$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa File: b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa (raw, json) Hash identifier: rc8EJmMDlcpzrvRaCaWRas2lj0oquNZ/2p3EjW/BlD0= Subject key identifier: 24:BA:F8:D9:03:79:77:1F:77:17:FE:55:F3:2C:30:3D:66:58:24:E3 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285847E094C8CB27A707555D7A5EC0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 36040 IP address blocks: 136.22.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:c8:cb:27:a7:07:55:5d:7a:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=7d1e6704-3d72-4477-bf0b-28e86c02a90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:85:86:dc:5a:94:c8:87:01:b7:13:ed:95: b0:7d:26:ef:a2:48:71:b2:8a:6b:d9:aa:8f:a7:ac: b6:d5:8b:ea:36:56:d0:22:ef:5b:4b:6f:36:b6:69: cd:1f:10:bb:cc:20:22:ee:0c:3f:1f:bf:7a:b2:86: 43:98:6c:8a:d2:3a:bf:cd:fe:35:67:c5:da:22:67: 0e:31:31:e6:f0:fc:39:c1:ac:06:6a:c3:bd:69:d3: 6e:df:c7:20:03:7b:1c:fc:36:95:e5:d7:d1:b8:41: e5:f3:3a:11:06:29:e6:6a:42:c1:15:c9:e6:f0:9f: 15:86:fd:ce:5e:f6:ff:04:e2:7c:72:04:94:5c:11: 38:e4:93:29:11:95:36:b7:2f:0f:a2:ef:74:92:d7: 61:43:ef:2e:9a:52:ae:22:78:65:13:c5:ef:a7:0a: 32:9c:61:b4:8a:18:c3:cb:3f:62:ad:f9:4f:d1:fe: 5d:20:3a:63:e8:a3:fd:9d:6e:9f:dd:0a:47:fb:5b: 7b:4e:04:95:71:10:64:ed:e8:f7:2c:d7:4c:a4:68: 4e:e7:8d:44:8a:e9:ed:38:44:b8:0d:cc:c6:2d:e5: fe:1d:e5:9d:72:83:0f:ba:50:41:52:dc:8c:6f:65: 3c:33:99:f6:9e:f9:f1:dd:b5:55:34:92:4a:61:5d: ea:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BA:F8:D9:03:79:77:1F:77:17:FE:55:F3:2C:30:3D:66:58:24:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:33:39:9d:0e:ab:34:ed:58:fe:74:2f:23:ae:c6:f7:32:82: ee:39:5d:38:4a:a6:92:e0:b6:e3:4e:77:9a:e0:43:c8:28:45: 17:0e:ad:93:4d:8d:c9:54:17:4b:30:a2:96:c1:e2:ed:e3:df: 80:d8:d8:02:24:77:11:e6:e5:69:63:09:84:bd:90:b3:85:a6: dc:ff:f5:5e:08:90:51:98:64:bf:49:e4:e4:1a:e5:32:e3:b3: 7e:c3:18:d2:1e:d0:f2:a5:ab:7b:a9:02:92:fb:fc:36:34:ad: 41:9f:42:f7:a2:e7:f6:34:7d:82:6c:60:ce:94:ba:92:2d:9c: 78:93:48:3d:e6:0b:28:05:11:2d:f1:54:8e:ac:0f:bd:35:8b: 98:77:f2:66:81:28:f9:6b:84:c5:35:19:a7:cf:37:6a:9b:c1: 11:94:26:20:17:95:54:10:b3:de:87:73:03:4f:15:d9:e3:6b: f6:75:2f:9c:f8:47:56:6b:92:ff:f4:a3:ec:40:44:26:11:92: 97:97:98:7a:7a:52:6c:e8:49:19:63:63:d4:4e:92:aa:54:b4: 23:cb:ed:36:4b:df:c1:5b:f5:6d:e1:17:58:fa:22:e7:ad:5c: 80:1c:d2:38:2d:39:72:4f:72:71:66:dc:2c:10:64:b3:da:2b: fd:31:0f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglMjLJ6cHVV16XsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk N2QxZTY3MDQtM2Q3Mi00NDc3LWJmMGItMjhlODZjMDJhOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKiFhtxalMiHAbcT7ZWwfSbvokhxsopr2aqP p6y21YvqNlbQIu9bS282tmnNHxC7zCAi7gw/H796soZDmGyK0jq/zf41Z8XaImcO MTHm8Pw5wawGasO9adNu38cgA3sc/DaV5dfRuEHl8zoRBinmakLBFcnm8J8Vhv3O Xvb/BOJ8cgSUXBE45JMpEZU2ty8Pou90ktdhQ+8umlKuInhlE8XvpwoynGG0ihjD yz9irflP0f5dIDpj6KP9nW6f3QpH+1t7TgSVcRBk7ej3LNdMpGhO541EiuntOES4 DczGLeX+HeWdcoMPulBBUtyMb2U8M5n2nvnx3bVVNJJKYV3qOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS6+NkDeXcfdxf+VfMsMD1mWCTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYjY0NGMwZGItY2ZlMi0z MThhLTljODktMmE3YmVmNWU1NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0zOZ0OqzTtWP50LyOuxvcygu45XThKppLgtuNOd5rgQ8goRRcOrZNN jclUF0swopbB4u3j34DY2AIkdxHm5WljCYS9kLOFptz/9V4IkFGYZL9J5OQa5TLj s37DGNIe0PKlq3upApL7/DY0rUGfQvei5/Y0fYJsYM6UupItnHiTSD3mCygFES3x VI6sD701i5h38maBKPlrhMU1GafPN2qbwRGUJiAXlVQQs96HcwNPFdnja/Z1L5z4 R1Zrkv/0o+xARCYRkpeXmHp6UmzoSRljY9ROkqpUtCPL7TZL38Fb9W3hF1j6Iuet XIAc0jgtOXJPcnFm3CwQZLPaK/0xDzs= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org