$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0600c221-3a11-35b5-aef9-d40deed1184d.roa File: 0600c221-3a11-35b5-aef9-d40deed1184d.roa (raw, json) Hash identifier: Y0iZGT54U7EEcnO4ub2BXO+qSj+cWLGT3Qz/a0fnZFM= Subject key identifier: 9C:3B:62:A5:6B:0D:01:DB:A7:B6:10:CF:53:F8:D3:2B:8C:17:21:A8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847D4049F3CBA1EEE880C75FBC8 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0600c221-3a11-35b5-aef9-d40deed1184d.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 209854 IP address blocks: 136.0.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:9f:3c:ba:1e:ee:88:0c:75:fb:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=b7c9ef9f-c540-4c75-b4c1-ebcc2e1df6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:05:39:a8:4f:47:d4:21:6d:ec:b3:f9:ee: 24:0d:aa:e3:37:cb:9b:c9:3d:50:89:6d:06:be:af: ab:82:3c:42:51:af:84:9b:7b:ba:14:3f:e7:6d:e8: c8:70:58:cc:67:65:c4:83:35:ea:d6:90:9b:34:50: fc:20:5d:e9:33:e8:57:46:38:29:02:b3:d8:14:48: eb:21:96:2e:51:88:c2:35:9f:02:d3:22:f9:66:4d: be:37:d9:bc:3c:eb:95:94:a7:1a:96:7e:39:78:4e: 61:06:9e:65:2a:27:ab:f6:db:8e:3b:aa:e9:76:30: f7:ce:e3:b4:54:e6:48:60:34:4d:27:4b:5c:87:17: 1d:8d:ef:1d:0d:65:e4:90:25:76:24:42:6b:6c:5b: 2d:9d:cf:80:4b:6c:8a:03:56:78:8c:c7:c8:48:26: 48:43:cc:16:be:65:4e:90:27:92:12:55:f4:fb:8f: cb:71:da:d0:02:78:8b:e3:eb:45:d0:26:0c:fd:fa: 46:7d:61:9f:36:0a:bf:ae:f2:19:5a:20:c3:55:74: 14:ce:30:c1:07:51:7d:34:83:b6:7f:52:b1:12:bd: d9:9e:5c:fe:d6:be:c8:1a:a9:91:b8:d8:b3:6b:c6: 01:9f:08:1e:aa:db:6d:58:a1:fa:51:9e:b1:eb:7a: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3B:62:A5:6B:0D:01:DB:A7:B6:10:CF:53:F8:D3:2B:8C:17:21:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0600c221-3a11-35b5-aef9-d40deed1184d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8a:30:ea:52:ee:9e:a5:d5:e8:91:cb:00:49:17:96:dd:5f: 84:65:79:da:36:b5:7a:c8:08:86:c4:49:43:c1:35:bb:e2:53: c9:4a:75:e9:ca:5f:1e:a7:48:df:a0:fe:d2:05:c0:28:e5:58: 2e:db:0b:a9:c9:d8:34:93:69:c8:e0:75:ed:8e:b0:ec:a0:4c: f2:08:3c:cc:6f:d1:e8:68:f1:d8:07:af:67:e7:e9:72:b0:fa: f2:02:75:1c:ef:b7:1f:fc:7e:5e:53:29:0d:bb:79:4a:3d:90: b3:a9:86:92:e6:40:38:a8:77:c8:a5:5d:b1:d9:c3:6c:8a:bc: d1:c8:5d:cd:bf:93:a3:5b:a3:84:c1:cf:c4:cd:17:e9:fd:69: 3c:46:4a:e5:e4:c7:70:f0:61:28:4b:5a:0b:1e:0d:b7:f7:30: 75:e3:ea:d5:39:4f:15:1e:36:82:5c:94:1f:16:8b:b6:fa:5a: 25:32:32:e4:86:e2:7c:55:0c:ff:88:82:de:df:c8:27:40:0e: 77:d5:c9:f4:39:38:2c:c5:f6:2f:e7:c6:4e:f8:e2:6f:d7:be: 05:e3:20:53:d4:38:e5:7d:34:ec:cd:5e:82:04:58:e2:de:fb: c1:d7:51:5a:3a:fb:7c:30:bc:bc:b0:b3:d0:c7:92:71:51:69: 7b:c4:3f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJ88uh7uiAx1+8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk YjdjOWVmOWYtYzU0MC00Yzc1LWI0YzEtZWJjYzJlMWRmNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpUFOahPR9Qhbeyz+e4kDarjN8ubyT1QiW0G vq+rgjxCUa+Em3u6FD/nbejIcFjMZ2XEgzXq1pCbNFD8IF3pM+hXRjgpArPYFEjr IZYuUYjCNZ8C0yL5Zk2+N9m8POuVlKcaln45eE5hBp5lKier9tuOO6rpdjD3zuO0 VOZIYDRNJ0tchxcdje8dDWXkkCV2JEJrbFstnc+AS2yKA1Z4jMfISCZIQ8wWvmVO kCeSElX0+4/LcdrQAniL4+tF0CYM/fpGfWGfNgq/rvIZWiDDVXQUzjDBB1F9NIO2 f1KxEr3Znlz+1r7IGqmRuNiza8YBnwgeqtttWKH6UZ6x63pb/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw7YqVrDQHbp7YQz1P40yuMFyGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDYwMGMyMjEtM2ExMS0z NWI1LWFlZjktZDQwZGVlZDExODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2KMOpS7p6l1eiRywBJF5bdX4Rledo2tXrICIbESUPBNbviU8lKdenK Xx6nSN+g/tIFwCjlWC7bC6nJ2DSTacjgde2OsOygTPIIPMxv0eho8dgHr2fn6XKw +vICdRzvtx/8fl5TKQ27eUo9kLOphpLmQDiod8ilXbHZw2yKvNHIXc2/k6Nbo4TB z8TNF+n9aTxGSuXkx3DwYShLWgseDbf3MHXj6tU5TxUeNoJclB8Wi7b6WiUyMuSG 4nxVDP+Igt7fyCdADnfVyfQ5OCzF9i/nxk744m/XvgXjIFPUOOV9NOzNXoIEWOLe +8HXUVo6+3wwvLyws9DHknFRaXvEP9c= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:52 2024 by rpki-client on console-fra.rpki-client.org