$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa File: 7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa (raw, json) Hash identifier: 0Gatdxwg53bMarbKl1Su4H/PvWASs91V55xAvM2X7SE= Subject key identifier: 85:F8:F6:7D:18:BD:AC:D2:FF:5D:03:FA:0A:96:DB:07:A5:7C:EA:6C Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F432858474F4B6299D8196F6183F98680 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa Signing time: Mon 23 Sep 2024 13:00:40 +0000 ROA not before: Mon 23 Sep 2024 13:00:40 +0000 ROA not after: Sun 22 Dec 2024 14:00:40 +0000 asID: 396856 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:4b:62:99:d8:19:6f:61:83:f9:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Sep 23 13:00:40 2024 GMT Not After : Dec 22 14:00:40 2024 GMT Subject: CN=a335c337-32b1-417a-bf1b-2fd93737ac77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b2:51:9b:31:f5:0a:db:d1:39:68:35:0c:68: 21:21:4c:1f:a9:6a:aa:8a:97:29:7d:df:22:68:8d: 54:e7:47:67:b3:d8:52:cb:ed:7f:c8:a3:b2:ee:22: 72:52:4e:52:4e:f8:8c:da:a7:6f:5c:71:a5:3a:68: e0:67:69:dd:44:a6:66:5b:05:a5:2d:4b:f6:04:db: f5:f4:7c:e0:21:23:c5:06:b7:58:26:93:69:10:cf: a3:8d:76:ec:00:23:15:4b:c9:aa:b8:33:a6:9f:f7: 1b:1b:fa:3e:ae:22:d8:d7:49:fd:60:27:71:45:82: df:72:8d:ec:f3:ab:79:82:ba:39:f1:a9:03:a8:8d: aa:bb:cc:3c:73:8c:f8:90:3f:4d:5e:c9:83:5c:52: da:1c:80:36:0d:55:6c:dd:57:05:7a:2a:1a:e7:9a: e2:02:ae:0a:ec:05:8a:03:ef:0b:7a:30:7e:26:4e: 72:1e:8a:4b:62:0c:0d:d0:74:d2:6e:c2:16:17:a0: fb:a3:d5:6f:91:f5:b5:ef:c3:7a:19:35:be:ae:44: a0:a6:9a:03:05:c3:cb:0e:42:2b:32:01:12:1e:84: 79:56:8f:ca:fc:42:5f:c7:c8:29:44:8a:2a:96:6e: 55:52:41:c1:31:6d:18:2b:9c:07:39:bf:7d:71:0f: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F8:F6:7D:18:BD:AC:D2:FF:5D:03:FA:0A:96:DB:07:A5:7C:EA:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:74:19:e2:61:82:d0:a6:ab:81:97:c9:49:ad:b1:a3:95:ed: 6a:c8:ac:c0:ba:a6:74:98:bf:1e:bb:a2:bd:0f:2e:e7:fb:0a: ec:c4:ec:b3:6f:0b:9a:35:87:dd:79:19:33:eb:eb:e1:37:8a: 26:77:40:b0:70:b8:94:35:73:a5:c7:28:c8:0f:cb:5b:8f:96: 01:1c:4f:3c:ea:68:7b:5f:f0:c5:0f:5c:b3:7d:b5:bd:f8:00: a6:71:37:00:ce:13:7d:fc:37:58:ad:53:06:d1:fc:19:16:d5: f4:ed:cc:1d:98:be:25:42:33:7e:6e:04:3b:b1:85:7a:61:1b: d3:8e:ee:db:54:3a:42:0a:16:8b:2e:f0:27:30:4a:49:40:f5: 57:79:77:89:9f:43:65:f1:c6:5d:26:3a:fb:c0:6b:50:24:d1: 98:b0:d4:e6:1c:99:58:1e:8e:3b:6d:63:41:1e:ac:36:fa:53: 3c:84:0c:07:bf:4a:83:cc:f5:53:d0:95:e7:6d:07:88:82:bc: bd:99:f5:5e:80:f6:86:4e:4d:81:39:20:9a:75:86:10:ed:65: c9:fd:e1:b9:06:92:02:c4:3d:09:5a:1f:c1:0e:d8:c5:c3:a6: 79:15:12:99:53:93:e5:87:9c:7c:5a:01:bf:d8:76:c3:c4:7d: 36:b5:00:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS2KZ2BlvYYP5hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YTMzNWMzMzctMzJiMS00MTdhLWJmMWItMmZkOTM3MzdhYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrJRmzH1CtvROWg1DGghIUwfqWqqipcpfd8i aI1U50dns9hSy+1/yKOy7iJyUk5STviM2qdvXHGlOmjgZ2ndRKZmWwWlLUv2BNv1 9HzgISPFBrdYJpNpEM+jjXbsACMVS8mquDOmn/cbG/o+riLY10n9YCdxRYLfco3s 86t5gro58akDqI2qu8w8c4z4kD9NXsmDXFLaHIA2DVVs3VcFeioa55riAq4K7AWK A+8LejB+Jk5yHopLYgwN0HTSbsIWF6D7o9VvkfW178N6GTW+rkSgppoDBcPLDkIr MgESHoR5Vo/K/EJfx8gpRIoqlm5VUkHBMW0YK5wHOb99cQ9rNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX49n0YvazS/10D+gqW2welfOpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2I4YWJhMDYtZWFhYi0z N2NkLThlYzQtYzlhN2VhYTNjNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ0GeJhgtCmq4GXyUmtsaOV7WrIrMC6pnSYvx67or0PLuf7CuzE7LNv C5o1h915GTPr6+E3iiZ3QLBwuJQ1c6XHKMgPy1uPlgEcTzzqaHtf8MUPXLN9tb34 AKZxNwDOE338N1itUwbR/BkW1fTtzB2YviVCM35uBDuxhXphG9OO7ttUOkIKFosu 8CcwSklA9Vd5d4mfQ2Xxxl0mOvvAa1Ak0Ziw1OYcmVgejjttY0EerDb6UzyEDAe/ SoPM9VPQledtB4iCvL2Z9V6A9oZOTYE5IJp1hhDtZcn94bkGkgLEPQlaH8EO2MXD pnkVEplTk+WHnHxaAb/YdsPEfTa1AAY= -----END CERTIFICATE-----Generated at Fri Nov 22 08:03:24 2024 by rpki-client on console-ams.rpki-client.org