$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f5973a8d-02af-33ab-b7da-fe5a50864af9.roa File: f5973a8d-02af-33ab-b7da-fe5a50864af9.roa (raw, json) Hash identifier: yc6HM914o6Xb+Psfe/75VMtCB4FCtU9kgkHaXBhDVVY= Subject key identifier: CF:1C:6E:EF:F4:3E:AA:F1:96:65:6E:85:7F:50:02:53:00:87:C1:8D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285847D4049EE1217A3308E5471700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f5973a8d-02af-33ab-b7da-fe5a50864af9.roa Signing time: Sun 10 Nov 2024 02:00:27 +0000 ROA not before: Sun 10 Nov 2024 02:00:27 +0000 ROA not after: Sat 08 Feb 2025 02:00:27 +0000 asID: 209854 IP address blocks: 136.0.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d4:04:9e:e1:21:7a:33:08:e5:47:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 10 02:00:27 2024 GMT Not After : Feb 8 02:00:27 2025 GMT Subject: CN=9aafbc08-7ed8-4465-a410-477ac61962dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:46:5c:6f:bd:bc:3f:34:88:1d:7c:f3:15: 3d:66:6a:79:40:ab:7d:21:b5:9b:32:0d:c3:17:14: 5d:3a:94:4d:60:f2:22:41:6d:8c:2c:b1:b9:62:9b: ef:b4:bc:2c:96:21:b5:d3:5e:0c:be:b3:fd:22:c3: fe:ab:f3:3b:21:aa:29:73:32:1f:71:eb:b0:26:3d: 07:54:12:ba:52:9a:56:44:ed:b9:57:8e:8f:84:00: 57:bc:0d:53:c9:26:c6:2e:88:06:b0:02:ff:7f:5b: 09:9d:1d:b4:a9:b7:58:65:4d:43:2d:9c:5a:10:90: 38:5a:ec:00:b6:9b:4f:12:a4:8e:ce:8c:dd:19:80: cc:ac:31:fd:78:03:f9:73:82:40:4f:e7:2a:69:48: 02:88:bf:a1:de:5d:81:cd:b7:23:78:d2:46:70:df: 8d:68:88:a9:a1:f7:0d:04:2b:91:9b:49:95:38:ad: 87:4c:2b:42:dd:42:41:c5:1c:05:08:28:26:36:1d: 8c:6f:45:9b:c1:bf:41:14:f9:06:e7:ea:4a:1c:3c: d0:45:93:fd:e0:e7:63:d4:85:57:b3:d1:e9:5a:b6: 75:eb:a2:5e:e5:f7:80:98:2c:c2:06:c6:25:87:1c: 30:b6:24:1e:2c:de:3c:bc:8a:84:34:6c:4b:57:88: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1C:6E:EF:F4:3E:AA:F1:96:65:6E:85:7F:50:02:53:00:87:C1:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f5973a8d-02af-33ab-b7da-fe5a50864af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:4a:38:b6:67:b5:f7:91:24:2d:1a:d2:cd:07:6c:50:e8:a8: 94:48:f7:16:0d:f3:11:9b:ae:be:93:44:eb:2d:04:5b:f2:48: e4:49:80:2e:a7:b3:c8:31:c8:c9:22:6b:d9:70:98:91:db:bc: 55:fb:08:4d:d2:79:67:92:00:f2:69:95:7e:f4:3e:4c:0f:bc: 60:1b:94:88:c2:7c:65:ad:5b:12:61:ca:8c:13:25:ee:5c:35: 92:27:06:f6:cb:c9:2a:41:b4:ed:89:c1:df:70:e1:c5:f1:57: 51:70:98:82:ad:1d:08:2f:91:49:f0:21:7c:3b:bf:28:af:bb: 4d:51:6b:93:82:8e:af:4f:7e:c4:47:0e:57:2c:4f:d9:6a:ce: 7f:02:fa:ba:70:92:c8:e1:7f:93:d2:42:b5:17:8d:25:f2:de: f2:ad:51:6f:86:6e:a5:ae:a4:b1:e6:77:c3:df:07:86:3b:b5: 00:99:d5:71:bb:d5:f6:f6:28:f7:5e:a5:db:68:f0:7d:bf:15: 56:80:14:b9:4e:e7:eb:9b:94:90:4d:aa:fc:ba:48:ed:b6:48: 74:08:6b:88:4f:a0:b2:fe:e3:39:2c:40:b8:77:96:a8:10:f1: 7f:50:ee:59:87:06:20:38:fd:45:cb:1b:90:52:7e:44:b2:b1: 96:74:c0:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJ7hIXozCOVHFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk OWFhZmJjMDgtN2VkOC00NDY1LWE0MTAtNDc3YWM2MTk2MmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvpGXG+9vD80iB188xU9Zmp5QKt9IbWbMg3D FxRdOpRNYPIiQW2MLLG5YpvvtLwsliG1014MvrP9IsP+q/M7IaopczIfceuwJj0H VBK6UppWRO25V46PhABXvA1TySbGLogGsAL/f1sJnR20qbdYZU1DLZxaEJA4WuwA tptPEqSOzozdGYDMrDH9eAP5c4JAT+cqaUgCiL+h3l2BzbcjeNJGcN+NaIipofcN BCuRm0mVOK2HTCtC3UJBxRwFCCgmNh2Mb0Wbwb9BFPkG5+pKHDzQRZP94Odj1IVX s9HpWrZ166Je5feAmCzCBsYlhxwwtiQeLN48vIqENGxLV4jwdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8cbu/0PqrxlmVuhX9QAlMAh8GNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjU5NzNhOGQtMDJhZi0z M2FiLWI3ZGEtZmU1YTUwODY0YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5KOLZntfeRJC0a0s0HbFDoqJRI9xYN8xGbrr6TROstBFvySORJgC6n s8gxyMkia9lwmJHbvFX7CE3SeWeSAPJplX70PkwPvGAblIjCfGWtWxJhyowTJe5c NZInBvbLySpBtO2Jwd9w4cXxV1FwmIKtHQgvkUnwIXw7vyivu01Ra5OCjq9PfsRH DlcsT9lqzn8C+rpwksjhf5PSQrUXjSXy3vKtUW+GbqWupLHmd8PfB4Y7tQCZ1XG7 1fb2KPdepdto8H2/FVaAFLlO5+ublJBNqvy6SO22SHQIa4hPoLL+4zksQLh3lqgQ 8X9Q7lmHBiA4/UXLG5BSfkSysZZ0wNQ= -----END CERTIFICATE-----Generated at Thu Nov 21 22:35:59 2024 by rpki-client on console-fra.rpki-client.org