$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa File: 6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa (raw, json) Hash identifier: DfGctxbj6ARE/oFHu05Vh3mPqQKpJibF7DburbViopo= Subject key identifier: 6D:40:2D:0A:2A:EA:06:CE:8E:D3:09:62:D6:BB:2E:26:76:6D:47:97 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847D834BC847736867233660D00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa Signing time: Mon 11 Nov 2024 14:00:39 +0000 ROA not before: Mon 11 Nov 2024 14:00:39 +0000 ROA not after: Sun 09 Feb 2025 14:00:39 +0000 asID: 3561 IP address blocks: 136.0.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d8:34:bc:84:77:36:86:72:33:66:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 11 14:00:39 2024 GMT Not After : Feb 9 14:00:39 2025 GMT Subject: CN=ce94fa24-8fe7-46a4-a030-c109bce4f898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:54:73:30:ec:45:2c:75:3f:09:eb:68:43: cb:93:16:ca:d3:bc:d3:a3:cc:b3:ca:41:62:67:d0: 89:0e:aa:c9:23:e9:bc:65:f6:90:d9:d2:7c:b1:69: b7:c5:61:4b:3d:c7:21:84:5f:c3:b2:7d:f3:1a:92: a8:2e:5a:1f:b8:11:7a:90:22:ef:58:3f:01:42:08: 2f:1e:64:31:d6:40:ac:8d:ff:42:6d:7e:00:3b:d8: f4:08:ed:c2:f6:1a:fb:d6:e5:d9:74:41:1f:9e:02: a3:d5:8e:67:40:50:c6:12:3d:c0:84:6a:70:d9:6c: c2:b8:43:c7:46:64:f7:6a:85:0a:aa:36:5f:ca:f0: 6d:fa:ba:93:18:35:f0:80:4b:f1:59:f9:c7:bf:6d: d0:27:53:44:b6:41:00:08:d8:b0:50:d3:40:05:4c: 34:9f:f9:d4:a3:94:3d:32:6c:2a:f8:d8:37:a4:ac: f7:a1:ca:44:78:de:56:71:dd:58:ea:24:ec:0c:c0: ba:7f:fd:91:5b:e1:a1:b3:07:43:0d:29:d6:d9:43: 9a:9f:c4:1b:68:30:7a:47:be:7a:33:c3:d3:be:6d: af:59:b0:d0:7a:ce:0b:d2:1c:bb:22:a3:c1:e8:63: 1b:87:c9:74:d9:89:b8:25:2c:e3:c7:73:6c:1b:64: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:40:2D:0A:2A:EA:06:CE:8E:D3:09:62:D6:BB:2E:26:76:6D:47:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a6:51:46:27:d2:85:81:88:56:16:11:c8:a9:f9:c7:d9:9b: 5d:a2:52:26:4b:5d:7f:69:58:0d:24:33:dd:1b:8e:9f:88:59: a6:4b:e3:4b:2a:ca:ae:dd:8a:f2:92:f9:bb:bb:a1:c9:78:6a: 3d:56:48:82:a6:f9:86:97:74:61:90:ac:7a:2e:99:d9:ba:5c: a8:a6:33:cd:5d:02:e6:37:59:f6:cb:32:ad:d5:95:da:01:23: bf:50:85:ae:18:2c:82:2b:b3:89:c9:af:c5:8b:a3:0c:35:bf: a9:38:52:eb:7a:8a:b4:3b:1f:7d:26:6c:78:9a:18:6d:e6:15: c5:65:8b:9e:79:08:a9:e5:9f:8f:74:52:04:98:ea:dd:d0:5d: 04:ba:d4:0b:8f:34:5f:dc:87:0b:96:c8:c6:76:b0:1b:6b:ec: 96:52:2b:a8:fd:de:f9:d5:3b:a6:d1:9c:81:c6:eb:77:c7:4d: 15:ff:60:74:f6:6e:d5:d9:24:eb:3d:a7:91:12:6a:dc:e7:03: aa:3c:e3:ba:76:f9:54:bd:4e:d9:b6:08:4d:7d:64:83:fb:35: e1:b5:d5:e6:af:c8:bb:2a:a9:f3:91:29:4c:a8:ff:89:43:5b: 34:83:0f:88:ae:cc:36:76:09:a1:c0:9d:42:e8:64:6c:fc:a6: 85:b9:d4:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfYNLyEdzaGcjNmDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTExMTE0MDAzOVoXDTI1MDIwOTE0MDAzOVowLzEtMCsGA1UEAxMk Y2U5NGZhMjQtOGZlNy00NmE0LWEwMzAtYzEwOWJjZTRmODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyJUczDsRSx1PwnraEPLkxbK07zTo8yzykFi Z9CJDqrJI+m8ZfaQ2dJ8sWm3xWFLPcchhF/Dsn3zGpKoLlofuBF6kCLvWD8BQggv HmQx1kCsjf9CbX4AO9j0CO3C9hr71uXZdEEfngKj1Y5nQFDGEj3AhGpw2WzCuEPH RmT3aoUKqjZfyvBt+rqTGDXwgEvxWfnHv23QJ1NEtkEACNiwUNNABUw0n/nUo5Q9 Mmwq+Ng3pKz3ocpEeN5Wcd1Y6iTsDMC6f/2RW+GhswdDDSnW2UOan8QbaDB6R756 M8PTvm2vWbDQes4L0hy7IqPB6GMbh8l02Ym4JSzjx3NsG2SqLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1ALQoq6gbOjtMJYta7LiZ2bUeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjc4OGI5ZmMtNGRjMi0z YTU5LWFhNTUtNjdiYTA0ODM4YWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGmUUYn0oWBiFYWEcip+cfZm12iUiZLXX9pWA0kM90bjp+IWaZL40sq yq7divKS+bu7ocl4aj1WSIKm+YaXdGGQrHoumdm6XKimM81dAuY3WfbLMq3VldoB I79Qha4YLIIrs4nJr8WLoww1v6k4Uut6irQ7H30mbHiaGG3mFcVli555CKnln490 UgSY6t3QXQS61AuPNF/chwuWyMZ2sBtr7JZSK6j93vnVO6bRnIHG63fHTRX/YHT2 btXZJOs9p5ESatznA6o847p2+VS9Ttm2CE19ZIP7NeG11eavyLsqqfORKUyo/4lD WzSDD4iuzDZ2CaHAnULoZGz8poW51H0= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:54 2024 by rpki-client on console-fra.rpki-client.org