$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0b948210-4c25-326a-b134-c732be4a184b.roa File: 0b948210-4c25-326a-b134-c732be4a184b.roa (raw, json) Hash identifier: 6OMmfmMxnYprXGb8WH6/ruSZ7v3YqaNxUpbIhpTNAn8= Subject key identifier: 7B:E2:64:81:0D:51:45:EF:C3:A5:F3:A9:E3:03:06:A5:64:AE:B1:B0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847CFD4DFA1F40CEB8765928020 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0b948210-4c25-326a-b134-c732be4a184b.roa Signing time: Fri 08 Nov 2024 14:00:39 +0000 ROA not before: Fri 08 Nov 2024 14:00:39 +0000 ROA not after: Thu 06 Feb 2025 14:00:39 +0000 asID: 18779 IP address blocks: 136.0.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:d4:df:a1:f4:0c:eb:87:65:92:80:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 8 14:00:39 2024 GMT Not After : Feb 6 14:00:39 2025 GMT Subject: CN=d547bbf1-3ba7-4b66-9610-ae1a91b98b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:b6:49:ba:0c:bb:b6:e6:bf:4b:46:37:ba: 7e:20:9e:11:ea:29:91:8b:7a:3d:26:17:69:62:11: 30:ef:8d:9f:f7:85:98:0e:b1:eb:bf:63:20:a0:e1: 9a:f0:d8:61:da:ae:8b:83:41:fb:ec:a0:50:b1:fd: 23:d9:a5:ef:63:51:36:b3:98:30:35:5b:22:ac:ea: d0:db:24:4a:8f:9b:59:2f:07:bc:c5:15:84:5e:8d: 28:25:3a:c8:8b:c4:92:7b:25:b7:51:7b:af:a5:eb: c8:88:f6:68:61:46:29:f2:e0:4f:c4:e8:45:b5:76: 2c:ac:e5:07:ec:33:cf:a3:10:80:9f:48:eb:6f:5c: 37:69:25:12:fd:46:c0:50:39:75:86:9c:47:a3:ec: ac:66:d6:d0:76:ca:3a:4d:bb:67:95:c5:03:3a:7e: 86:d4:37:65:4d:d8:a6:ad:7d:12:03:20:6f:68:32: 1a:59:37:5a:b6:76:cd:a6:62:c5:67:33:3e:20:19: c3:e6:0c:52:29:ac:04:9e:43:4d:bd:25:98:5d:b3: cc:02:25:fb:6d:d2:6c:50:2e:44:d6:cf:73:2f:70: a2:7c:ee:77:b0:66:a1:40:d2:66:8e:d1:26:8d:23: a2:a3:cc:27:62:68:24:78:d8:77:00:93:4d:ee:4b: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E2:64:81:0D:51:45:EF:C3:A5:F3:A9:E3:03:06:A5:64:AE:B1:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0b948210-4c25-326a-b134-c732be4a184b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9a:0a:78:8f:f1:29:42:87:dc:02:66:39:0d:10:a9:59:9f: 38:ed:a9:61:29:11:4e:99:87:f0:c5:19:b2:7c:92:77:e5:64: 8c:86:9a:18:2b:56:3d:53:56:d5:b1:6c:c8:a4:72:23:ad:68: 42:ee:6e:9d:1f:0f:ed:2f:9c:b6:1c:f7:dc:56:57:e0:5a:88: 0e:12:d6:73:57:3b:4d:ea:ad:71:19:30:8a:ae:7f:6f:49:78: ab:41:b6:41:92:30:69:f1:bb:41:ea:17:73:b0:f4:f0:3c:e9: f9:2d:35:36:18:aa:35:c4:e9:c4:27:82:46:74:c5:77:9b:18: 33:ab:2d:3b:1c:69:fe:cb:80:92:15:1a:d1:5b:dd:b1:b2:9a: 5c:af:00:67:42:a0:54:19:07:11:ac:30:1e:4f:d1:14:e0:97: c8:cb:8b:49:1d:c5:4b:09:23:da:ef:a4:fe:dc:47:90:5b:51: dc:20:9a:b7:78:ee:07:ac:98:7d:ab:3e:52:a4:88:2a:45:e5: 00:bf:a5:d9:bd:33:2a:35:9b:cf:f1:aa:e7:75:ce:50:f0:e5: f5:fe:50:36:17:b7:82:ae:a6:f0:f2:31:8f:7d:57:4d:5b:ce: f1:b9:9f:0b:d5:da:38:a0:e5:3c:a1:ff:51:04:73:0a:46:15: 68:70:0d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1N+h9Azrh2WSgCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk ZDU0N2JiZjEtM2JhNy00YjY2LTk2MTAtYWUxYTkxYjk4YjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnka2SboMu7bmv0tGN7p+IJ4R6imRi3o9Jhdp YhEw742f94WYDrHrv2MgoOGa8Nhh2q6Lg0H77KBQsf0j2aXvY1E2s5gwNVsirOrQ 2yRKj5tZLwe8xRWEXo0oJTrIi8SSeyW3UXuvpevIiPZoYUYp8uBPxOhFtXYsrOUH 7DPPoxCAn0jrb1w3aSUS/UbAUDl1hpxHo+ysZtbQdso6TbtnlcUDOn6G1DdlTdim rX0SAyBvaDIaWTdatnbNpmLFZzM+IBnD5gxSKawEnkNNvSWYXbPMAiX7bdJsUC5E 1s9zL3CifO53sGahQNJmjtEmjSOio8wnYmgkeNh3AJNN7kvj2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHviZIENUUXvw6XzqeMDBqVkrrGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGI5NDgyMTAtNGMyNS0z MjZhLWIxMzQtYzczMmJlNGExODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKaCniP8SlCh9wCZjkNEKlZnzjtqWEpEU6Zh/DFGbJ8knflZIyGmhgr Vj1TVtWxbMikciOtaELubp0fD+0vnLYc99xWV+BaiA4S1nNXO03qrXEZMIquf29J eKtBtkGSMGnxu0HqF3Ow9PA86fktNTYYqjXE6cQngkZ0xXebGDOrLTscaf7LgJIV GtFb3bGymlyvAGdCoFQZBxGsMB5P0RTgl8jLi0kdxUsJI9rvpP7cR5BbUdwgmrd4 7gesmH2rPlKkiCpF5QC/pdm9Myo1m8/xqud1zlDw5fX+UDYXt4KupvDyMY99V01b zvG5nwvV2jig5Tyh/1EEcwpGFWhwDRo= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:01 2024 by rpki-client on console-ams.rpki-client.org