWzVQpDqFjYHQb4zyGs5FEeFQY= Subject key identifier: 2F:F3:DA:05:18:6F:45:FA:BD:65:98:C2:83:8E:60:76:EE:26:82:40 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285847A0414212CED91CB54771BC80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 53813 IP address blocks: 136.226.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:42:12:ce:d9:1c:b5:47:71:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=c95d3f3c-ab1c-4c1f-be5b-9f7b77b47705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:74:12:8f:7b:2e:70:c2:e9:e5:a2:cb:7a: 9f:e0:11:ca:3f:fc:07:6d:88:c2:a2:26:44:12:f0: ff:ab:30:04:b4:a4:4f:6b:58:c2:f7:65:f4:01:5c: 26:35:4c:c4:77:10:d4:ea:df:bc:75:df:39:66:0c: af:5c:46:7f:03:f4:de:2f:5a:a0:10:de:3b:d6:c2: 3d:87:01:7b:55:ef:ac:3e:97:c6:af:2d:22:4f:d2: 60:08:fa:b1:fe:79:c8:34:48:60:08:76:3b:34:c1: 52:c0:88:e2:32:d8:81:f3:63:fd:7d:45:36:98:0c: ff:27:b0:25:27:81:4e:1e:9f:49:66:b6:92:a1:31: 2f:aa:1e:24:9f:c5:68:77:95:1e:57:13:f8:24:85: 16:87:08:bb:17:ec:3c:31:f7:8b:06:04:a9:a9:c7: dd:5f:44:ef:2b:4c:1f:f3:fc:bd:2f:c4:c1:da:4d: d4:de:c1:73:47:75:02:18:c9:34:38:2d:06:7f:9a: dc:c1:f6:d4:72:8f:d8:15:8d:76:21:ed:7f:09:1d: 3f:9d:3e:9e:6c:75:a9:ab:db:ca:86:45:dc:e1:b3: 69:4f:85:75:c8:8b:29:38:22:ae:89:f2:f7:8d:54: db:3e:a2:d1:a5:d5:ce:90:ec:78:a2:c3:9f:24:85: 63:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F3:DA:05:18:6F:45:FA:BD:65:98:C2:83:8E:60:76:EE:26:82:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1c:cb:97:0d:e2:34:b4:a4:96:1e:a4:1d:6a:5e:9c:a0:d4: b1:08:b3:dc:50:26:3e:71:af:71:e5:48:35:1b:95:52:1e:0d: 40:e5:05:9a:92:67:c3:e7:c6:c8:1c:89:ce:27:71:51:24:f9: aa:9f:49:32:1c:f0:3c:b8:19:f7:a7:27:6b:9e:f3:4f:ed:96: 2c:6a:eb:36:d8:5c:42:4a:bb:d0:b2:03:b8:68:b5:c0:e5:a3: bd:b4:c3:49:5c:be:db:00:2a:b8:91:e3:4a:19:1f:9a:3b:b9: 77:3c:78:e4:04:de:b0:2b:c7:e1:ec:4a:8a:30:23:48:58:d1: 9e:8a:cd:76:4a:51:af:7f:66:1d:f8:9b:d2:cb:a3:9e:d9:76: c6:60:75:0f:55:4f:9a:df:4e:60:98:25:e6:9e:82:c5:a9:fc: e3:94:c7:9f:a7:ed:b5:fa:ad:76:93:0a:7a:e7:0d:6b:34:1e: c1:dd:51:26:af:4f:c9:42:c0:cd:6a:8e:c7:19:75:d2:d4:ae: 3e:aa:dc:2d:cc:a8:3c:e5:10:84:f1:b5:68:f8:e5:90:f1:f0: ac:d6:7f:55:95:38:3f:0d:0e:7c:d8:de:82:f3:3e:03:80:8a: c9:35:8f:94:c9:d1:08:ae:20:4c:b1:41:3a:c7:5d:b3:ba:7f: a9:17:55:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQUISztkctUdxvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk Yzk1ZDNmM2MtYWIxYy00YzFmLWJlNWItOWY3Yjc3YjQ3NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D50Eo97LnDC6eWiy3qf4BHKP/wHbYjCoiZE EvD/qzAEtKRPa1jC92X0AVwmNUzEdxDU6t+8dd85ZgyvXEZ/A/TeL1qgEN471sI9 hwF7Ve+sPpfGry0iT9JgCPqx/nnINEhgCHY7NMFSwIjiMtiB82P9fUU2mAz/J7Al J4FOHp9JZraSoTEvqh4kn8Vod5UeVxP4JIUWhwi7F+w8MfeLBgSpqcfdX0TvK0wf 8/y9L8TB2k3U3sFzR3UCGMk0OC0Gf5rcwfbUco/YFY12Ie1/CR0/nT6ebHWpq9vK hkXc4bNpT4V1yIspOCKuifL3jVTbPqLRpdXOkOx4osOfJIVj7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/z2gUYb0X6vWWYwoOOYHbuJoJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjRkNzJhYTQtZDc5OS0z ZTU3LWEzNzgtZWUzNTY4MGIyYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkcy5cN4jS0pJYepB1qXpyg1LEIs9xQJj5xr3HlSDUblVIeDUDlBZqS Z8Pnxsgcic4ncVEk+aqfSTIc8Dy4GfenJ2ue80/tlixq6zbYXEJKu9CyA7hotcDl o720w0lcvtsAKriR40oZH5o7uXc8eOQE3rArx+HsSoowI0hY0Z6KzXZKUa9/Zh34 m9LLo57ZdsZgdQ9VT5rfTmCYJeaegsWp/OOUx5+n7bX6rXaTCnrnDWs0HsHdUSav T8lCwM1qjscZddLUrj6q3C3MqDzlEITxtWj45ZDx8KzWf1WVOD8NDnzY3oLzPgOA isk1j5TJ0QiuIEyxQTrHXbO6f6kXVb0= -----END CERTIFICATE-----Generated at Fri Nov 22 02:10:49 2024 by rpki-client on console-fra.rpki-client.org