$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1cd639af-8f1e-3131-a910-9bd92f4f9b6b.roa File: 1cd639af-8f1e-3131-a910-9bd92f4f9b6b.roa (raw, json) Hash identifier: 3h/cYA5otZZF1bQZM2Hqc2zjKwZQLQI5q56CWG+YMC0= Subject key identifier: 9F:E6:B9:DC:7C:FA:BE:74:72:74:42:4B:2D:B6:36:DB:DF:A2:16:40 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584792C8AA5E6AEEA1C1886227DB Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1cd639af-8f1e-3131-a910-9bd92f4f9b6b.roa Signing time: Thu 17 Oct 2024 17:12:17 +0000 ROA not before: Thu 17 Oct 2024 17:12:17 +0000 ROA not after: Wed 15 Jan 2025 18:12:17 +0000 asID: 9009 IP address blocks: 136.0.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:92:c8:aa:5e:6a:ee:a1:c1:88:62:27:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 17 17:12:17 2024 GMT Not After : Jan 15 18:12:17 2025 GMT Subject: CN=e534d774-37a2-43f4-838a-95e8b3eccc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:e7:fb:fe:32:a7:f1:15:e5:4e:36:a7:3d: 05:a2:06:eb:43:88:5a:2f:77:e7:58:dc:52:00:58: 89:72:64:7e:c1:f1:6b:bb:d0:16:24:a2:d0:c2:5f: b0:76:25:72:78:36:eb:4f:68:42:74:c0:80:f4:9d: d6:a7:44:bd:03:0d:57:7f:47:bb:73:82:75:c5:5b: 92:81:8b:c0:6e:83:c1:7f:9c:da:5e:bd:27:ba:b9: b0:49:16:3f:9c:ee:47:95:6f:f7:a7:af:4e:53:3f: 11:96:15:43:73:26:81:63:8a:d0:1e:64:f2:fc:21: ef:26:ee:7e:a9:8b:e9:53:e4:f0:13:65:ac:8a:1e: a8:e0:e2:41:8f:d0:99:3b:af:13:df:8f:b7:3b:30: b9:70:ca:88:13:be:02:f3:f0:c4:f4:9a:23:d7:b3: 39:02:c1:8f:89:e3:9f:55:be:d1:7c:dd:b3:e8:2e: 96:5b:a2:e0:e8:29:76:6c:58:99:db:8e:74:ac:12: 91:30:53:06:80:a1:f4:b4:41:bb:e9:82:61:1b:e5: f2:33:94:09:6b:fd:63:d9:35:ed:cb:42:2e:a1:79: 3c:59:00:d6:56:2c:7d:aa:8d:63:af:65:ef:27:98: 8f:45:3e:28:15:a7:2c:de:8e:50:74:08:9d:27:04: 40:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:B9:DC:7C:FA:BE:74:72:74:42:4B:2D:B6:36:DB:DF:A2:16:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1cd639af-8f1e-3131-a910-9bd92f4f9b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6f:36:8d:41:f8:a1:c4:25:ad:70:7f:4c:b1:19:bd:49:d4: c3:97:1e:2a:88:43:f9:3a:a1:bc:96:56:94:4e:fe:9d:d6:59: 53:58:4d:de:fd:d7:ab:a5:91:f7:e5:9b:4c:d7:f9:49:7e:6e: ba:87:b5:74:f9:66:65:f1:a5:86:f3:60:5d:f5:00:0c:52:e4: b0:c2:dd:55:b1:c8:f2:a0:10:d2:02:70:d8:96:42:73:8d:85: d6:9f:1a:2d:f2:e0:0c:2b:95:fb:d1:69:b5:82:78:e5:cd:5f: 11:bc:50:11:61:6d:51:c6:f3:95:46:e0:dd:6f:69:14:ce:fd: f6:93:fa:86:5e:68:ab:c2:60:9c:2c:93:29:45:e2:80:22:c0: 03:f0:e6:8e:0b:40:0c:1c:0f:e5:95:45:2c:31:a9:21:36:8b: 18:00:33:c8:cb:04:74:91:e6:a2:15:26:3b:f4:d3:d8:d8:b3: 96:a2:35:b7:d2:3f:c1:24:8f:7e:f3:a9:e0:b3:7e:02:54:f8: 8c:51:58:76:01:42:42:bf:f6:32:f6:d0:66:84:e1:39:f5:5c: e9:f9:fa:20:65:98:1d:d8:2c:02:90:d8:4c:ac:70:a7:00:c5: d5:94:e8:d5:16:21:13:db:d9:1a:de:9d:01:c3:6e:d9:80:cd: 5a:ba:69:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSyKpeau6hwYhiJ9swDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAxNzE3MTIxN1oXDTI1MDExNTE4MTIxN1owLzEtMCsGA1UEAxMk ZTUzNGQ3NzQtMzdhMi00M2Y0LTgzOGEtOTVlOGIzZWNjYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkTn+/4yp/EV5U42pz0FogbrQ4haL3fnWNxS AFiJcmR+wfFru9AWJKLQwl+wdiVyeDbrT2hCdMCA9J3Wp0S9Aw1Xf0e7c4J1xVuS gYvAboPBf5zaXr0nurmwSRY/nO5HlW/3p69OUz8RlhVDcyaBY4rQHmTy/CHvJu5+ qYvpU+TwE2Wsih6o4OJBj9CZO68T34+3OzC5cMqIE74C8/DE9Joj17M5AsGPieOf Vb7RfN2z6C6WW6Lg6Cl2bFiZ2450rBKRMFMGgKH0tEG76YJhG+XyM5QJa/1j2TXt y0IuoXk8WQDWVix9qo1jr2XvJ5iPRT4oFacs3o5QdAidJwRAUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/mudx8+r50cnRCSy22NtvfohZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWNkNjM5YWYtOGYxZS0z MTMxLWE5MTAtOWJkOTJmNGY5YjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpvNo1B+KHEJa1wf0yxGb1J1MOXHiqIQ/k6obyWVpRO/p3WWVNYTd79 16ulkfflm0zX+Ul+brqHtXT5ZmXxpYbzYF31AAxS5LDC3VWxyPKgENICcNiWQnON hdafGi3y4AwrlfvRabWCeOXNXxG8UBFhbVHG85VG4N1vaRTO/faT+oZeaKvCYJws kylF4oAiwAPw5o4LQAwcD+WVRSwxqSE2ixgAM8jLBHSR5qIVJjv009jYs5aiNbfS P8Ekj37zqeCzfgJU+IxRWHYBQkK/9jL20GaE4Tn1XOn5+iBlmB3YLAKQ2EyscKcA xdWU6NUWIRPb2RrenQHDbtmAzVq6aTA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:29 2024 by rpki-client on console-ams.rpki-client.org