$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dafa22b2-e75f-3522-85b4-0863aacf25b9.roa File: dafa22b2-e75f-3522-85b4-0863aacf25b9.roa (raw, json) Hash identifier: zqKsYfCITpnxxsMIzc99B9PADGWFm39qv7y7NaAPUnw= Subject key identifier: 1A:32:26:63:C3:DE:92:FB:6D:43:03:3A:1C:0B:0D:1E:98:61:6E:A4 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285847E62B657D74716DAEAAC5C240 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dafa22b2-e75f-3522-85b4-0863aacf25b9.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 36492 IP address blocks: 136.22.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:65:7d:74:71:6d:ae:aa:c5:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=981653c7-30b5-45ee-8ee6-84d19ed4eb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:a9:62:4f:52:63:c4:56:e4:2c:06:82:64: a5:ae:d7:c6:ac:5f:03:f7:15:98:31:96:99:6f:94: 03:ee:e8:f6:ca:b0:42:b1:2a:e8:89:d0:79:9b:4e: 59:a9:55:d1:bd:0a:6d:c6:10:a5:e7:60:c9:cb:26: 9d:ee:ba:34:d9:1f:8a:a3:bd:bc:ba:3b:53:72:32: aa:a9:c3:76:f5:1a:15:ed:fc:ea:1a:f9:b0:01:8c: 60:e3:b1:13:2b:3e:8b:04:1d:59:9a:af:dc:5d:8d: 3f:0c:1a:14:09:0e:ef:13:b9:a9:4c:8d:34:f5:e0: c6:c2:88:c3:1e:b4:02:f3:6e:16:d9:29:74:b3:ec: 1a:68:2c:9e:d2:d8:05:17:4d:ea:e7:54:76:64:56: 26:8b:4c:0e:6d:48:58:bd:5f:77:d2:a8:4f:65:5d: 85:f7:37:9f:b0:23:45:78:17:c8:54:8b:2c:69:21: 1e:6e:8f:51:20:4d:88:80:7c:59:5b:6c:79:5d:fc: 81:07:69:d0:ac:84:bd:62:72:51:f3:29:15:a5:df: 33:b4:11:b7:ec:9f:a3:47:be:c8:5e:b5:a4:88:00: 1e:18:18:f3:1d:71:4d:3f:4f:72:7f:36:e3:11:d9: 7c:c7:9c:78:1a:20:da:b9:76:a7:33:1d:8a:f0:b9: b3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:26:63:C3:DE:92:FB:6D:43:03:3A:1C:0B:0D:1E:98:61:6E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dafa22b2-e75f-3522-85b4-0863aacf25b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b6:e9:f8:25:40:62:8e:05:0b:27:08:2f:1e:90:19:3d:60: 3a:b3:6e:bb:87:71:17:86:5e:81:36:26:e0:22:eb:ce:0f:b9: d1:80:37:2d:5a:09:45:c7:f6:f4:7e:76:a6:ce:6b:ae:e7:8b: 2e:f9:92:13:0f:1d:7e:10:2e:ba:df:ee:79:fe:1c:91:69:e7: 20:fe:36:12:9f:74:94:92:e2:c3:21:e2:13:3a:9b:33:96:6b: 2d:8c:b2:ea:88:20:e6:c6:6e:13:70:22:8a:c1:eb:c8:87:ab: 6d:aa:aa:f4:30:75:9a:f6:1b:42:63:d2:c4:f5:ef:97:fe:de: 92:93:d2:ea:f0:4b:cd:44:17:b8:ad:d5:76:9d:42:95:80:fa: c7:05:24:d6:c2:01:4a:79:ac:33:59:3a:a5:fd:b9:61:96:61: 78:cd:e2:f0:10:f7:e4:74:b1:82:ec:e1:cc:0e:c1:ce:db:e2: eb:4c:62:7f:18:d3:01:2f:2b:c7:a1:31:16:f5:0a:33:82:ae: a7:43:96:e6:f8:b0:22:fe:cd:75:b7:7a:d5:cd:30:6c:71:63: 1a:40:1c:ee:c9:29:d0:e9:2f:a4:c3:55:15:a3:39:3f:80:84: 9e:81:88:1c:db:1f:16:fc:9b:6a:65:5b:ba:03:d6:1a:49:6f: 79:96:69:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK2V9dHFtrqrFwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OTgxNjUzYzctMzBiNS00NWVlLThlZTYtODRkMTllZDRlYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0KpYk9SY8RW5CwGgmSlrtfGrF8D9xWYMZaZ b5QD7uj2yrBCsSroidB5m05ZqVXRvQptxhCl52DJyyad7ro02R+Ko728ujtTcjKq qcN29RoV7fzqGvmwAYxg47ETKz6LBB1Zmq/cXY0/DBoUCQ7vE7mpTI009eDGwojD HrQC824W2Sl0s+waaCye0tgFF03q51R2ZFYmi0wObUhYvV930qhPZV2F9zefsCNF eBfIVIssaSEebo9RIE2IgHxZW2x5XfyBB2nQrIS9YnJR8ykVpd8ztBG37J+jR77I XrWkiAAeGBjzHXFNP09yfzbjEdl8x5x4GiDauXanMx2K8LmzowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoyJmPD3pL7bUMDOhwLDR6YYW6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZGFmYTIyYjItZTc1Zi0z NTIyLTg1YjQtMDg2M2FhY2YyNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm26fglQGKOBQsnCC8ekBk9YDqzbruHcReGXoE2JuAi684PudGANy1a CUXH9vR+dqbOa67niy75khMPHX4QLrrf7nn+HJFp5yD+NhKfdJSS4sMh4hM6mzOW ay2MsuqIIObGbhNwIorB68iHq22qqvQwdZr2G0Jj0sT175f+3pKT0urwS81EF7it 1XadQpWA+scFJNbCAUp5rDNZOqX9uWGWYXjN4vAQ9+R0sYLs4cwOwc7b4utMYn8Y 0wEvK8ehMRb1CjOCrqdDlub4sCL+zXW3etXNMGxxYxpAHO7JKdDpL6TDVRWjOT+A hJ6BiBzbHxb8m2plW7oD1hpJb3mWaSA= -----END CERTIFICATE-----Generated at Sun Nov 24 15:28:55 2024 by rpki-client on console-fra.rpki-client.org