$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/887fc515-3ce9-3d60-8af5-17e30ab01b19.roa File: 887fc515-3ce9-3d60-8af5-17e30ab01b19.roa (raw, json) Hash identifier: u1NnJynYim7GbiYXY2T4D+Xi5h6eK0w51xil0NznaE4= Subject key identifier: 01:88:2C:B1:80:2B:7F:E6:3F:77:FD:20:14:5B:97:F7:59:7F:D4:06 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584540BAACF1659FAC904B2B7380 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/887fc515-3ce9-3d60-8af5-17e30ab01b19.roa Signing time: Mon 18 Mar 2024 22:13:56 +0000 ROA not before: Mon 18 Mar 2024 22:13:56 +0000 ROA not after: Sun 16 Jun 2024 22:13:56 +0000 asID: 36040 IP address blocks: 136.22.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:ba:ac:f1:65:9f:ac:90:4b:2b:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 18 22:13:56 2024 GMT Not After : Jun 16 22:13:56 2024 GMT Subject: CN=9820ac23-e938-4ac7-8982-77970916d234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:f4:e7:60:28:fd:64:2a:a3:49:91:2b:4f: af:7e:99:bd:bb:ce:9b:d4:52:10:51:00:69:26:42: 65:5d:f8:dc:55:4f:7e:17:20:73:40:18:d3:1a:3f: 43:07:e7:68:d7:47:0b:58:7f:fc:4e:c3:06:aa:f8: 48:49:84:a9:11:88:f7:64:87:35:29:de:0b:8a:d8: 15:ed:c7:fb:8f:ad:4f:82:91:6b:c1:56:6c:76:20: b4:ea:34:a2:cd:63:bd:d1:85:f9:12:0b:14:c7:fa: f4:76:8a:ec:a9:ae:c4:b6:ab:36:a6:0c:fd:89:23: f7:9a:41:a3:14:15:22:ef:2c:9e:7a:4e:7c:5e:b9: 8e:d2:98:bd:77:6c:8d:ea:28:a3:a4:7f:aa:4a:b3: d3:ba:d3:af:32:e8:1f:df:6b:c3:16:7d:03:4a:82: c2:5d:80:3a:f1:83:c8:16:d7:e6:e4:b6:64:62:16: 05:66:29:23:51:bd:7d:76:98:e3:bd:99:67:64:bc: da:00:7d:32:0c:f7:01:8d:b6:0e:d0:38:79:48:d3: a8:cd:84:ca:2e:c1:fc:74:e8:b6:d3:d2:f0:1a:74: dd:63:f6:ed:ff:80:74:30:9e:ae:c6:bd:cf:19:6d: 0e:ba:47:29:a6:a9:40:f9:f9:46:36:4f:59:75:78: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:88:2C:B1:80:2B:7F:E6:3F:77:FD:20:14:5B:97:F7:59:7F:D4:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/887fc515-3ce9-3d60-8af5-17e30ab01b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:35:a6:44:f3:4d:d6:f5:82:1a:f7:45:0c:db:7d:b1:5d:41: 38:71:ea:9c:17:d0:3c:50:3b:60:5e:44:12:6f:05:ff:4e:50: 31:50:df:28:fb:9d:04:98:4d:eb:fe:52:76:2e:07:b2:00:f1: 2d:2d:7e:c9:63:49:43:8a:46:0d:92:f7:e7:68:e2:75:1e:ba: 10:f3:e5:6e:83:48:fd:4d:63:66:f6:df:29:71:1a:06:6d:34: af:1b:ff:aa:f7:24:28:3a:d7:35:82:fd:e8:06:5a:fa:64:d5: 41:33:6c:50:7b:62:f9:2a:6b:f6:7e:06:16:48:a8:6f:bb:34: 29:9f:ce:f8:45:d0:78:b5:7a:53:80:3f:ab:33:f3:e2:54:80: 8a:6c:d6:a9:6a:73:87:90:7c:19:3b:36:f5:98:b4:8e:11:38: 36:b7:24:38:3f:39:8f:01:26:20:e4:49:80:10:8e:2d:14:cd: ff:c2:c9:57:30:85:90:aa:1b:f4:be:94:46:7e:ba:f2:34:07: 65:85:2c:49:af:0d:22:43:c8:c5:91:ae:aa:e4:d5:8a:56:e7: d5:bd:7c:3a:3b:1d:96:82:1c:fc:ab:4b:2f:54:64:12:e2:b4: 80:ae:2b:e1:b7:94:a8:7a:a2:14:6b:33:64:07:25:2b:6f:02: e8:8a:ce:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAuqzxZZ+skEsrc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MDMxODIyMTM1NloXDTI0MDYxNjIyMTM1NlowLzEtMCsGA1UEAxMk OTgyMGFjMjMtZTkzOC00YWM3LTg5ODItNzc5NzA5MTZkMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnn052Ao/WQqo0mRK0+vfpm9u86b1FIQUQBp JkJlXfjcVU9+FyBzQBjTGj9DB+do10cLWH/8TsMGqvhISYSpEYj3ZIc1Kd4LitgV 7cf7j61PgpFrwVZsdiC06jSizWO90YX5EgsUx/r0dorsqa7Etqs2pgz9iSP3mkGj FBUi7yyeek58XrmO0pi9d2yN6iijpH+qSrPTutOvMugf32vDFn0DSoLCXYA68YPI Ftfm5LZkYhYFZikjUb19dpjjvZlnZLzaAH0yDPcBjbYO0Dh5SNOozYTKLsH8dOi2 09LwGnTdY/bt/4B0MJ6uxr3PGW0OukcppqlA+flGNk9ZdXiXaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGILLGAK3/mP3f9IBRbl/dZf9QGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODg3ZmM1MTUtM2NlOS0z ZDYwLThhZjUtMTdlMzBhYjAxYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw1pkTzTdb1ghr3RQzbfbFdQThx6pwX0DxQO2BeRBJvBf9OUDFQ3yj7 nQSYTev+UnYuB7IA8S0tfsljSUOKRg2S9+do4nUeuhDz5W6DSP1NY2b23ylxGgZt NK8b/6r3JCg61zWC/egGWvpk1UEzbFB7Yvkqa/Z+BhZIqG+7NCmfzvhF0Hi1elOA P6sz8+JUgIps1qlqc4eQfBk7NvWYtI4RODa3JDg/OY8BJiDkSYAQji0Uzf/CyVcw hZCqG/S+lEZ+uvI0B2WFLEmvDSJDyMWRrqrk1YpW59W9fDo7HZaCHPyrSy9UZBLi tICuK+G3lKh6ohRrM2QHJStvAuiKzlE= -----END CERTIFICATE-----Generated at Fri May 24 01:56:19 2024 by rpki-client on console-fra.rpki-client.org