$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa File: bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa (raw, json) Hash identifier: i6Ej6KDiukMEgkQ8Cy5pcvncKl/Ste9anqlbYjjSfyA= Subject key identifier: E2:37:E4:E0:B6:53:70:95:55:FA:81:99:62:C2:2C:4A:B1:B5:03:0F Certificate issuer: /CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Certificate serial: 010D0C9F43285847EFEF8D4B60AFCB969EFF5500 Authority key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 55076 IP address blocks: 198.37.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:8d:4b:60:af:cb:96:9e:ff:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=d940e132-d2a8-408b-a18a-82053bf69548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:24:3a:8d:f2:74:80:94:4e:01:97:46:9a: e5:38:79:12:1d:9e:42:1f:5d:d0:dc:3a:2b:e9:2d: eb:da:43:77:3c:fe:15:08:45:8b:30:44:19:df:0b: 7c:d3:7c:2b:af:dd:9d:f2:f8:9f:c2:1f:c4:42:66: 27:3b:e1:65:c4:75:85:56:aa:86:8b:a9:fc:a3:2c: f5:1b:6f:4a:64:7b:ee:9e:e3:8a:d4:fe:aa:f8:1a: 0f:bb:1a:bd:81:61:a7:65:60:b8:eb:ce:0c:6e:73: 60:c5:b7:ee:f3:61:0d:cc:81:72:d5:dd:e6:bb:9f: b9:6e:85:1c:e6:d3:33:15:c5:cb:fb:42:ad:75:ca: 2b:2d:b3:cb:e7:74:49:ae:f5:1d:bb:a8:40:87:37: 7f:61:99:da:6f:fe:05:18:8f:74:e7:29:d3:29:f3: 14:87:0b:a4:b7:fe:c5:ae:47:ff:83:08:6d:d9:0e: 39:48:4d:31:9a:5a:da:16:89:32:46:1d:97:04:38: ca:b8:c0:5e:fc:5e:e0:14:8d:6e:9b:56:d0:28:8b: 0b:9a:4d:7a:c6:30:fc:7f:23:75:63:23:2c:54:8c: 8f:0b:5a:dc:fe:f6:03:11:8a:ba:1c:38:81:b7:1d: a4:d6:95:1c:24:f3:bf:43:56:3b:28:e3:34:39:4d: a4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:E4:E0:B6:53:70:95:55:FA:81:99:62:C2:2C:4A:B1:B5:03:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl X509v3 Authority Key Identifier: keyid:D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer sbgp-ipAddrBlock: critical IPv4: 198.37.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:79:b5:a6:24:74:10:ba:08:b4:3e:fc:ba:a1:91:37:00:7c: 9b:86:aa:03:dc:df:5d:99:a5:f2:7e:7d:a0:49:24:8d:73:fb: c7:01:c7:31:cb:4c:18:68:69:59:fc:3e:2c:09:50:73:0f:17: ca:f6:ea:f7:d9:de:b4:31:9b:85:3b:5f:02:6c:e6:44:c9:58: 23:55:c2:f2:a3:39:c1:53:47:1b:12:d0:dc:5f:3f:9d:30:31: 72:20:88:8d:74:d6:c9:15:7a:d4:ac:5a:58:46:4a:95:06:b3: 97:e6:f5:48:55:2e:b2:40:b6:80:6b:15:8f:37:f0:8e:34:c2: 50:91:d9:ba:ed:20:97:24:e8:3a:b8:5f:f4:51:1d:fb:11:ce: d7:cc:e9:48:60:97:31:dc:e9:7e:4d:cf:b2:1a:eb:e2:aa:a3: 4d:1c:f0:df:27:bd:9b:b1:af:db:86:fe:4d:94:07:eb:c9:61: 48:60:63:66:40:06:cd:ce:c5:38:94:df:18:d4:5e:78:d1:7c: 73:ec:55:1d:70:96:b4:45:ac:37:c9:c7:d1:31:ca:a0:91:5b: 71:23:2c:1e:c1:f8:16:39:a9:2a:28:a1:79:3a:90:9a:71:8f: 88:e0:8e:c9:fb:1c:89:1e:b5:25:a5:ae:10:3a:8e:8a:a7:96: ce:98:08:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv741LYK/Llp7/VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5 ZTdlMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk ZDk0MGUxMzItZDJhOC00MDhiLWExOGEtODIwNTNiZjY5NTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqEkOo3ydICUTgGXRprlOHkSHZ5CH13Q3Dor 6S3r2kN3PP4VCEWLMEQZ3wt803wrr92d8vifwh/EQmYnO+FlxHWFVqqGi6n8oyz1 G29KZHvunuOK1P6q+BoPuxq9gWGnZWC4684MbnNgxbfu82ENzIFy1d3mu5+5boUc 5tMzFcXL+0KtdcorLbPL53RJrvUdu6hAhzd/YZnab/4FGI905ynTKfMUhwukt/7F rkf/gwht2Q45SE0xmlraFokyRh2XBDjKuMBe/F7gFI1um1bQKIsLmk16xjD8fyN1 YyMsVIyPC1rc/vYDEYq6HDiBtx2k1pUcJPO/Q1Y7KOM0OU2k9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOI35OC2U3CVVfqBmWLCLEqxtQMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRj NjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvYmY2NTk0ZjctMWMxNi0z NmI4LWJjYzYtNmY4MTViMmVjNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2 ZjctYjY1NmUyZmI5ZTdlLzM0NGM2NzA0LWIzYmItNGVkOC1iNmY3LWI2NTZlMmZi OWU3ZS5jcmwwHwYDVR0jBBgwFoAU0kXFVdEiCOosnhaU12kn39YnPlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2 ZTJmYjllN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxiWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ5taYkdBC6CLQ+/LqhkTcAfJuGqgPc312ZpfJ+faBJJI1z+8cBxzHL TBhoaVn8PiwJUHMPF8r26vfZ3rQxm4U7XwJs5kTJWCNVwvKjOcFTRxsS0NxfP50w MXIgiI101skVetSsWlhGSpUGs5fm9UhVLrJAtoBrFY838I40wlCR2brtIJck6Dq4 X/RRHfsRztfM6UhglzHc6X5Nz7Ia6+Kqo00c8N8nvZuxr9uG/k2UB+vJYUhgY2ZA Bs3OxTiU3xjUXnjRfHPsVR1wlrRFrDfJx9ExyqCRW3EjLB7B+BY5qSoooXk6kJpx j4jgjsn7HIketSWlrhA6joqnls6YCLw= -----END CERTIFICATE-----Generated at Fri Nov 22 04:24:39 2024 by rpki-client on console-fra.rpki-client.org