$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dccb39a4-c85e-3c0d-9a96-f0eedae3520c.roa File: dccb39a4-c85e-3c0d-9a96-f0eedae3520c.roa (raw, json) Hash identifier: de+n4pHttQuzp6TYuWm5ndYgbLvxsgmZumICbnhERXw= Subject key identifier: 14:F9:3A:3A:95:FF:E5:C7:1B:CB:93:33:A0:FE:5A:77:26:A0:F2:E3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847A66CA46FF5EC779BA4388E40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dccb39a4-c85e-3c0d-9a96-f0eedae3520c.roa Signing time: Thu 24 Oct 2024 18:03:02 +0000 ROA not before: Thu 24 Oct 2024 18:03:02 +0000 ROA not after: Wed 22 Jan 2025 19:03:02 +0000 asID: 401152 IP address blocks: 136.0.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a6:6c:a4:6f:f5:ec:77:9b:a4:38:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 24 18:03:02 2024 GMT Not After : Jan 22 19:03:02 2025 GMT Subject: CN=b46f5d6c-1d68-47af-8349-7547d2354f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a4:12:f6:48:0a:36:a1:b5:3d:f7:ca:32:5f: 0b:03:28:ed:85:58:28:ac:0d:c2:78:ed:ea:11:5e: fd:bd:4e:b7:0e:e0:c2:63:74:81:61:d0:db:1a:47: 3a:3c:b0:a0:70:8b:67:93:a4:4c:6e:b9:03:c0:8d: 27:2d:31:6a:d9:b2:f5:ca:83:0a:20:20:e2:f6:fc: e4:8e:81:22:74:ca:e8:0f:2b:eb:3b:38:ce:bf:ec: 19:5e:e5:c8:44:3f:da:7d:f1:f7:11:6c:77:34:f9: 10:8d:ce:eb:7e:db:4d:4b:1a:f5:62:0d:d3:7f:69: 01:15:d0:f3:fa:15:f0:dc:28:cc:b7:04:0c:78:ff: c9:0a:07:8f:61:75:ed:fb:37:1e:17:4e:df:05:96: 3a:1f:ff:8a:46:8c:27:ba:4a:fe:1b:57:1a:d0:b3: 58:d9:e2:61:66:34:00:5d:80:45:bd:a4:dc:53:e0: 0f:e0:51:59:f1:27:79:08:97:c7:2d:28:b2:fd:65: 9e:3c:0d:1c:6f:37:0a:19:5a:81:24:32:a1:8f:6a: bc:ca:27:5c:fe:b8:eb:6a:48:11:84:d8:d8:82:c2: e5:9f:70:2c:6e:02:04:85:b7:f9:33:b3:38:9b:22: e3:fc:1b:d4:26:13:d7:f5:5b:55:a2:1b:f6:c8:dd: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F9:3A:3A:95:FF:E5:C7:1B:CB:93:33:A0:FE:5A:77:26:A0:F2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dccb39a4-c85e-3c0d-9a96-f0eedae3520c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:2f:b0:32:37:8f:30:fe:2d:1e:80:c7:d7:24:04:ae:8c:d4: 6e:4d:a5:ec:ac:33:6c:d8:69:19:a0:9f:89:d0:60:fe:68:6b: c8:b7:83:ea:cb:cd:2b:71:38:b6:b2:f9:8f:10:a9:5f:90:3f: 8d:2c:7e:5d:94:30:d2:b2:d6:c0:77:15:b9:56:64:0e:b8:c3: 7f:30:5b:bb:99:e1:83:c7:d0:ec:4c:79:9a:02:09:24:93:76: fe:5c:53:1c:93:43:e3:15:9f:5d:4b:d4:31:04:7d:66:a4:16: 0b:be:44:7c:53:3f:76:8f:f8:0b:2d:b0:a8:41:64:22:4e:65: e1:58:82:e9:62:f3:ef:99:f9:ce:27:d8:09:e9:73:ee:a3:1d: bf:41:5f:61:13:83:41:cd:24:4a:11:7e:1c:79:b3:23:a4:25: 21:27:c6:9e:33:0c:f3:53:94:f4:62:e0:b3:57:31:72:6a:92: 0e:e6:e1:f7:6b:66:1f:66:79:da:52:60:76:22:c9:77:05:12: 21:15:9a:32:4d:0f:43:d1:cb:ed:df:bf:cd:e2:e0:de:0c:82: 63:15:3a:26:97:bd:a8:0f:e5:13:ee:b1:8e:29:5d:ad:ae:72: 21:cf:58:97:e2:91:0e:81:aa:9d:5b:62:31:06:c4:a8:1b:69: 94:05:6b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEembKRv9ex3m6Q4jkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTAyNDE4MDMwMloXDTI1MDEyMjE5MDMwMlowLzEtMCsGA1UEAxMk YjQ2ZjVkNmMtMWQ2OC00N2FmLTgzNDktNzU0N2QyMzU0ZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKQS9kgKNqG1PffKMl8LAyjthVgorA3CeO3q EV79vU63DuDCY3SBYdDbGkc6PLCgcItnk6RMbrkDwI0nLTFq2bL1yoMKICDi9vzk joEidMroDyvrOzjOv+wZXuXIRD/affH3EWx3NPkQjc7rfttNSxr1Yg3Tf2kBFdDz +hXw3CjMtwQMeP/JCgePYXXt+zceF07fBZY6H/+KRownukr+G1ca0LNY2eJhZjQA XYBFvaTcU+AP4FFZ8Sd5CJfHLSiy/WWePA0cbzcKGVqBJDKhj2q8yidc/rjrakgR hNjYgsLln3AsbgIEhbf5M7M4myLj/BvUJhPX9VtVohv2yN1uFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT5OjqV/+XHG8uTM6D+WncmoPLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGNjYjM5YTQtYzg1ZS0z YzBkLTlhOTYtZjBlZWRhZTM1MjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8vsDI3jzD+LR6Ax9ckBK6M1G5NpeysM2zYaRmgn4nQYP5oa8i3g+rL zStxOLay+Y8QqV+QP40sfl2UMNKy1sB3FblWZA64w38wW7uZ4YPH0OxMeZoCCSST dv5cUxyTQ+MVn11L1DEEfWakFgu+RHxTP3aP+AstsKhBZCJOZeFYguli8++Z+c4n 2Anpc+6jHb9BX2ETg0HNJEoRfhx5syOkJSEnxp4zDPNTlPRi4LNXMXJqkg7m4fdr Zh9medpSYHYiyXcFEiEVmjJND0PRy+3fv83i4N4MgmMVOiaXvagP5RPusY4pXa2u ciHPWJfikQ6Bqp1bYjEGxKgbaZQFa9g= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:58 2024 by rpki-client on console-fra.rpki-client.org