$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa File: 793d4344-b365-3fc5-922f-5bd874e1dab9.roa (raw, json) Hash identifier: C3Bq8q1JcfrT29AWVSj9Q0R2P4SrH4ebq1UaSgP1lgQ= Subject key identifier: 7F:2C:FB:13:3A:72:2B:48:3D:D1:58:C9:FE:A5:26:EC:10:FA:84:C7 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285847E094EDF6AE07E1EA99A31E00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 36040 IP address blocks: 136.22.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:ed:f6:ae:07:e1:ea:99:a3:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=95b90d06-a024-4abe-9885-56a25a5581b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:ba:79:fb:eb:83:b8:6d:6e:e7:7e:56:ae: c8:3b:b0:52:c4:54:ca:f7:06:10:71:40:26:05:70: 87:77:12:c6:69:37:2d:31:8a:15:f3:f5:a5:5b:39: ad:38:ee:60:75:ce:6b:b4:87:27:cc:21:56:5f:b4: bb:0e:68:67:20:a5:1d:d8:94:4d:f1:1c:d9:b0:25: 3a:94:ae:bd:da:ee:97:30:5f:1f:7c:c4:88:3c:07: f6:9b:91:9a:26:0a:a3:74:21:d1:2b:30:bc:6f:ed: 7d:44:ac:a7:26:96:22:bb:8a:c8:dc:fc:50:ec:38: 02:d4:1d:d1:61:71:3c:f3:fc:2a:e7:0b:22:e4:73: d1:ec:88:9d:7c:d2:73:16:9b:50:2f:82:32:0a:6a: 0d:41:f5:23:16:9e:99:3b:9b:d2:59:80:f7:50:e0: b2:3d:2a:b8:45:a6:1f:0d:b2:ee:8e:4d:92:cd:23: 18:ea:b6:de:44:68:a1:fe:8a:15:c4:16:e0:5c:a7: b4:f3:45:4d:fc:c9:52:fd:d9:d0:54:f3:36:54:45: 48:73:a1:05:fe:fe:0c:ff:ae:be:93:7c:c6:f1:3d: cd:e4:60:d1:64:aa:9f:bf:a2:55:d7:e4:25:5f:39: 50:3f:d5:e9:bc:47:c9:b4:10:6d:bb:57:d0:2b:a0: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2C:FB:13:3A:72:2B:48:3D:D1:58:C9:FE:A5:26:EC:10:FA:84:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:82:22:0a:b5:52:31:ba:a6:bb:bd:c7:e4:ba:c4:d2:93:ee: 83:f4:af:73:15:94:83:a8:b8:f8:f0:23:70:a3:0d:65:e8:27: e8:7a:c2:5a:25:10:54:1e:9b:0d:09:ca:d5:0d:91:e0:f7:95: e5:51:44:4a:d9:f2:e8:84:e9:0f:ec:0d:55:2f:1c:a9:a3:12: 50:0d:8b:1f:71:63:88:74:67:65:f3:ce:30:69:93:05:df:e0: 7e:f7:d5:60:3e:0e:60:32:c6:f9:24:5c:40:95:21:30:e9:3c: 32:be:c2:f7:d4:8b:5e:18:42:f8:0f:64:41:1c:4f:a8:e4:97: 82:0c:57:19:cf:b5:18:84:62:04:a4:69:de:47:f8:bf:82:aa: f6:86:28:09:3c:c3:26:dd:b8:cb:66:f2:c9:56:c6:ce:ce:11: 8e:c5:9a:b7:13:e3:1b:b8:e4:2b:b0:f6:9f:2f:da:24:35:39: f7:b1:a0:04:a3:4e:b3:2f:d4:07:4c:e7:29:7b:f4:7e:51:fb: 7c:2b:bc:bc:15:57:a1:9c:dd:5d:5b:a9:73:dd:c4:a4:99:27: e3:7f:f1:b8:03:b8:fb:91:8d:f4:82:e5:c7:07:5e:c5:16:39: a8:8e:c3:94:e2:40:60:f1:3b:19:19:15:02:a8:bc:4b:d7:c2: bf:b3:df:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglO32rgfh6pmjHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk OTViOTBkMDYtYTAyNC00YWJlLTk4ODUtNTZhMjVhNTU4MWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCW6efvrg7htbud+Vq7IO7BSxFTK9wYQcUAm BXCHdxLGaTctMYoV8/WlWzmtOO5gdc5rtIcnzCFWX7S7DmhnIKUd2JRN8RzZsCU6 lK692u6XMF8ffMSIPAf2m5GaJgqjdCHRKzC8b+19RKynJpYiu4rI3PxQ7DgC1B3R YXE88/wq5wsi5HPR7IidfNJzFptQL4IyCmoNQfUjFp6ZO5vSWYD3UOCyPSq4RaYf DbLujk2SzSMY6rbeRGih/ooVxBbgXKe080VN/MlS/dnQVPM2VEVIc6EF/v4M/66+ k3zG8T3N5GDRZKqfv6JV1+QlXzlQP9XpvEfJtBBtu1fQK6BOWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8s+xM6citIPdFYyf6lJuwQ+oTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNzkzZDQzNDQtYjM2NS0z ZmM1LTkyMmYtNWJkODc0ZTFkYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSCIgq1UjG6pru9x+S6xNKT7oP0r3MVlIOouPjwI3CjDWXoJ+h6wlol EFQemw0JytUNkeD3leVRRErZ8uiE6Q/sDVUvHKmjElANix9xY4h0Z2XzzjBpkwXf 4H731WA+DmAyxvkkXECVITDpPDK+wvfUi14YQvgPZEEcT6jkl4IMVxnPtRiEYgSk ad5H+L+CqvaGKAk8wybduMtm8slWxs7OEY7FmrcT4xu45Cuw9p8v2iQ1OfexoASj TrMv1AdM5yl79H5R+3wrvLwVV6Gc3V1bqXPdxKSZJ+N/8bgDuPuRjfSC5ccHXsUW OaiOw5TiQGDxOxkZFQKovEvXwr+z3+I= -----END CERTIFICATE-----Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org