$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/50c9b287-cec7-3ddf-8fd8-cf0dd36be2d1.roa File: 50c9b287-cec7-3ddf-8fd8-cf0dd36be2d1.roa (raw, json) Hash identifier: utQFfJvGwVD0D1nNElWViI6o9RN2GiHNghjfGo1j6WI= Subject key identifier: 5F:54:61:C7:16:60:D7:4B:47:7C:1B:8B:0C:9E:5B:78:5C:BD:77:A0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584585F63352899D8CC640D39F00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/50c9b287-cec7-3ddf-8fd8-cf0dd36be2d1.roa Signing time: Fri 12 Apr 2024 17:24:39 +0000 ROA not before: Fri 12 Apr 2024 17:24:39 +0000 ROA not after: Thu 11 Jul 2024 17:24:39 +0000 asID: 5650 IP address blocks: 136.0.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:85:f6:33:52:89:9d:8c:c6:40:d3:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 12 17:24:39 2024 GMT Not After : Jul 11 17:24:39 2024 GMT Subject: CN=948e4335-43f7-4173-8951-c1d2ddd54801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:10:21:67:51:a6:21:25:87:2c:37:d4:80: af:93:23:74:5e:e7:0a:95:96:25:10:b8:af:fd:45: 8a:30:22:24:48:55:13:9b:96:76:e0:ac:9d:2d:ea: 1f:c3:dc:fe:fc:d1:62:15:4c:40:d9:17:13:d2:1b: 25:c5:e1:dc:38:cc:1a:04:c6:8e:50:91:7a:62:02: 32:70:3c:62:35:10:fd:c0:83:5b:cd:66:44:42:aa: 22:62:be:fd:d0:03:32:b5:0e:1e:73:b8:7b:ff:8f: 55:d1:6a:6f:21:7a:6f:d2:82:69:0d:e9:b0:cc:99: 7d:c3:b8:98:cf:60:22:01:22:dd:cb:e3:7c:6d:3c: 72:dd:84:c7:08:f4:e6:b5:46:22:0c:f2:60:ce:50: 98:63:e1:dd:ba:1e:2a:79:9c:55:e1:eb:ff:a0:af: 96:b7:7e:7c:ee:f4:82:68:a6:86:50:d8:aa:a0:93: a1:36:57:3f:f9:e1:f2:30:21:b4:13:c4:15:e6:f8: 7d:8f:c8:eb:f3:11:21:9d:7e:2a:8a:35:0c:27:cd: 42:5c:55:e4:f7:dc:21:e9:93:95:2d:43:b3:e6:4f: 83:79:c6:88:23:f6:0b:46:80:5a:c9:5e:41:ca:c9: 07:6c:6b:2e:27:f6:90:7a:40:6c:c2:cf:d6:4b:99: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:54:61:C7:16:60:D7:4B:47:7C:1B:8B:0C:9E:5B:78:5C:BD:77:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/50c9b287-cec7-3ddf-8fd8-cf0dd36be2d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f2:bc:10:5b:0b:0d:8a:0a:e6:ea:10:4e:02:7f:36:d6:e1: 16:d2:03:47:a4:dc:e4:0c:4f:f1:8b:f1:3f:36:fa:17:aa:c1: 55:e1:cb:56:6c:31:55:40:28:18:b5:bc:10:1e:c1:9a:26:aa: aa:86:f1:a0:14:17:55:f6:55:d9:d7:55:f3:c7:25:a4:13:39: 31:96:07:8d:98:07:0b:5a:f4:fb:32:06:cd:60:f7:65:b6:a6: 7d:2c:66:ab:14:91:a9:5a:ef:04:3c:4f:05:5d:ce:2c:8f:0b: c5:6d:dd:77:5c:57:19:dd:64:67:a5:87:e4:f8:85:df:ca:d5: 5b:b8:3c:e0:33:a9:24:78:be:6e:81:22:4e:07:91:f2:80:e2: 5a:48:d2:3e:ca:8d:89:1c:34:b3:45:90:24:a8:58:21:38:f3: 88:e9:d0:62:f0:f5:69:5c:39:0b:54:45:e9:23:25:d5:fa:16: 28:d7:5e:35:4d:c8:9c:bc:22:39:f9:bb:d1:ad:1e:d6:3b:38: e0:37:55:03:78:b6:e1:f8:ee:76:c4:8a:37:19:5b:be:32:a9: 24:3c:67:11:4d:23:01:76:2a:c1:dd:f3:4b:a4:21:82:01:d6: 11:4f:bf:cc:89:9e:da:94:9a:5d:35:70:8b:d2:ab:b2:8b:e3: 9d:38:93:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWF9jNSiZ2MxkDTnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MDQxMjE3MjQzOVoXDTI0MDcxMTE3MjQzOVowLzEtMCsGA1UEAxMk OTQ4ZTQzMzUtNDNmNy00MTczLTg5NTEtYzFkMmRkZDU0ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKIQIWdRpiElhyw31ICvkyN0XucKlZYlELiv /UWKMCIkSFUTm5Z24KydLeofw9z+/NFiFUxA2RcT0hslxeHcOMwaBMaOUJF6YgIy cDxiNRD9wINbzWZEQqoiYr790AMytQ4ec7h7/49V0WpvIXpv0oJpDemwzJl9w7iY z2AiASLdy+N8bTxy3YTHCPTmtUYiDPJgzlCYY+Hduh4qeZxV4ev/oK+Wt3587vSC aKaGUNiqoJOhNlc/+eHyMCG0E8QV5vh9j8jr8xEhnX4qijUMJ81CXFXk99wh6ZOV LUOz5k+DecaII/YLRoBayV5ByskHbGsuJ/aQekBsws/WS5kNRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9UYccWYNdLR3wbiwyeW3hcvXegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTBjOWIyODctY2VjNy0z ZGRmLThmZDgtY2YwZGQzNmJlMmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7yvBBbCw2KCubqEE4CfzbW4RbSA0ek3OQMT/GL8T82+heqwVXhy1Zs MVVAKBi1vBAewZomqqqG8aAUF1X2VdnXVfPHJaQTOTGWB42YBwta9PsyBs1g92W2 pn0sZqsUkala7wQ8TwVdziyPC8Vt3XdcVxndZGelh+T4hd/K1Vu4POAzqSR4vm6B Ik4HkfKA4lpI0j7KjYkcNLNFkCSoWCE484jp0GLw9WlcOQtURekjJdX6FijXXjVN yJy8Ijn5u9GtHtY7OOA3VQN4tuH47nbEijcZW74yqSQ8ZxFNIwF2KsHd80ukIYIB 1hFPv8yJntqUml01cIvSq7KL4504k74= -----END CERTIFICATE-----Generated at Sun May 19 17:54:26 2024 by rpki-client on console-fra.rpki-client.org