$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa File: af9131e4-4c33-324d-822b-2890fa01e698.roa (raw, json) Hash identifier: y40+S2cz9nc3aLQGbPpIg/UWZFBPitTM32BGBIJl9TA= Subject key identifier: 3E:91:EE:42:3A:63:F7:F9:8D:D8:B8:4F:1E:AE:28:2F:72:66:60:15 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285847E094F4DDE664AA95F4AE5260 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 36040 IP address blocks: 136.22.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:f4:dd:e6:64:aa:95:f4:ae:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=d91735f8-6de7-4879-a71b-868d794b5acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:d6:43:61:eb:0e:bb:f2:18:7f:a8:a3:8b: 3f:f6:6e:21:6e:b2:69:1d:f7:35:58:17:b0:76:f4: bf:cf:ce:60:ea:18:66:5e:c8:02:3f:2c:28:85:0c: a7:0a:c0:51:65:33:14:4c:81:62:cc:88:87:19:c1: 55:33:5d:70:d7:43:d9:ff:04:d0:b1:a5:cc:ff:ea: ed:78:c3:24:3c:37:03:32:94:88:2a:8a:57:65:da: 0d:c8:bb:9d:2c:97:12:ae:2c:05:9b:7b:4c:42:d8: f8:43:7b:90:f1:e7:3d:65:80:b9:87:42:a5:d5:d3: 73:2a:0f:23:d8:a2:ff:51:18:9a:b4:9b:2d:b4:ae: e9:a0:fe:69:94:f0:d7:46:ac:b2:c3:37:8a:49:83: 11:8a:36:f7:fd:a6:24:ff:12:8a:a7:16:ad:5e:e3: 41:fa:42:28:7f:fb:5e:56:3d:67:d3:75:80:c5:2f: c8:59:de:32:49:c6:2a:e0:9e:ba:dd:6d:2a:94:d0: 3f:42:9f:88:d1:fe:e6:44:40:8b:f5:fb:12:93:8c: 6c:eb:9b:0c:3a:02:fb:e8:ee:0e:c4:eb:5c:42:e6: a7:73:dc:9a:5c:e3:5e:d2:37:b5:98:41:0c:97:8d: da:47:d7:27:da:15:27:5d:6f:bb:f4:48:1a:d4:ea: 85:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:91:EE:42:3A:63:F7:F9:8D:D8:B8:4F:1E:AE:28:2F:72:66:60:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:3c:d8:20:cf:a0:94:90:c7:70:f2:cd:0e:18:a7:2a:8d:9c: ed:2f:87:22:b7:59:82:fe:40:3f:b9:72:fe:62:b2:7c:76:02: 65:2b:bb:42:ef:10:c4:5f:50:d9:a6:1f:04:55:47:9f:88:8c: 48:b3:9b:d4:73:9c:86:53:f4:a7:99:5d:5b:7c:08:cc:e8:52: 05:8e:95:58:f4:4a:02:f8:eb:cf:7f:af:8f:3b:54:d9:62:c2: 21:4a:35:80:04:d7:e1:29:93:c9:63:a8:ea:79:d4:f4:5b:f9: f3:f1:a9:f3:de:63:e8:b7:0b:73:7d:76:66:b1:f8:cd:4b:3d: fb:6f:29:31:4d:db:d2:4e:f4:07:da:4c:d5:5d:4a:be:41:15: 4b:68:fc:3f:bb:85:9e:50:dc:a2:25:c7:60:c2:47:2e:32:4b: ab:f9:84:53:5d:e7:69:28:b9:f6:41:84:6d:c2:7d:48:d5:5b: da:f7:eb:09:21:37:70:34:6c:50:be:79:4d:18:f3:4d:c6:da: a3:e1:fc:2c:92:5a:38:2e:bc:4b:f7:b6:5f:3a:e9:97:9d:ae: e8:eb:f6:68:2b:18:ee:d5:44:aa:4f:e9:a4:06:f1:b7:21:fc: 34:35:c7:04:42:52:61:11:02:a7:0e:14:b1:0b:b7:09:bd:7e: f9:db:27:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglPTd5mSqlfSuUmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDkxNzM1ZjgtNmRlNy00ODc5LWE3MWItODY4ZDc5NGI1YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXXWQ2HrDrvyGH+oo4s/9m4hbrJpHfc1WBew dvS/z85g6hhmXsgCPywohQynCsBRZTMUTIFizIiHGcFVM11w10PZ/wTQsaXM/+rt eMMkPDcDMpSIKopXZdoNyLudLJcSriwFm3tMQtj4Q3uQ8ec9ZYC5h0Kl1dNzKg8j 2KL/URiatJsttK7poP5plPDXRqyywzeKSYMRijb3/aYk/xKKpxatXuNB+kIof/te Vj1n03WAxS/IWd4yScYq4J663W0qlNA/Qp+I0f7mRECL9fsSk4xs65sMOgL76O4O xOtcQuanc9yaXONe0je1mEEMl43aR9cn2hUnXW+79Ega1OqFWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6R7kI6Y/f5jdi4Tx6uKC9yZmAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYWY5MTMxZTQtNGMzMy0z MjRkLTgyMmItMjg5MGZhMDFlNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw82CDPoJSQx3DyzQ4YpyqNnO0vhyK3WYL+QD+5cv5isnx2AmUru0Lv EMRfUNmmHwRVR5+IjEizm9RznIZT9KeZXVt8CMzoUgWOlVj0SgL4689/r487VNli wiFKNYAE1+Epk8ljqOp51PRb+fPxqfPeY+i3C3N9dmax+M1LPftvKTFN29JO9Afa TNVdSr5BFUto/D+7hZ5Q3KIlx2DCRy4yS6v5hFNd52koufZBhG3CfUjVW9r36wkh N3A0bFC+eU0Y803G2qPh/CySWjguvEv3tl866Zedrujr9mgrGO7VRKpP6aQG8bch /DQ1xwRCUmERAqcOFLELtwm9fvnbJwI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org