$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9baee27-e6ba-3f81-a65a-8c870ed3c529.roa File: d9baee27-e6ba-3f81-a65a-8c870ed3c529.roa (raw, json) Hash identifier: yOuTP0IHSYBgA9tFpuNKAHa9cuKc5ZjnoMC0j7jksHU= Subject key identifier: 2C:1C:79:DB:4C:2C:AD:38:8D:0F:F1:26:C8:28:62:16:77:08:7F:23 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847A66CA513AFB9C73C91928B00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9baee27-e6ba-3f81-a65a-8c870ed3c529.roa Signing time: Thu 24 Oct 2024 18:03:02 +0000 ROA not before: Thu 24 Oct 2024 18:03:02 +0000 ROA not after: Wed 22 Jan 2025 19:03:02 +0000 asID: 401152 IP address blocks: 136.0.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a6:6c:a5:13:af:b9:c7:3c:91:92:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 24 18:03:02 2024 GMT Not After : Jan 22 19:03:02 2025 GMT Subject: CN=4e0607bb-d0c6-4271-8272-81d8e9ccd2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:db:a7:1d:72:27:83:cf:61:99:0e:2d:6e:f8: a0:5a:ad:e9:d6:55:be:19:b3:ed:8b:18:06:73:58: 89:5f:89:e1:38:01:11:e4:92:b3:10:9e:08:93:4a: 71:21:4b:1c:01:ea:64:da:d2:36:f9:5e:6f:8f:be: 21:e6:87:70:92:62:6c:65:dc:87:e3:17:cb:63:5b: 7e:80:a4:16:f3:06:39:83:c6:8e:e9:92:d8:7e:f2: da:e1:b8:20:04:12:98:1e:62:b8:57:97:0a:0c:5f: 56:8e:2e:95:59:a9:7c:67:96:85:a8:1e:84:ef:66: ea:1d:f6:ac:48:9c:c5:6d:56:41:44:2e:1b:b2:bc: be:e9:80:7f:72:d7:b7:1d:76:37:07:a7:5a:66:9e: 8b:cc:19:b3:a0:b0:fe:10:63:e1:35:1e:3e:51:20: 8d:ae:0b:74:30:17:20:5f:f1:38:86:f6:9a:16:34: e3:80:a5:0b:d2:67:16:5a:73:bb:89:bb:66:2c:22: a8:2d:1a:2e:15:6c:c5:9a:71:13:6d:cd:fc:cf:60: f6:56:00:57:61:d8:84:f6:f3:e3:04:e4:6c:ca:e0: ec:a9:4c:71:8b:1c:ac:a7:e5:91:01:f2:d6:bb:fd: 96:45:84:1e:cd:bf:66:c7:ae:f1:54:a7:17:23:45: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1C:79:DB:4C:2C:AD:38:8D:0F:F1:26:C8:28:62:16:77:08:7F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9baee27-e6ba-3f81-a65a-8c870ed3c529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a3:db:a1:f4:4a:79:03:cc:31:86:d5:f7:83:8f:e9:84:13: 57:c1:7e:4d:fa:2a:24:97:7c:4d:a7:fd:46:e9:ac:3d:3b:53: f9:ac:45:95:3b:8d:7b:bc:01:0f:b9:8c:8d:14:c7:42:eb:21: e2:03:40:de:5a:a7:af:6a:7a:4f:1d:17:b2:60:17:8b:11:70: ea:b0:1b:08:63:e7:4e:7e:42:15:2d:64:56:24:1d:2c:9d:b9: 18:0a:c0:82:60:cc:7f:17:f8:b4:9b:42:97:fb:63:e1:5d:36: 9a:d3:06:ca:75:87:eb:ae:75:12:62:dd:c7:b6:58:97:14:3e: 09:66:6c:ce:37:15:6e:28:08:d4:e5:9d:95:a8:d8:25:7c:b4: 76:60:c0:13:93:b4:82:28:fd:48:fd:56:43:95:99:1b:55:16: 48:a5:c7:61:02:9a:6c:26:ca:f2:15:d7:6c:40:2e:7b:0e:2f: 70:57:69:6b:88:e7:91:f3:65:04:c2:63:2a:c5:4b:cd:69:00: ac:bd:db:dd:60:30:8c:35:3b:59:60:08:57:29:4d:4b:1c:79: 41:b7:40:38:5f:f7:37:75:39:7d:92:ef:ee:54:ca:70:22:9e: 3c:78:66:e7:77:d5:61:e8:9d:6f:0f:86:e9:ca:f9:4f:4c:c8: b5:65:5d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEembKUTr7nHPJGSiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAyNDE4MDMwMloXDTI1MDEyMjE5MDMwMlowLzEtMCsGA1UEAxMk NGUwNjA3YmItZDBjNi00MjcxLTgyNzItODFkOGU5Y2NkMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntunHXIng89hmQ4tbvigWq3p1lW+GbPtixgG c1iJX4nhOAER5JKzEJ4Ik0pxIUscAepk2tI2+V5vj74h5odwkmJsZdyH4xfLY1t+ gKQW8wY5g8aO6ZLYfvLa4bggBBKYHmK4V5cKDF9Wji6VWal8Z5aFqB6E72bqHfas SJzFbVZBRC4bsry+6YB/cte3HXY3B6daZp6LzBmzoLD+EGPhNR4+USCNrgt0MBcg X/E4hvaaFjTjgKUL0mcWWnO7ibtmLCKoLRouFWzFmnETbc38z2D2VgBXYdiE9vPj BORsyuDsqUxxixysp+WRAfLWu/2WRYQezb9mx67xVKcXI0WuPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwcedtMLK04jQ/xJsgoYhZ3CH8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDliYWVlMjctZTZiYS0z ZjgxLWE2NWEtOGM4NzBlZDNjNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFij26H0SnkDzDGG1feDj+mEE1fBfk36KiSXfE2n/UbprD07U/msRZU7 jXu8AQ+5jI0Ux0LrIeIDQN5ap69qek8dF7JgF4sRcOqwGwhj505+QhUtZFYkHSyd uRgKwIJgzH8X+LSbQpf7Y+FdNprTBsp1h+uudRJi3ce2WJcUPglmbM43FW4oCNTl nZWo2CV8tHZgwBOTtIIo/Uj9VkOVmRtVFkilx2ECmmwmyvIV12xALnsOL3BXaWuI 55HzZQTCYyrFS81pAKy9291gMIw1O1lgCFcpTUsceUG3QDhf9zd1OX2S7+5UynAi njx4Zud31WHonW8PhunK+U9MyLVlXdQ= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:06 2024 by rpki-client on console-ams.rpki-client.org