$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/0df888ae-cb2c-3b30-9b65-aa4322f28364.roa File: 0df888ae-cb2c-3b30-9b65-aa4322f28364.roa (raw, json) Hash identifier: lMbl1UgaOsDxLPF6pBnniEmA4aeKRe3j6Wn0OKHabGg= Subject key identifier: 72:D1:57:7F:E5:80:BD:72:13:3F:09:3F:FB:62:63:8A:B0:31:14:B1 Certificate issuer: /CN=76025b2c-a5d0-4f94-a97d-21d8b8245b07 Certificate serial: 010D0C9F43285847E62A9DF1A50478A0E6B58A00 Authority key identifier: F3:CB:67:A8:94:C6:F6:22:66:49:6C:57:9E:A1:99:C2:8C:50:CC:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/0df888ae-cb2c-3b30-9b65-aa4322f28364.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 20424 IP address blocks: 136.22.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/76025b2c-a5d0-4f94-a97d-21d8b8245b07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/76025b2c-a5d0-4f94-a97d-21d8b8245b07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:9d:f1:a5:04:78:a0:e6:b5:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76025b2c-a5d0-4f94-a97d-21d8b8245b07 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=bc30c66e-f07d-4f34-83b5-6172d5cdc501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:9b:5a:5f:ee:90:6f:12:d5:09:9d:ac:ee: 00:08:a9:e2:3d:ee:24:f6:42:c7:ab:83:34:b8:82: 24:fd:6f:4a:95:d0:e4:0d:bd:03:d4:91:2b:68:0c: 38:e9:1d:79:8e:46:e5:fa:6c:0e:8f:c7:8f:72:44: c4:f4:f7:20:a4:0f:7d:58:27:52:36:e7:97:41:35: ab:34:72:55:27:5d:52:bf:72:f4:ac:f0:79:4d:42: 7b:60:b3:a0:0e:d6:a3:c3:41:75:ce:1d:9b:40:3c: 10:7a:4f:76:f5:65:0f:77:d1:33:13:f3:75:ea:d7: b0:f3:9c:44:66:3c:b2:9b:ed:8f:24:5a:cc:28:c1: bf:c1:1f:5a:67:73:6b:5f:ab:9f:20:da:d8:e4:f3: 07:a9:ed:07:fe:ab:bb:f9:e2:8b:95:b1:ef:72:c5: 1b:fb:19:c7:6b:76:ed:48:f6:a5:e3:58:83:92:1b: 7f:5f:d5:a0:d9:73:f3:fe:00:24:3a:af:79:c9:e1: bb:87:7c:e0:5a:5d:3b:c0:28:a2:a1:28:ab:a2:17: 35:1c:36:0e:52:02:f5:50:0f:8b:46:59:09:25:f8: 8b:53:2d:79:09:11:ba:f0:c4:3f:7a:94:84:d1:76: 0e:c4:36:74:b1:56:f7:8f:11:42:dc:c3:3c:e9:f3: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D1:57:7F:E5:80:BD:72:13:3F:09:3F:FB:62:63:8A:B0:31:14:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/0df888ae-cb2c-3b30-9b65-aa4322f28364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/76025b2c-a5d0-4f94-a97d-21d8b8245b07.crl X509v3 Authority Key Identifier: keyid:F3:CB:67:A8:94:C6:F6:22:66:49:6C:57:9E:A1:99:C2:8C:50:CC:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07.cer sbgp-ipAddrBlock: critical IPv4: 136.22.