$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa File: c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa (raw, json) Hash identifier: MGpyuMT4QJ9WLlCMraIP5dxTgO+JO4dvGdvpKnDz7L8= Subject key identifier: 3E:33:32:0A:37:7D:E2:87:03:89:D9:8F:DC:FC:56:E2:80:95:9C:E4 Certificate issuer: /CN=71d08692-7de1-4973-b7ae-5a0397e6b60c Certificate serial: 010D0C9F4328584761718DF57E31E900DAEBE880 Authority key identifier: B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa Signing time: Mon 30 Sep 2024 01:00:31 +0000 ROA not before: Mon 30 Sep 2024 01:00:31 +0000 ROA not after: Sun 29 Dec 2024 02:00:31 +0000 asID: 398803 IP address blocks: 136.175.44.0/22 maxlen: 24 2602:fd08::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:61:71:8d:f5:7e:31:e9:00:da:eb:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d08692-7de1-4973-b7ae-5a0397e6b60c Validity Not Before: Sep 30 01:00:31 2024 GMT Not After : Dec 29 02:00:31 2024 GMT Subject: CN=63cd7239-36cf-4ef5-a062-327dde68a009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d0:e5:b8:a1:ce:ad:f8:50:1f:50:d3:5f:f0: 99:6a:8f:48:d0:a3:89:17:c2:b8:26:a3:36:aa:48: 9e:97:ee:0f:f5:ec:df:fc:fe:ae:5d:bb:09:42:21: aa:55:55:ac:44:66:57:80:3a:9a:7c:0d:0c:85:4c: 30:a3:e7:64:49:ee:df:81:80:6a:25:2e:7f:a9:22: 85:e5:48:89:36:26:10:0b:45:18:78:41:32:4c:b7: 81:a0:97:cc:e6:e0:89:03:46:fc:a8:d4:61:f8:1d: 1b:d9:f1:df:d7:9e:68:22:39:32:25:9c:76:f5:7f: 7e:9c:b8:4f:4c:b5:d4:84:2e:d0:94:71:bc:07:b3: 20:10:41:38:60:35:a3:d2:b8:9a:5d:b8:52:36:d5: 37:ee:ed:00:1c:22:e2:7a:78:b5:46:d7:f0:5a:21: 3e:d5:4a:c2:19:e1:f3:2b:e1:00:62:7c:40:d0:3b: 15:71:d7:91:90:ce:eb:a5:25:ee:09:4f:fb:18:ef: d3:23:72:1e:4b:52:3d:60:08:bb:86:55:5c:96:26: 02:04:8e:f0:ad:38:8a:8b:7c:08:e6:d9:1b:bd:45: a0:e0:ed:5b:d9:b7:a2:7d:75:a1:c5:21:18:d4:52: 42:75:de:07:4b:ab:ee:71:37:35:d3:0c:16:e9:20: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:33:32:0A:37:7D:E2:87:03:89:D9:8F:DC:FC:56:E2:80:95:9C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl X509v3 Authority Key Identifier: keyid:B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer sbgp-ipAddrBlock: critical IPv4: 136.175.44.0/22 IPv6: 2602:fd08::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7f:9e:14:cf:28:d4:c0:58:14:28:2a:45:e6:01:6d:29:cd: 10:3d:5b:b4:cd:f2:cb:9c:33:65:01:c0:ea:d5:f9:0e:74:04: ce:8f:f1:a8:71:7c:1f:d9:e3:1d:51:e9:72:48:ee:41:8c:00: 71:3d:26:5c:0f:78:ca:30:7f:1c:78:2b:75:04:16:b2:a7:86: 3e:8a:7e:c7:bb:1c:3c:dd:83:37:e2:af:44:90:a0:e5:d8:00: e2:c1:98:81:10:bc:c3:48:d2:fe:c6:a0:c3:06:72:3e:d3:87: 13:d7:66:53:e1:6f:93:74:c8:49:01:2b:43:a5:f0:6c:74:2c: c4:55:53:b1:96:ce:ed:bd:75:75:a2:c8:d0:1e:9d:cb:5e:1a: 13:08:0a:90:01:3f:03:22:d4:97:fc:76:03:9e:72:fd:54:62: b7:7b:cc:50:be:4e:41:f0:4d:f0:91:e7:85:6e:d0:fe:0d:c4: c2:00:a4:20:86:59:fc:ec:3c:17:52:92:b1:3b:09:fe:70:aa: 8b:71:85:dd:18:21:73:04:6d:c5:3c:a4:ce:2f:4e:ce:b8:5d: 30:3d:7e:db:17:e0:c7:0c:60:ad:2b:4d:af:6e:70:3e:20:f2: cf:0f:eb:5e:d9:29:51:72:bc:75:76:13:89:01:6c:52:3e:af: ab:fe:68:75 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEdhcY31fjHpANrr6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFkMDg2OTItN2RlMS00OTczLWI3YWUtNWEwMzk3ZTZi NjBjMB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NjNjZDcyMzktMzZjZi00ZWY1LWEwNjItMzI3ZGRlNjhhMDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dDluKHOrfhQH1DTX/CZao9I0KOJF8K4JqM2 qkiel+4P9ezf/P6uXbsJQiGqVVWsRGZXgDqafA0MhUwwo+dkSe7fgYBqJS5/qSKF 5UiJNiYQC0UYeEEyTLeBoJfM5uCJA0b8qNRh+B0b2fHf155oIjkyJZx29X9+nLhP TLXUhC7QlHG8B7MgEEE4YDWj0riaXbhSNtU37u0AHCLieni1RtfwWiE+1UrCGeHz K+EAYnxA0DsVcdeRkM7rpSXuCU/7GO/TI3IeS1I9YAi7hlVcliYCBI7wrTiKi3wI 5tkbvUWg4O1b2beifXWhxSEY1FJCdd4HS6vucTc10wwW6SC5wQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFD4zMgo3feKHA4nZj9z8VuKAlZzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MWQw ODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAzOTdlNmI2MGMvYzNjZmJhYmItNDA1NS0z ZDhmLTg3ZTktMzM5YTIyZjQ2MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzFkMDg2OTItN2RlMS00OTczLWI3 YWUtNWEwMzk3ZTZiNjBjLzcxZDA4NjkyLTdkZTEtNDk3My1iN2FlLTVhMDM5N2U2 YjYwYy5jcmwwHwYDVR0jBBgwFoAUsY6RxJzyR2i+Iqp+7ZLAkU6999swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MWQwODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAz OTdlNmI2MGMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCiK8sMA4E AgACMAgDBgQmAv0IADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFf54UzyjUwFgUKCpF5gFtKc0QPVu0zfLL nDNlAcDq1fkOdATOj/GocXwf2eMdUelySO5BjABxPSZcD3jKMH8ceCt1BBayp4Y+ in7Huxw83YM34q9EkKDl2ADiwZiBELzDSNL+xqDDBnI+04cT12ZT4W+TdMhJAStD pfBsdCzEVVOxls7tvXV1osjQHp3LXhoTCAqQAT8DItSX/HYDnnL9VGK3e8xQvk5B 8E3wkeeFbtD+DcTCAKQghln87DwXUpKxOwn+cKqLcYXdGCFzBG3FPKTOL07OuF0w PX7bF+DHDGCtK02vbnA+IPLPD+te2SlRcrx1dhOJAWxSPq+r/mh1 -----END CERTIFICATE-----Generated at Sun Nov 24 15:58:17 2024 by rpki-client on console-ams.rpki-client.org