$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa File: 33af6a38-02b6-3f92-bf22-40f73c436cc1.roa (raw, json) Hash identifier: 1tTKmgWB/hKQwLwhpsPTXI6iXzrZ9Pu/ZCojfh0emo8= Subject key identifier: 0C:49:F2:50:B7:98:AE:18:C0:31:29:B8:70:40:A7:98:FF:FC:B4:AE Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285847E094DC3F7924EFD494046B80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 36040 IP address blocks: 136.22.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:dc:3f:79:24:ef:d4:94:04:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=5a6ae321-143d-49c0-a844-5f62fb0d7883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:24:13:2b:7d:6c:d1:f7:0b:71:3d:dc:fe: b1:16:8f:ee:b7:5e:9a:4f:80:55:1d:b5:32:33:96: 8c:b5:f9:61:d3:22:74:ab:0d:78:73:2f:15:5e:46: 9e:ce:31:f1:a2:a0:af:10:94:eb:94:12:b4:99:d3: f1:04:76:b0:c0:bc:ac:3f:0b:4d:34:4a:c9:8a:23: a9:9b:78:e3:63:1e:c0:97:29:93:5b:aa:b0:c0:67: d1:6c:64:d2:26:ba:9c:17:48:d3:bb:27:f8:76:3e: 11:c4:b3:28:49:8f:42:c7:e4:69:41:6e:5c:54:3b: 1c:74:97:90:bd:d4:fb:9c:ea:fd:4c:e9:3e:53:fa: 43:07:56:de:31:79:e3:db:5c:72:c8:64:d6:8d:b7: ed:60:d7:06:82:9b:16:83:3b:d4:d6:8c:ac:68:a1: 75:aa:1d:2d:b2:2c:f0:f0:28:7f:39:d6:c6:ce:63: cc:02:0b:cd:76:c3:c1:f1:45:66:54:6a:da:80:10: 9e:40:99:70:62:f3:81:64:ed:b1:51:17:71:a5:5b: 00:df:67:84:67:b1:93:21:f1:61:b2:f2:3d:c6:cf: 3b:74:56:9b:04:62:01:68:d9:6c:46:40:c1:94:ec: c6:c4:95:45:bf:7b:2f:d4:e3:8a:c9:85:16:5a:b0: 99:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:49:F2:50:B7:98:AE:18:C0:31:29:B8:70:40:A7:98:FF:FC:B4:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0a:bf:fe:78:7c:47:f7:54:ad:8f:69:5e:5b:df:54:7f:0e: b5:71:b0:6a:18:2b:ab:1a:b3:8e:44:34:64:ad:6f:7d:56:bc: 2a:8a:99:eb:4d:19:63:fc:26:1c:8f:5c:72:3d:e8:89:e3:3a: 3d:c5:0b:bc:26:d5:e2:98:7c:be:2c:77:a8:0d:57:ff:3d:09: 3b:9c:03:1c:9d:cc:72:94:7c:73:0e:02:b7:a0:cc:2f:44:93: 89:ca:12:0b:b2:c6:1c:56:ef:b9:45:fc:f6:a1:de:9d:e4:0a: fa:fa:00:16:c9:f4:75:2f:95:b3:8d:d8:d0:c4:00:61:9f:4f: 0c:38:0e:0f:bf:7a:17:ae:94:f6:6c:a5:9b:19:16:a2:dc:7e: 42:54:1c:f5:10:04:d6:5f:c8:4a:de:f9:fb:cc:6d:dc:c2:04: fe:8c:10:42:c9:fa:a0:05:f3:c7:e7:98:5f:f1:64:c8:90:c1: fa:69:fa:9a:ad:92:3b:46:8e:19:52:41:ff:57:bc:a2:de:fd: e4:b6:11:15:24:39:82:0e:a3:fb:5a:8c:ed:f3:ab:79:0b:04: 58:8e:26:70:d5:78:2c:2b:7e:f8:8b:b7:c2:18:91:2f:52:7c: 3e:14:c3:20:d4:67:df:3e:36:8b:0c:70:19:4a:f0:a2:06:a0: d5:73:ad:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglNw/eSTv1JQEa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk NWE2YWUzMjEtMTQzZC00OWMwLWE4NDQtNWY2MmZiMGQ3ODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZskEyt9bNH3C3E93P6xFo/ut16aT4BVHbUy M5aMtflh0yJ0qw14cy8VXkaezjHxoqCvEJTrlBK0mdPxBHawwLysPwtNNErJiiOp m3jjYx7AlymTW6qwwGfRbGTSJrqcF0jTuyf4dj4RxLMoSY9Cx+RpQW5cVDscdJeQ vdT7nOr9TOk+U/pDB1beMXnj21xyyGTWjbftYNcGgpsWgzvU1oysaKF1qh0tsizw 8Ch/OdbGzmPMAgvNdsPB8UVmVGragBCeQJlwYvOBZO2xURdxpVsA32eEZ7GTIfFh svI9xs87dFabBGIBaNlsRkDBlOzGxJVFv3sv1OOKyYUWWrCZ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxJ8lC3mK4YwDEpuHBAp5j//LSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMzNhZjZhMzgtMDJiNi0z ZjkyLWJmMjItNDBmNzNjNDM2Y2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUKv/54fEf3VK2PaV5b31R/DrVxsGoYK6sas45ENGStb31WvCqKmetN GWP8JhyPXHI96InjOj3FC7wm1eKYfL4sd6gNV/89CTucAxydzHKUfHMOAregzC9E k4nKEguyxhxW77lF/Pah3p3kCvr6ABbJ9HUvlbON2NDEAGGfTww4Dg+/eheulPZs pZsZFqLcfkJUHPUQBNZfyEre+fvMbdzCBP6MEELJ+qAF88fnmF/xZMiQwfpp+pqt kjtGjhlSQf9XvKLe/eS2ERUkOYIOo/tajO3zq3kLBFiOJnDVeCwrfviLt8IYkS9S fD4UwyDUZ98+NosMcBlK8KIGoNVzrdI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:28 2024 by rpki-client on console-fra.rpki-client.org