$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e0eb5fae-f64d-315a-a219-97d6c298f1e3.roa File: e0eb5fae-f64d-315a-a219-97d6c298f1e3.roa (raw, json) Hash identifier: iL18bdsECPz3yuC02uQjXWhYEFVYygdfxQPLlnRhebA= Subject key identifier: F7:AA:69:52:E9:91:D1:BB:A2:E9:DC:99:C8:82:DE:1A:A9:12:BA:6B Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F432858454628D81A8E1A9A9091D06480 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e0eb5fae-f64d-315a-a219-97d6c298f1e3.roa Signing time: Wed 20 Mar 2024 20:54:57 +0000 ROA not before: Wed 20 Mar 2024 20:54:57 +0000 ROA not after: Tue 18 Jun 2024 20:54:57 +0000 asID: 36492 IP address blocks: 136.22.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:28:d8:1a:8e:1a:9a:90:91:d0:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Mar 20 20:54:57 2024 GMT Not After : Jun 18 20:54:57 2024 GMT Subject: CN=93927bb6-8d36-444b-b15e-ca02ac984dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:a5:bc:b1:ac:91:39:cb:c8:46:aa:0f:c6: e8:bb:86:e5:c4:7e:c5:a9:4c:e8:bd:a3:f9:f6:ef: 6c:d5:dd:70:10:3a:07:4c:13:25:16:7a:d0:b6:33: 2e:58:db:07:53:d9:15:49:88:7e:2c:9d:84:2a:0d: ad:fe:d7:16:d5:66:b3:9d:c3:0d:d9:57:4a:16:ff: 0a:4a:4e:01:55:ad:34:02:dd:f9:f6:5c:0a:c2:6e: 36:ee:70:2d:4a:6b:f3:b5:b6:a7:be:43:e1:c9:61: 2e:6c:fe:51:d9:a0:33:71:96:7d:64:6f:29:5a:ea: b2:dd:48:d2:84:53:c9:f0:45:92:15:8a:d3:cc:a7: 10:f0:bc:60:b6:ea:59:86:00:40:31:00:06:4a:89: 4f:a6:e7:34:92:b1:0f:57:00:c2:6f:11:4d:f7:49: f8:8e:20:1a:ad:0b:71:82:5d:8c:3d:37:aa:43:6b: 45:01:21:d1:b2:d1:64:cc:fe:05:66:dc:c2:92:f6: f1:c5:c1:33:94:c0:45:9e:98:ed:61:a9:1e:56:c6: e8:dd:f2:0a:04:c0:78:e4:18:6b:cb:53:e4:28:9c: 45:25:a8:40:77:ab:6b:77:eb:d8:c4:89:eb:6b:69: e7:05:72:71:e4:a0:b5:ac:e9:88:36:70:5c:71:ba: a2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AA:69:52:E9:91:D1:BB:A2:E9:DC:99:C8:82:DE:1A:A9:12:BA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e0eb5fae-f64d-315a-a219-97d6c298f1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:cd:7c:ef:04:eb:9f:b0:99:b0:95:46:c5:99:e5:7e:95:15: 2f:6b:70:c6:a0:e2:42:be:22:81:80:25:60:e7:3a:8f:01:86: 7a:90:86:cd:22:89:3f:58:7a:79:8a:42:dc:ba:fe:1c:0e:55: f7:bb:74:29:8d:6b:69:bb:28:ef:a5:1c:7e:94:21:db:03:48: 8d:4f:04:cb:85:c4:56:7f:3d:18:91:9c:23:7b:24:ac:6d:42: a9:bb:9e:a3:2e:07:1c:ed:cf:71:90:51:bb:32:3d:e5:61:6a: 34:40:d4:07:c2:ed:37:da:a8:84:09:d1:b2:9b:4f:0a:02:03: 92:5a:d0:1c:83:c7:e7:5c:22:97:63:cb:d0:7f:05:37:42:d5: d4:bb:3c:f2:b4:21:c3:0a:20:b8:8d:9f:db:c5:88:38:5c:c1: 98:c6:ba:ba:3a:e3:c3:77:a1:ac:1e:0a:68:2f:06:d6:25:5d: 40:0f:4a:de:9e:02:24:2b:f2:93:c2:42:41:29:3d:0b:9b:2e: 56:e4:a8:1a:5d:81:cd:87:16:aa:ae:d2:bb:22:3d:7c:e6:21: 61:28:e7:96:4b:63:dd:9f:01:05:0b:c4:29:f4:11:95:91:38: e3:9d:e3:0b:cf:5f:65:8d:67:9d:57:02:01:05:83:66:84:08: 93:3b:4e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKNgajhqakJHQZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI0MDMyMDIwNTQ1N1oXDTI0MDYxODIwNTQ1N1owLzEtMCsGA1UEAxMk OTM5MjdiYjYtOGQzNi00NDRiLWIxNWUtY2EwMmFjOTg0ZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3OlvLGskTnLyEaqD8bou4blxH7FqUzovaP5 9u9s1d1wEDoHTBMlFnrQtjMuWNsHU9kVSYh+LJ2EKg2t/tcW1WazncMN2VdKFv8K Sk4BVa00At359lwKwm427nAtSmvztbanvkPhyWEubP5R2aAzcZZ9ZG8pWuqy3UjS hFPJ8EWSFYrTzKcQ8LxgtupZhgBAMQAGSolPpuc0krEPVwDCbxFN90n4jiAarQtx gl2MPTeqQ2tFASHRstFkzP4FZtzCkvbxxcEzlMBFnpjtYakeVsbo3fIKBMB45Bhr y1PkKJxFJahAd6trd+vYxInra2nnBXJx5KC1rOmINnBccbqi1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeqaVLpkdG7ouncmciC3hqpErprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZTBlYjVmYWUtZjY0ZC0z MTVhLWEyMTktOTdkNmMyOThmMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLNfO8E65+wmbCVRsWZ5X6VFS9rcMag4kK+IoGAJWDnOo8BhnqQhs0i iT9YenmKQty6/hwOVfe7dCmNa2m7KO+lHH6UIdsDSI1PBMuFxFZ/PRiRnCN7JKxt Qqm7nqMuBxztz3GQUbsyPeVhajRA1AfC7TfaqIQJ0bKbTwoCA5Ja0ByDx+dcIpdj y9B/BTdC1dS7PPK0IcMKILiNn9vFiDhcwZjGuro648N3oaweCmgvBtYlXUAPSt6e AiQr8pPCQkEpPQubLlbkqBpdgc2HFqqu0rsiPXzmIWEo55ZLY92fAQULxCn0EZWR OOOd4wvPX2WNZ51XAgEFg2aECJM7Tks= -----END CERTIFICATE-----Generated at Wed May 1 15:56:41 2024 by rpki-client on console-ams.rpki-client.org