$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aec8c256-ddac-313e-b6a2-9968100cb3dd.roa File: aec8c256-ddac-313e-b6a2-9968100cb3dd.roa (raw, json) Hash identifier: j9McWuxPXx/5liUpDRxPeUZT1KsNGlE460DQCT8mM0M= Subject key identifier: 89:A7:73:76:2E:0B:62:5D:BC:E8:78:CA:50:17:86:0C:D8:37:DC:88 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847EFEF93D2220A149BED6A2440 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aec8c256-ddac-313e-b6a2-9968100cb3dd.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 44477 IP address blocks: 136.0.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:93:d2:22:0a:14:9b:ed:6a:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=ef538c82-e278-42de-b6e3-393e859814dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:a8:d6:90:66:b5:60:cf:be:87:2c:d8:e2: 2b:00:30:de:fe:96:91:81:38:07:e4:4a:be:4f:d8: 5e:8b:55:10:6f:ef:9e:77:83:60:f4:51:c5:f9:33: 05:02:44:96:fb:ca:d0:38:d5:34:a9:ee:8f:2d:8f: 66:a7:6e:85:f3:be:6d:54:a3:fc:93:1e:68:e3:fd: ab:f9:10:63:77:cf:51:06:5c:e1:87:1e:99:3e:f2: a7:ad:9b:9b:b2:1b:b6:56:5d:a5:e9:c7:6f:9d:af: 8a:ee:9c:78:29:7e:d0:f0:a7:4e:ed:a1:40:8b:e9: dc:b6:26:be:7b:c8:d2:b7:ae:25:d8:fa:29:28:91: 6a:2e:29:41:8a:01:91:26:fb:f4:e4:96:80:d9:7d: 44:01:94:df:cf:a7:ac:5a:97:eb:73:99:ab:fa:09: 9b:55:5b:99:d3:11:73:be:bb:a6:ed:83:85:07:e9: f3:bc:6d:b2:a5:1e:1a:84:c4:80:b4:7e:10:c1:59: c0:0d:2e:67:25:bf:fd:ee:c7:6b:7b:08:d0:50:dc: 52:bd:77:f2:b6:19:86:98:bc:c4:1d:9b:9f:23:31: bf:8c:59:7a:15:f2:6d:a9:a1:c3:35:13:b9:6e:b5: 33:07:cb:75:6a:6e:94:28:96:eb:33:03:14:b7:9e: 3b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A7:73:76:2E:0B:62:5D:BC:E8:78:CA:50:17:86:0C:D8:37:DC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aec8c256-ddac-313e-b6a2-9968100cb3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ab:7f:8a:0f:3d:2d:ee:c4:ab:94:ef:86:30:9d:4f:c1:4d: a4:36:40:3f:e3:87:d0:ef:da:75:df:dd:34:06:e4:77:1f:9d: 85:22:a3:48:8b:c3:ea:f2:00:49:5e:4d:71:58:71:a6:c7:c7: 1b:66:f4:1b:bf:25:a6:04:a9:c9:c4:6e:36:1d:80:90:5d:1b: 35:07:16:68:2f:f6:b1:31:93:73:e7:50:2f:48:e9:1f:af:89: b7:49:71:61:aa:f3:6e:5a:90:0b:e9:58:5a:3b:be:86:f6:64: f3:fc:70:4e:45:92:b9:75:20:76:6c:50:d5:a3:58:5e:c8:c5: 38:87:8d:14:55:7d:d2:4a:1f:30:b4:03:93:32:d4:d1:11:a3: 13:21:2a:ad:e4:9d:17:14:d5:d8:57:d6:2a:3f:8b:f9:c1:33: ba:46:a3:74:bc:d1:0f:25:d2:f2:24:60:2d:7c:c9:b4:04:e9: a7:63:52:44:8d:66:ce:43:21:c3:76:e4:ec:5f:7c:ed:2b:23: 16:ca:c6:95:5c:17:25:1b:ca:f4:39:4c:0d:d1:6c:41:79:27: 06:2a:c0:86:0a:20:de:7b:7f:ae:33:c8:27:1c:bb:bc:c3:ce: eb:1e:91:d7:f2:00:dc:c0:83:35:15:9e:85:ca:c4:75:7b:c2: 0e:92:cb:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv75PSIgoUm+1qJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk ZWY1MzhjODItZTI3OC00MmRlLWI2ZTMtMzkzZTg1OTgxNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifOo1pBmtWDPvocs2OIrADDe/paRgTgH5Eq+ T9hei1UQb++ed4Ng9FHF+TMFAkSW+8rQONU0qe6PLY9mp26F875tVKP8kx5o4/2r +RBjd89RBlzhhx6ZPvKnrZubshu2Vl2l6cdvna+K7px4KX7Q8KdO7aFAi+nctia+ e8jSt64l2PopKJFqLilBigGRJvv05JaA2X1EAZTfz6esWpfrc5mr+gmbVVuZ0xFz vrum7YOFB+nzvG2ypR4ahMSAtH4QwVnADS5nJb/97sdrewjQUNxSvXfythmGmLzE HZufIzG/jFl6FfJtqaHDNRO5brUzB8t1am6UKJbrMwMUt547+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImnc3YuC2JdvOh4ylAXhgzYN9yIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWVjOGMyNTYtZGRhYy0z MTNlLWI2YTItOTk2ODEwMGNiM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGrf4oPPS3uxKuU74YwnU/BTaQ2QD/jh9Dv2nXf3TQG5HcfnYUio0iL w+ryAEleTXFYcabHxxtm9Bu/JaYEqcnEbjYdgJBdGzUHFmgv9rExk3PnUC9I6R+v ibdJcWGq825akAvpWFo7vob2ZPP8cE5Fkrl1IHZsUNWjWF7IxTiHjRRVfdJKHzC0 A5My1NERoxMhKq3knRcU1dhX1io/i/nBM7pGo3S80Q8l0vIkYC18ybQE6adjUkSN Zs5DIcN25OxffO0rIxbKxpVcFyUbyvQ5TA3RbEF5JwYqwIYKIN57f64zyCccu7zD zusekdfyANzAgzUVnoXKxHV7wg6Sy/Q= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:04 2024 by rpki-client on console-ams.rpki-client.org