$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3f36a8e9-80f6-3a48-88ce-445fc797e0a0.roa File: 3f36a8e9-80f6-3a48-88ce-445fc797e0a0.roa (raw, json) Hash identifier: i3DxDtR0icZvNsieCx4VWEKEgOaAiPVvXTRBwPsHYLk= Subject key identifier: 98:2C:44:D4:1E:36:DC:28:13:AB:47:FB:13:C5:FC:7C:B0:48:2C:F7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847CFD4DE3977FFC6682AE9E640 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3f36a8e9-80f6-3a48-88ce-445fc797e0a0.roa Signing time: Fri 08 Nov 2024 14:00:39 +0000 ROA not before: Fri 08 Nov 2024 14:00:39 +0000 ROA not after: Thu 06 Feb 2025 14:00:39 +0000 asID: 18779 IP address blocks: 136.0.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cf:d4:de:39:77:ff:c6:68:2a:e9:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 8 14:00:39 2024 GMT Not After : Feb 6 14:00:39 2025 GMT Subject: CN=32dbde42-fbae-4a06-872d-3428d2898b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:c4:bb:1b:1b:02:bc:83:67:82:3d:19:65: 32:d8:d6:18:4c:c4:63:3c:25:fe:8d:07:28:f1:3c: 44:5e:98:f7:76:96:d4:ff:fc:89:1d:1b:ee:d7:ad: fa:90:af:43:35:03:ed:8e:59:e5:d2:89:7b:03:fb: c4:f3:75:d6:3d:a7:5d:ff:c5:f6:4a:dd:2f:e0:36: 53:48:dc:a3:05:e3:57:f7:f7:50:8b:50:73:07:bd: 96:18:26:37:97:a2:b7:60:a0:d5:62:b0:22:c1:42: a5:bd:3d:bd:d2:c5:3b:4c:53:99:3c:15:2a:a8:03: 20:5e:59:82:b5:bc:f4:2f:82:13:00:09:13:92:f1: 06:40:17:b4:b4:18:e6:9d:fc:4b:2b:68:80:00:2f: 91:ac:48:22:0c:ac:1e:71:25:79:14:a9:3c:36:9a: 1c:96:83:d9:4b:ef:cf:07:de:fe:c7:bb:5b:89:61: b4:e6:e5:a3:da:79:b8:4a:e0:09:63:14:29:53:d0: 71:3a:97:4a:a2:28:a6:e1:1e:c9:f3:49:81:60:75: 53:1a:e3:a6:31:ec:7a:9e:83:97:b8:d5:c5:a8:54: 25:9b:1e:f2:e6:26:a1:18:83:89:14:58:fe:ed:28: c2:b5:c6:79:b2:bd:cb:3a:8f:8e:ab:de:89:44:f5: ce:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2C:44:D4:1E:36:DC:28:13:AB:47:FB:13:C5:FC:7C:B0:48:2C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3f36a8e9-80f6-3a48-88ce-445fc797e0a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ce:39:22:bd:00:fb:6a:e2:c0:8b:48:56:55:9e:14:23:0f: cd:05:c9:4d:a6:af:dc:50:b7:aa:d3:8e:bb:f1:ab:c7:c9:9d: e1:96:b4:85:23:bc:cb:9a:a2:8e:94:8d:b5:cd:54:20:08:40: 67:f5:c0:98:b0:95:a0:5a:44:7a:20:6b:e9:7c:81:29:c0:cf: 33:5c:6a:d3:b3:b9:c3:ce:32:72:2d:dd:03:c1:4e:ba:7d:5c: d1:a8:8f:b1:05:68:35:65:6b:fb:22:5d:bf:15:08:79:e2:a1: 3f:b8:6b:05:02:c7:64:99:bb:0d:6c:b9:e5:80:fc:d4:db:cd: c4:a4:7b:49:e5:50:9b:97:15:ad:79:b6:74:b6:a8:5c:81:92: b8:8d:80:dc:fb:ae:81:73:99:f0:2f:db:23:db:b3:a6:e4:77: 85:a9:a1:0f:a1:4b:b6:47:4c:e3:e4:0a:eb:e1:8b:47:ed:9c: da:0c:5e:0f:cb:71:a5:f9:8e:18:5f:30:70:ca:72:7a:27:36: 85:fb:0c:a6:56:2a:38:d6:c8:b7:60:22:da:e9:f5:4b:52:80: d5:81:0f:25:93:58:f5:f0:6e:f4:45:ef:95:9c:fb:55:3b:4f: 45:81:e1:d4:b9:6d:09:c2:65:65:38:77:9e:66:c4:b6:59:4f: e4:0a:48:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1N45d//GaCrp5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk MzJkYmRlNDItZmJhZS00YTA2LTg3MmQtMzQyOGQyODk4YjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBrEuxsbAryDZ4I9GWUy2NYYTMRjPCX+jQco 8TxEXpj3dpbU//yJHRvu1636kK9DNQPtjlnl0ol7A/vE83XWPadd/8X2St0v4DZT SNyjBeNX9/dQi1BzB72WGCY3l6K3YKDVYrAiwUKlvT290sU7TFOZPBUqqAMgXlmC tbz0L4ITAAkTkvEGQBe0tBjmnfxLK2iAAC+RrEgiDKwecSV5FKk8NpocloPZS+/P B97+x7tbiWG05uWj2nm4SuAJYxQpU9BxOpdKoiim4R7J80mBYHVTGuOmMex6noOX uNXFqFQlmx7y5iahGIOJFFj+7SjCtcZ5sr3LOo+Oq96JRPXOpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgsRNQeNtwoE6tH+xPF/HywSCz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2YzNmE4ZTktODBmNi0z YTQ4LTg4Y2UtNDQ1ZmM3OTdlMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbOOSK9APtq4sCLSFZVnhQjD80FyU2mr9xQt6rTjrvxq8fJneGWtIUj vMuaoo6UjbXNVCAIQGf1wJiwlaBaRHoga+l8gSnAzzNcatOzucPOMnIt3QPBTrp9 XNGoj7EFaDVla/siXb8VCHnioT+4awUCx2SZuw1sueWA/NTbzcSke0nlUJuXFa15 tnS2qFyBkriNgNz7roFzmfAv2yPbs6bkd4WpoQ+hS7ZHTOPkCuvhi0ftnNoMXg/L caX5jhhfMHDKcnonNoX7DKZWKjjWyLdgItrp9UtSgNWBDyWTWPXwbvRF75Wc+1U7 T0WB4dS5bQnCZWU4d55mxLZZT+QKSL8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:30 2024 by rpki-client on console-ams.rpki-client.org