$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fc91350-ef91-3654-98e3-29ec6efe2199.roa File: 2fc91350-ef91-3654-98e3-29ec6efe2199.roa (raw, json) Hash identifier: piXYz/oLOZFv0sFptwD9fDK9/CAM2GFsoeZ2eQi7EuA= Subject key identifier: 55:5E:8B:6A:3F:EC:3D:56:E8:9D:2A:0C:87:7B:A4:F1:69:92:B6:D7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584585F63AC0BF97637C549C0480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fc91350-ef91-3654-98e3-29ec6efe2199.roa Signing time: Fri 12 Apr 2024 17:24:42 +0000 ROA not before: Fri 12 Apr 2024 17:24:42 +0000 ROA not after: Thu 11 Jul 2024 17:24:42 +0000 asID: 44477 IP address blocks: 136.0.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:85:f6:3a:c0:bf:97:63:7c:54:9c:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 12 17:24:42 2024 GMT Not After : Jul 11 17:24:42 2024 GMT Subject: CN=1c9dcf90-c619-403d-b49d-430b7792cc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:69:d5:c8:e2:46:c6:de:3d:fb:7c:1e:92: 9a:8e:38:6e:01:f0:c8:40:14:73:4c:28:73:27:d8: d8:e5:ba:a6:12:0f:80:7c:3b:ab:42:4c:fc:29:9b: 20:da:77:18:58:2f:92:fb:8f:b2:e4:9d:7a:2a:fc: df:49:81:60:eb:cb:0f:68:77:53:d0:6f:12:df:e8: b9:99:af:35:ec:57:26:13:31:4f:ba:ed:76:ae:ed: e8:34:51:e7:26:a2:c1:19:b3:ff:fa:97:b9:8a:19: 55:0b:2a:5b:f8:d8:6c:74:13:bf:84:58:c6:87:f6: 60:aa:4c:2e:75:2d:49:60:b7:88:49:88:fc:8a:d5: 0e:7a:38:dd:5d:61:33:81:0f:4a:f6:c8:bc:22:da: 1e:f8:8a:00:84:cb:fb:87:7e:02:a0:be:d9:9a:26: 30:5b:3e:bf:82:03:08:f3:c6:a8:15:bd:e2:b9:fd: 57:40:d9:ae:37:91:6f:c5:ad:c8:83:ec:75:9f:f2: 96:d9:d7:ed:2d:f2:1c:20:ab:0f:05:2b:73:45:af: 40:32:ac:8a:bf:99:9c:1c:cf:a6:a3:84:e9:1f:21: f7:49:93:86:2b:c2:88:d6:6c:41:73:b6:db:97:20: 6b:c5:ed:a7:27:a9:01:ee:61:16:a6:6d:56:d1:a4: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5E:8B:6A:3F:EC:3D:56:E8:9D:2A:0C:87:7B:A4:F1:69:92:B6:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fc91350-ef91-3654-98e3-29ec6efe2199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:11:18:6b:dc:1b:43:3e:9f:dc:79:21:3d:b9:ba:d9:76:ab: 5c:9f:01:41:6e:c8:90:69:cd:4e:f0:7a:f4:59:0e:10:31:8b: e9:10:d6:5c:f8:42:0c:5e:5b:88:d2:8c:49:c6:fd:c5:7b:0d: be:1d:4a:40:23:54:b4:15:65:30:9a:e5:a0:07:39:5f:0b:69: 1e:bd:eb:3d:25:88:15:ce:da:ae:8a:ae:2c:03:58:e1:b7:46: df:ca:df:2c:3f:6f:97:ee:45:00:6a:ec:aa:19:61:7e:e2:cd: 64:c6:93:16:21:f0:37:fd:4f:bf:0c:1b:7b:f9:b3:65:c6:82: 5a:ed:47:2e:e8:60:02:60:44:a7:31:35:c8:35:0e:63:b1:73: ee:33:d5:d2:4c:d0:db:22:1b:af:95:aa:2a:9f:d5:15:f6:92: 8b:11:b2:23:e0:51:86:00:55:7a:23:cc:a8:b1:61:45:0d:b7: 70:c5:24:17:5c:8f:e7:5d:d8:3e:91:61:d5:f9:10:59:1b:bb: 7e:ab:5a:d0:14:11:a9:eb:42:e4:95:12:0f:04:24:65:70:5e: a9:a5:19:15:07:7e:21:a5:be:c6:a1:e8:89:1a:e1:23:dd:25: 70:61:63:22:cd:37:6b:2e:ca:06:71:e9:00:5e:d8:20:97:33: db:46:d6:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWF9jrAv5djfFScBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MDQxMjE3MjQ0MloXDTI0MDcxMTE3MjQ0MlowLzEtMCsGA1UEAxMk MWM5ZGNmOTAtYzYxOS00MDNkLWI0OWQtNDMwYjc3OTJjYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnhp1cjiRsbePft8HpKajjhuAfDIQBRzTChz J9jY5bqmEg+AfDurQkz8KZsg2ncYWC+S+4+y5J16KvzfSYFg68sPaHdT0G8S3+i5 ma817FcmEzFPuu12ru3oNFHnJqLBGbP/+pe5ihlVCypb+NhsdBO/hFjGh/Zgqkwu dS1JYLeISYj8itUOejjdXWEzgQ9K9si8Itoe+IoAhMv7h34CoL7ZmiYwWz6/ggMI 88aoFb3iuf1XQNmuN5Fvxa3Ig+x1n/KW2dftLfIcIKsPBStzRa9AMqyKv5mcHM+m o4TpHyH3SZOGK8KI1mxBc7bblyBrxe2nJ6kB7mEWpm1W0aQO9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVei2o/7D1W6J0qDId7pPFpkrbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmZjOTEzNTAtZWY5MS0z NjU0LTk4ZTMtMjllYzZlZmUyMTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQRGGvcG0M+n9x5IT25utl2q1yfAUFuyJBpzU7wevRZDhAxi+kQ1lz4 QgxeW4jSjEnG/cV7Db4dSkAjVLQVZTCa5aAHOV8LaR696z0liBXO2q6KriwDWOG3 Rt/K3yw/b5fuRQBq7KoZYX7izWTGkxYh8Df9T78MG3v5s2XGglrtRy7oYAJgRKcx Ncg1DmOxc+4z1dJM0NsiG6+Vqiqf1RX2kosRsiPgUYYAVXojzKixYUUNt3DFJBdc j+dd2D6RYdX5EFkbu36rWtAUEanrQuSVEg8EJGVwXqmlGRUHfiGlvsah6Ika4SPd JXBhYyLNN2suygZx6QBe2CCXM9tG1uI= -----END CERTIFICATE-----Generated at Sun May 19 17:54:26 2024 by rpki-client on console-fra.rpki-client.org