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f6:47:ad:af:e7:ea:49:85:7a:8d:c4:61:94:80:ae:07:9d: 77:60:a9:39:3a:c7:ba:01:2e:5f:1b:47:a8:23:d4:41:e0:9d: 35:ae:e4:05:42:c1:1a:e8:89:dc:12:37:0f:64:54:86:cd:aa: d0:4b:90:6b:04:76:bd:a4:c6:95:71:5d:4f:23:d4:6a:ba:aa: 36:69:9f:82:f5:80:79:98:17:f3:ba:cc:a7:2d:db:7b:bf:df: 73:36:47:86:28:f8:b9:44:a3:71:a2:c8:77:df:48:1b:a4:fc: 5f:0d:69:ea:74:22:e2:21:a9:6a:3b:65:4d:8a:2e:20:9f:27: 04:b9:6c:02:c9:c8:68:7e:02:e0:4e:df:ba:1d:7c:b5:96:1b: 58:9e:e3:29:87:eb:79:62:ce:70:9d:31:53:79:80:a8:a1:91: a8:24:ae:96:24:05:97:2c:9a:2c:e6:2e:c0:43:d4:46:f6:79: c2:46:75:ec:54:34:4e:d5:38:d8:c1:ca:15:0d:85:d5:4a:10: 38:f4:41:4d:eb:3b:58:24:e0:28:05:b7:ad:55:ad:cc:1c:bb: 1e:e4:17:ee:e3:5d:d3:12:8f:09:04:63:da:ec:f9:91:c6:80: 5b:1d:49:5a:7c:86:74:c0:37:94:e9:62:c6:ab:bd:67:8b:30: 60:a8:55:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKp3xpQR4oOa1igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzYwMjViMmMtYTVkMC00Zjk0LWE5N2QtMjFkOGI4MjQ1 YjA3MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YmMzMGM2NmUtZjA3ZC00ZjM0LTgzYjUtNjE3MmQ1Y2RjNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy2bWl/ukG8S1QmdrO4ACKniPe4k9kLHq4M0 uIIk/W9KldDkDb0D1JEraAw46R15jkbl+mwOj8ePckTE9PcgpA99WCdSNueXQTWr NHJVJ11Sv3L0rPB5TUJ7YLOgDtajw0F1zh2bQDwQek929WUPd9EzE/N16tew85xE Zjyym+2PJFrMKMG/wR9aZ3NrX6ufINrY5PMHqe0H/qu7+eKLlbHvcsUb+xnHa3bt SPal41iDkht/X9Wg2XPz/gAkOq95yeG7h3zgWl07wCiioSirohc1HDYOUgL1UA+L RlkJJfiLUy15CRG68MQ/epSE0XYOxDZ0sVb3jxFC3MM86fOPiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLRV3/lgL1yEz8JP/tiY4qwMRSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NjAy NWIyYy1hNWQwLTRmOTQtYTk3ZC0yMWQ4YjgyNDViMDcvMGRmODg4YWUtY2IyYy0z YjMwLTliNjUtYWE0MzIyZjI4MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzYwMjViMmMtYTVkMC00Zjk0LWE5 N2QtMjFkOGI4MjQ1YjA3Lzc2MDI1YjJjLWE1ZDAtNGY5NC1hOTdkLTIxZDhiODI0 NWIwNy5jcmwwHwYDVR0jBBgwFoAU88tnqJTG9iJmSWxXnqGZwoxQzAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83NjAyNWIyYy1hNWQwLTRmOTQtYTk3ZC0yMWQ4 YjgyNDViMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA72R62v5+pJhXqNxGGUgK4HnXdgqTk6x7oBLl8bR6gj1EHgnTWu5AVC wRroidwSNw9kVIbNqtBLkGsEdr2kxpVxXU8j1Gq6qjZpn4L1gHmYF/O6zKct23u/ 33M2R4Yo+LlEo3GiyHffSBuk/F8Naep0IuIhqWo7ZU2KLiCfJwS5bALJyGh+AuBO 37odfLWWG1ie4ymH63liznCdMVN5gKihkagkrpYkBZcsmizmLsBD1Eb2ecJGdexU NE7VONjByhUNhdVKEDj0QU3rO1gk4CgFt61Vrcwcux7kF+7jXdMSjwkEY9rs+ZHG gFsdSVp8hnTAN5TpYsarvWeLMGCoVdY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:20 2024 by rpki-client on console-ams.rpki-client.org