$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa File: 2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa (raw, json) Hash identifier: 1HuWnqyw2ItDeh6klu+VkzajzxbYb56HQy5Yrv5flQo= Subject key identifier: C8:F2:7A:6C:99:48:9D:67:8D:B5:8D:33:97:08:AB:3C:A3:4B:73:71 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285847E094EAA6D81A82FE5D923880 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 36040 IP address blocks: 136.22.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:ea:a6:d8:1a:82:fe:5d:92:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=b51618c0-8eee-4130-8b9a-11d0504178ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:8e:0f:16:3e:67:53:85:38:1a:4a:60:42: ed:ed:0d:cd:e4:a1:91:85:3f:da:c0:25:f3:c4:7b: 56:90:15:68:35:ee:c7:d4:28:28:0b:9a:12:a0:13: 52:23:6d:53:12:ee:19:f5:aa:5d:b9:db:3a:54:78: c2:36:4c:d6:0a:f6:7b:2a:c9:33:a7:d7:4a:43:21: a0:72:bd:f7:97:22:e9:95:d9:9a:3b:b3:f0:6c:97: fb:69:f2:1d:68:ae:3d:23:98:dd:63:81:3a:2a:64: f1:b9:94:b2:d0:b1:81:43:32:9e:0f:54:ee:00:85: 7e:1b:dd:ef:1f:58:c1:82:1e:bf:28:60:38:03:b0: 62:41:fd:14:44:b2:2f:5d:f9:71:75:39:7f:c5:95: 79:b4:ce:95:7d:47:67:43:67:99:c9:cf:03:94:d4: 15:e9:f4:4e:46:85:fb:01:02:07:db:d0:3b:9e:cc: 97:65:26:04:27:6b:fd:24:ef:e1:18:bd:32:11:5a: 56:75:6f:92:0c:ed:4e:81:b4:d4:78:ad:94:07:a1: d1:d5:e2:2c:7f:da:25:bc:bd:8b:7e:cf:a9:a0:2a: 2d:43:5d:56:3c:3e:cf:6e:31:6d:66:78:24:47:38: 4d:08:40:8f:11:41:0d:01:17:27:98:a0:af:a4:d4: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F2:7A:6C:99:48:9D:67:8D:B5:8D:33:97:08:AB:3C:A3:4B:73:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ba:68:46:64:94:65:b2:8f:bc:6b:7b:fe:1e:de:53:ca:90: fd:0a:ca:0a:a0:06:7e:47:39:b3:7a:62:10:d0:fc:0f:55:20: e9:11:de:c6:51:b1:bc:de:32:75:75:48:ab:d4:21:a2:14:17: ad:15:a7:8f:69:a9:29:b4:d3:31:35:c6:cb:07:a0:a3:d6:b8: 57:a3:ce:24:83:89:8b:ef:4b:fc:7e:9c:18:96:d9:14:86:99: cd:84:74:ab:52:2d:50:03:72:28:f2:35:d3:d9:2f:ae:33:91: c2:b9:bf:ce:6e:fa:f2:ee:71:1b:1d:4b:df:5d:a8:b7:16:dd: a2:a5:a8:c2:1d:37:8d:3b:af:18:c3:e2:2f:7f:20:7d:c2:ba: f1:51:cd:4f:37:5c:49:5b:69:e7:fe:ba:04:99:1b:6f:c8:45: bf:36:41:82:f1:bc:85:4b:33:bb:f2:1c:a0:b3:01:dc:7e:75: f7:eb:8b:47:2f:a8:75:b8:a9:08:aa:b2:61:d0:f6:97:c6:28: ac:1b:fe:a6:47:4b:57:b7:fa:ed:36:0e:56:5a:58:7a:36:a5: c8:5b:d5:f1:98:1d:20:67:e7:e9:98:78:1c:cd:85:80:3e:2e: 74:30:bd:c0:cc:3c:41:c9:fa:18:23:67:32:45:5c:22:80:d1: f3:f7:dd:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglOqm2BqC/l2SOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk YjUxNjE4YzAtOGVlZS00MTMwLThiOWEtMTFkMDUwNDE3OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7SODxY+Z1OFOBpKYELt7Q3N5KGRhT/awCXz xHtWkBVoNe7H1CgoC5oSoBNSI21TEu4Z9apduds6VHjCNkzWCvZ7Kskzp9dKQyGg cr33lyLpldmaO7PwbJf7afIdaK49I5jdY4E6KmTxuZSy0LGBQzKeD1TuAIV+G93v H1jBgh6/KGA4A7BiQf0URLIvXflxdTl/xZV5tM6VfUdnQ2eZyc8DlNQV6fRORoX7 AQIH29A7nsyXZSYEJ2v9JO/hGL0yEVpWdW+SDO1OgbTUeK2UB6HR1eIsf9olvL2L fs+poCotQ11WPD7PbjFtZngkRzhNCECPEUENARcnmKCvpNTj9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjyemyZSJ1njbWNM5cIqzyjS3NxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMmRlZmJiYzAtMzQ4NC0z Y2M0LWI0YTktOGU5ZDRjMTQxMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm6aEZklGWyj7xre/4e3lPKkP0KygqgBn5HObN6YhDQ/A9VIOkR3sZR sbzeMnV1SKvUIaIUF60Vp49pqSm00zE1xssHoKPWuFejziSDiYvvS/x+nBiW2RSG mc2EdKtSLVADcijyNdPZL64zkcK5v85u+vLucRsdS99dqLcW3aKlqMIdN407rxjD 4i9/IH3CuvFRzU83XElbaef+ugSZG2/IRb82QYLxvIVLM7vyHKCzAdx+dffri0cv qHW4qQiqsmHQ9pfGKKwb/qZHS1e3+u02DlZaWHo2pchb1fGYHSBn5+mYeBzNhYA+ LnQwvcDMPEHJ+hgjZzJFXCKA0fP33Ss= -----END CERTIFICATE-----Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org