$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/04eeae2a-a92a-36c8-9463-49c0900d4910.roa File: 04eeae2a-a92a-36c8-9463-49c0900d4910.roa (raw, json) Hash identifier: rA6m/h9V37fDXo/WUVJodjyqex+LNsIO1HV+nYTxOD8= Subject key identifier: 77:6B:17:91:F6:E4:52:9E:6D:0D:C5:86:5C:7A:46:7D:35:9C:A6:74 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584540BCA5F827EB7CFAC55C7E40 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/04eeae2a-a92a-36c8-9463-49c0900d4910.roa Signing time: Mon 18 Mar 2024 22:17:55 +0000 ROA not before: Mon 18 Mar 2024 22:17:55 +0000 ROA not after: Sun 16 Jun 2024 22:17:55 +0000 asID: 36492 IP address blocks: 136.22.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:bc:a5:f8:27:eb:7c:fa:c5:5c:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Mar 18 22:17:55 2024 GMT Not After : Jun 16 22:17:55 2024 GMT Subject: CN=30f9c534-b7e4-4edd-8f30-96a8b2f6779f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:33:3c:99:b3:35:78:59:d2:1e:65:8d:89:83: 27:61:1c:17:fa:57:27:27:15:37:6c:6f:0a:e9:5d: 45:10:2e:53:56:4d:d5:f7:88:4c:5a:73:89:8c:a1: a8:91:f8:46:a4:a8:84:55:a7:56:b1:53:3b:45:2d: ef:cf:45:83:2c:cd:a2:ba:33:39:14:de:b1:fc:55: 1e:55:b0:a0:ce:ef:32:a3:b2:67:30:b3:34:ee:5b: f6:e4:16:02:4a:b9:76:e4:49:b2:c4:e9:e7:f2:8b: d9:7a:eb:8b:bc:7d:05:e4:6e:14:b8:d3:d4:84:6f: d1:e2:e0:0f:8a:cc:aa:8f:bc:7b:f5:36:a7:f6:69: e7:28:57:76:a2:e0:15:e9:1a:d2:ab:45:82:50:4b: 6f:b3:eb:6d:22:55:c9:93:2c:de:d5:de:c9:c7:0a: 10:77:a9:b9:53:19:a5:db:66:28:25:bc:8d:25:e0: 93:b0:51:ed:d2:58:7f:a5:a1:26:cd:62:f2:e1:5a: 36:d2:9f:e9:70:2c:4c:9e:77:66:b1:fa:62:18:d9: 6b:2b:3d:7f:bd:d2:42:7d:9e:24:7a:22:aa:d3:a5: 61:4b:db:0d:68:b5:a6:c9:b6:54:4d:9a:8d:aa:52: 40:6a:a4:22:b7:ba:03:2a:87:00:8a:33:57:63:64: de:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6B:17:91:F6:E4:52:9E:6D:0D:C5:86:5C:7A:46:7D:35:9C:A6:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/04eeae2a-a92a-36c8-9463-49c0900d4910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:76:cd:3d:2c:b1:13:1a:5b:46:1d:4a:02:59:76:be:80:6d: 87:52:eb:de:02:87:5c:2e:51:31:e6:e8:91:4f:57:0c:51:80: bf:7e:43:40:b7:f7:08:51:8c:d7:08:b8:be:73:7a:38:93:27: 95:9d:98:d7:00:d3:52:fd:52:bf:b8:f4:52:90:12:b0:2a:a7: 80:8c:e1:8c:88:7b:19:cb:46:81:6f:dd:26:75:ce:98:e3:48: ce:b6:ee:40:77:0d:84:f8:39:68:ec:e4:8a:02:ea:bf:3a:72: 29:89:a9:89:7a:4b:55:93:de:2d:14:72:f1:56:fc:e0:43:cd: 6b:ca:b5:8e:55:15:d6:cc:12:49:e9:7e:b8:f6:c9:af:e1:b6: 9d:49:4b:04:a3:99:69:b5:ea:0c:94:08:51:83:54:ed:2f:d7: bd:0d:68:f3:e4:03:06:32:b6:2a:f7:ee:b1:ec:fa:b0:61:45: 8d:84:15:5f:29:0a:0a:a1:e9:dd:7c:1e:54:e0:bd:88:dc:34: e9:4d:a8:d9:f5:65:aa:3b:d8:7f:b4:08:9c:c2:16:6f:ff:a3: a5:e8:b7:48:3e:14:21:f9:92:fe:6f:0f:0e:38:d8:60:5d:43: 7b:fa:47:53:b6:5d:69:9e:a5:2f:6f:92:c8:72:d1:78:6f:8a: e9:0d:c7:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAvKX4J+t8+sVcfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI0MDMxODIyMTc1NVoXDTI0MDYxNjIyMTc1NVowLzEtMCsGA1UEAxMk MzBmOWM1MzQtYjdlNC00ZWRkLThmMzAtOTZhOGIyZjY3NzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjM8mbM1eFnSHmWNiYMnYRwX+lcnJxU3bG8K 6V1FEC5TVk3V94hMWnOJjKGokfhGpKiEVadWsVM7RS3vz0WDLM2iujM5FN6x/FUe VbCgzu8yo7JnMLM07lv25BYCSrl25EmyxOnn8ovZeuuLvH0F5G4UuNPUhG/R4uAP isyqj7x79Tan9mnnKFd2ouAV6RrSq0WCUEtvs+ttIlXJkyze1d7JxwoQd6m5Uxml 22YoJbyNJeCTsFHt0lh/paEmzWLy4Vo20p/pcCxMnndmsfpiGNlrKz1/vdJCfZ4k eiKq06VhS9sNaLWmybZUTZqNqlJAaqQit7oDKocAijNXY2TeTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdrF5H25FKebQ3Fhlx6Rn01nKZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMDRlZWFlMmEtYTkyYS0z NmM4LTk0NjMtNDljMDkwMGQ0OTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF92zT0ssRMaW0YdSgJZdr6AbYdS694Ch1wuUTHm6JFPVwxRgL9+Q0C3 9whRjNcIuL5zejiTJ5WdmNcA01L9Ur+49FKQErAqp4CM4YyIexnLRoFv3SZ1zpjj SM627kB3DYT4OWjs5IoC6r86cimJqYl6S1WT3i0UcvFW/OBDzWvKtY5VFdbMEknp frj2ya/htp1JSwSjmWm16gyUCFGDVO0v170NaPPkAwYytir37rHs+rBhRY2EFV8p Cgqh6d18HlTgvYjcNOlNqNn1Zao72H+0CJzCFm//o6Xot0g+FCH5kv5vDw442GBd Q3v6R1O2XWmepS9vkshy0XhviukNx1o= -----END CERTIFICATE-----Generated at Wed May 1 16:30:47 2024 by rpki-client on console-fra.rpki-client.org