$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af02410d-4569-3f3f-a76b-438b15db3cce.roa File: af02410d-4569-3f3f-a76b-438b15db3cce.roa (raw, json) Hash identifier: 38Mf3w83uzERjJ7AmKNLHf23a7NrUs1/1f9UBrbOO0g= Subject key identifier: 6C:38:47:52:3E:A4:D7:3C:EF:74:C0:BE:FD:0A:34:C2:81:6F:00:D7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858479DCC991B2F3357A24D411B00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af02410d-4569-3f3f-a76b-438b15db3cce.roa Signing time: Mon 21 Oct 2024 15:54:06 +0000 ROA not before: Mon 21 Oct 2024 15:54:06 +0000 ROA not after: Sun 19 Jan 2025 16:54:06 +0000 asID: 8100 IP address blocks: 136.0.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:cc:99:1b:2f:33:57:a2:4d:41:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 21 15:54:06 2024 GMT Not After : Jan 19 16:54:06 2025 GMT Subject: CN=384d9042-9297-4561-a3eb-dbd28be5bbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:02:10:0f:c7:31:f0:f5:73:cf:3a:82:af:c8: 1e:ce:0b:3b:0d:f5:09:02:47:25:50:d3:bb:2d:15: b9:cc:a0:12:d6:08:84:ec:d1:ab:0d:0e:c6:b5:e8: d4:2a:e8:07:00:01:f5:7b:38:fd:84:47:30:ae:b8: 96:be:3a:5c:8f:b5:d6:66:54:3d:4a:5d:c9:10:a5: d2:ca:a6:1c:23:c2:02:23:ce:a0:de:86:04:3a:5b: ab:e8:c8:8d:70:24:be:6e:65:bb:c3:b4:29:f2:a4: 8c:9d:ee:a4:84:da:ac:dd:0c:bf:2c:f1:48:44:be: 99:8b:8e:9d:c8:f8:10:90:e0:51:b5:c4:dd:eb:33: 2b:cb:a6:0a:57:11:41:ee:f0:df:c4:ba:1d:19:54: 7e:05:48:fd:4a:8d:b8:e6:96:1f:76:69:cc:c4:28: 5c:0c:6e:5d:dd:80:32:09:46:e2:f3:49:c7:25:ed: a0:ed:a6:cb:23:11:f6:31:a5:9b:5d:84:fa:3d:5d: d9:9c:a8:ac:a1:6d:ed:62:f9:b7:5e:35:29:d2:ac: 3f:cd:75:ff:8f:47:f8:f6:3b:c9:40:2d:aa:be:19: 3a:4e:db:71:a9:26:11:58:d3:b7:60:ee:bb:d9:bf: 76:35:fa:eb:34:90:e4:45:44:63:54:ce:37:6d:72: ef:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:47:52:3E:A4:D7:3C:EF:74:C0:BE:FD:0A:34:C2:81:6F:00:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af02410d-4569-3f3f-a76b-438b15db3cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8a:96:05:97:a6:23:46:51:25:f6:e2:ca:61:4a:61:de:1d: 38:46:88:4f:df:6e:d5:58:a2:db:1c:30:63:bc:65:08:a5:59: c7:88:09:f0:e7:9d:ac:e7:31:73:59:1d:bb:02:10:39:f9:1a: 3c:b4:58:6d:c9:a7:01:5b:73:0b:bb:f6:bb:0b:8f:5a:58:5f: bb:13:92:a2:8e:43:c8:28:05:8b:ba:69:41:49:3c:ed:b6:69: f2:ed:b5:63:d3:3f:40:03:14:c1:4b:e0:7a:26:5d:9c:e3:5f: f1:2a:c0:da:13:04:67:40:4f:c4:d5:57:04:e7:f5:bb:3a:6b: 98:48:22:1b:35:a8:72:34:3d:ed:24:29:48:c1:87:dc:2a:cf: df:55:f0:33:bd:9a:96:7f:7f:af:9f:b5:21:25:5d:74:41:a1: 49:ae:04:67:8b:0c:44:a8:4c:59:f3:3d:17:9b:78:f4:08:d7: a1:68:f2:27:48:1e:e3:87:9b:b9:4f:d5:6e:5e:cd:88:25:da: fb:f3:79:40:30:bc:5a:f0:df:a5:61:59:1c:eb:63:8e:d5:90: 42:dc:e7:2d:a8:71:6a:8d:22:d1:c4:8e:70:95:4c:98:fc:b0: 16:b0:c6:bc:96:fa:0c:2f:f6:69:b9:c3:41:75:a5:99:45:82: c4:b4:f6:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedzJkbLzNXok1BGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAyMTE1NTQwNloXDTI1MDExOTE2NTQwNlowLzEtMCsGA1UEAxMk Mzg0ZDkwNDItOTI5Ny00NTYxLWEzZWItZGJkMjhiZTViYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgIQD8cx8PVzzzqCr8gezgs7DfUJAkclUNO7 LRW5zKAS1giE7NGrDQ7GtejUKugHAAH1ezj9hEcwrriWvjpcj7XWZlQ9Sl3JEKXS yqYcI8ICI86g3oYEOlur6MiNcCS+bmW7w7Qp8qSMne6khNqs3Qy/LPFIRL6Zi46d yPgQkOBRtcTd6zMry6YKVxFB7vDfxLodGVR+BUj9So245pYfdmnMxChcDG5d3YAy CUbi80nHJe2g7abLIxH2MaWbXYT6PV3ZnKisoW3tYvm3XjUp0qw/zXX/j0f49jvJ QC2qvhk6TttxqSYRWNO3YO672b92NfrrNJDkRURjVM43bXLvTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw4R1I+pNc873TAvv0KNMKBbwDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWYwMjQxMGQtNDU2OS0z ZjNmLWE3NmItNDM4YjE1ZGIzY2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiKlgWXpiNGUSX24sphSmHeHThGiE/fbtVYotscMGO8ZQilWceICfDn naznMXNZHbsCEDn5Gjy0WG3JpwFbcwu79rsLj1pYX7sTkqKOQ8goBYu6aUFJPO22 afLttWPTP0ADFMFL4HomXZzjX/EqwNoTBGdAT8TVVwTn9bs6a5hIIhs1qHI0Pe0k KUjBh9wqz99V8DO9mpZ/f6+ftSElXXRBoUmuBGeLDESoTFnzPRebePQI16Fo8idI HuOHm7lP1W5ezYgl2vvzeUAwvFrw36VhWRzrY47VkELc5y2ocWqNItHEjnCVTJj8 sBawxryW+gwv9mm5w0F1pZlFgsS09oM= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:37 2024 by rpki-client on console-ams.rpki-client.org