$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a3aa288a-1219-37f6-8ef8-576d6accfe4a.roa File: a3aa288a-1219-37f6-8ef8-576d6accfe4a.roa (raw, json) Hash identifier: jcXTlWBMnq5rqp/0uDuO5scOXsJpGVsK/Odhe2Jj9xs= Subject key identifier: F7:3A:E1:5C:65:70:B4:23:0E:6D:E0:A8:D0:21:C4:49:D2:25:D7:7E Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285845462437DC51E4D3FC8B1FDB00 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a3aa288a-1219-37f6-8ef8-576d6accfe4a.roa Signing time: Wed 20 Mar 2024 20:45:38 +0000 ROA not before: Wed 20 Mar 2024 20:45:38 +0000 ROA not after: Tue 18 Jun 2024 20:45:38 +0000 asID: 36492 IP address blocks: 136.22.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:24:37:dc:51:e4:d3:fc:8b:1f:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Mar 20 20:45:38 2024 GMT Not After : Jun 18 20:45:38 2024 GMT Subject: CN=ca1cc407-0c36-4481-b60b-e96b2bdc1a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:2f:13:69:42:f8:49:18:2c:3f:a5:c0:30: c1:58:4d:6a:a8:67:1f:f7:0e:02:16:79:06:4c:fd: 25:a7:f5:a0:22:55:f5:a5:b3:58:4e:5c:c2:b0:78: 05:05:57:9a:99:1b:91:e3:9e:9f:e2:f7:47:94:65: f4:6e:5e:5a:66:a1:b5:c6:1b:98:d8:92:46:5b:8f: 79:46:ee:e5:aa:c0:7f:8f:9d:0c:cd:40:77:42:64: 56:0b:32:56:a4:22:93:9a:5b:1b:7f:6b:78:26:4e: 54:18:38:1a:1d:d9:09:65:24:95:90:44:58:39:c0: 98:39:78:ac:37:e1:38:98:2d:79:7d:af:83:e2:44: 93:7b:15:79:3c:ff:01:4d:a3:9e:ab:cc:52:c5:86: 18:06:9d:13:fb:fa:30:bf:18:05:c0:96:80:f1:d2: 78:2f:38:21:1e:f7:e8:96:5c:6b:36:43:5e:7a:3c: 4e:fc:82:c3:7b:0e:64:0b:2c:36:be:b0:96:d6:8e: 32:4b:15:dd:8a:c6:c0:ea:50:73:25:7f:51:c9:c4: 2d:b5:e6:02:7e:d2:6e:30:9c:a8:cb:cf:81:db:29: c8:9d:00:02:7e:32:32:28:aa:7a:03:4d:1b:a9:0c: 8f:1f:07:34:25:85:11:52:38:92:bd:55:d1:30:3e: c0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3A:E1:5C:65:70:B4:23:0E:6D:E0:A8:D0:21:C4:49:D2:25:D7:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a3aa288a-1219-37f6-8ef8-576d6accfe4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:6b:39:e8:a4:09:f9:40:4e:bc:47:3b:fe:19:25:a4:f5:2a: a7:2e:e8:2b:0a:dc:ac:1d:30:ce:06:86:b2:8c:e3:b4:3d:22: f4:45:5c:33:97:f9:b6:13:1b:85:9d:93:d7:bd:f0:cc:50:5a: 1d:1a:15:d8:cd:8f:02:e0:8c:70:4d:d9:23:68:6c:75:34:7c: 78:84:68:c5:dc:c4:81:bb:46:86:31:cd:e4:b5:5a:97:85:b6: 0b:8e:41:19:46:b7:40:ac:fe:c6:cf:32:54:5f:af:39:38:89: 2a:51:4b:db:f1:94:ed:28:4b:66:c6:05:88:5a:5e:64:0a:6d: d1:73:07:83:de:f1:e6:23:8c:8a:9b:03:ea:2e:34:d8:e2:38: fb:99:05:ed:a0:39:a7:df:ce:e2:fd:40:11:c4:41:2b:c4:f7: cc:54:ca:4b:70:a6:83:d0:25:aa:d6:c7:6c:18:2b:a4:16:3e: e9:27:bc:ef:fa:01:d6:67:3a:09:74:45:d7:5a:2f:18:7a:9a: db:37:88:d5:2c:fb:d4:2d:88:ae:38:ab:5d:13:03:31:dd:7b: 7f:ba:17:02:61:45:af:9b:c6:60:5e:88:5e:05:1b:a5:00:51: 46:0e:46:b3:02:73:7e:37:63:ce:d1:a7:91:64:de:9b:dc:bd: 2f:d7:5a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJDfcUeTT/Isf2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI0MDMyMDIwNDUzOFoXDTI0MDYxODIwNDUzOFowLzEtMCsGA1UEAxMk Y2ExY2M0MDctMGMzNi00NDgxLWI2MGItZTk2YjJiZGMxYTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqIvE2lC+EkYLD+lwDDBWE1qqGcf9w4CFnkG TP0lp/WgIlX1pbNYTlzCsHgFBVeamRuR456f4vdHlGX0bl5aZqG1xhuY2JJGW495 Ru7lqsB/j50MzUB3QmRWCzJWpCKTmlsbf2t4Jk5UGDgaHdkJZSSVkERYOcCYOXis N+E4mC15fa+D4kSTexV5PP8BTaOeq8xSxYYYBp0T+/owvxgFwJaA8dJ4LzghHvfo llxrNkNeejxO/ILDew5kCyw2vrCW1o4ySxXdisbA6lBzJX9RycQtteYCftJuMJyo y8+B2ynInQACfjIyKKp6A00bqQyPHwc0JYURUjiSvVXRMD7AawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPc64VxlcLQjDm3gqNAhxEnSJdd+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYTNhYTI4OGEtMTIxOS0z N2Y2LThlZjgtNTc2ZDZhY2NmZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFrOeikCflATrxHO/4ZJaT1Kqcu6CsK3KwdMM4GhrKM47Q9IvRFXDOX +bYTG4Wdk9e98MxQWh0aFdjNjwLgjHBN2SNobHU0fHiEaMXcxIG7RoYxzeS1WpeF tguOQRlGt0Cs/sbPMlRfrzk4iSpRS9vxlO0oS2bGBYhaXmQKbdFzB4Pe8eYjjIqb A+ouNNjiOPuZBe2gOaffzuL9QBHEQSvE98xUyktwpoPQJarWx2wYK6QWPuknvO/6 AdZnOgl0RddaLxh6mts3iNUs+9QtiK44q10TAzHde3+6FwJhRa+bxmBeiF4FG6UA UUYORrMCc343Y87Rp5Fk3pvcvS/XWpo= -----END CERTIFICATE-----Generated at Wed May 1 16:30:48 2024 by rpki-client on console-fra.rpki-client.org