$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa File: c96f3789-8034-380c-9379-7cb735811c20.roa (raw, json) Hash identifier: 5ZsSTePCu3RJ/QOD2d42n+BUl1sK9JvC09L0TP0EqS4= Subject key identifier: 7D:E9:54:CC:8C:2B:FD:80:EC:35:49:52:DD:93:9B:B9:CD:79:83:EE Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285847E094D3F384372813A5153A00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 36040 IP address blocks: 136.22.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:d3:f3:84:37:28:13:a5:15:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=3ed24e41-d932-4d21-94d3-9cfe27bb17a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:d9:48:ab:c9:6b:e0:79:74:b4:03:69:ba: 96:2e:ae:3a:c9:09:bd:aa:21:4a:fa:cf:88:da:87: bc:02:0e:38:e2:53:81:3d:5f:11:3e:66:c1:fe:3e: 90:73:14:90:19:ca:00:b2:96:f6:97:81:0f:76:0d: ae:da:a4:ff:ce:35:26:c3:5a:3e:22:89:4f:a5:68: 7b:37:5e:2e:78:23:f0:de:e0:f6:3c:8f:49:4f:39: 34:d0:93:16:62:72:6b:37:53:3b:38:04:4e:07:e2: 41:04:5c:95:32:de:ac:ac:ed:16:d5:24:2f:ef:8f: 68:59:da:38:20:ad:7f:c3:48:0d:d1:3f:5b:0c:25: be:9c:97:21:38:1b:fb:53:d9:8c:c9:07:0f:25:ca: e1:0f:63:8e:02:b9:73:e1:0c:e6:95:22:ae:4d:f6: 52:0e:da:0a:f8:d8:82:8a:9a:3e:ae:53:79:c5:6d: b6:26:ab:c5:7a:29:72:46:8a:51:81:dc:61:a2:8e: f2:69:b7:31:39:bf:8b:4f:15:07:38:8e:cf:a3:73: d4:d2:5d:1e:dd:17:30:e9:cf:00:04:1f:92:1c:56: f1:3f:8e:43:e3:b0:17:92:3f:49:71:d4:5e:34:a3: 16:c2:e3:59:82:8d:92:2d:3b:7b:bf:60:86:f3:14: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:54:CC:8C:2B:FD:80:EC:35:49:52:DD:93:9B:B9:CD:79:83:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d0:ac:3a:d8:09:54:fb:ac:7b:b5:b6:b1:c6:88:b2:2e:86: 73:db:9e:1c:aa:2d:ae:2a:21:6c:45:96:21:06:0b:60:25:81: 6d:b4:07:a1:66:84:35:e0:ea:e2:6c:e6:70:aa:65:db:22:6a: d9:d1:2d:76:75:b5:96:37:fe:f7:41:9c:85:a4:85:64:2e:c2: 54:04:84:6c:3e:d1:c5:13:bf:ab:f6:62:c8:b7:2c:d1:fe:cc: 71:1f:c5:10:2e:ec:dd:0d:8c:f4:5f:a9:10:ea:ed:d9:dd:5b: c2:38:50:71:0c:7e:af:b5:58:31:83:8a:61:2d:64:f8:f4:91: ab:6a:fd:ed:f6:aa:ec:8a:6f:19:1a:28:79:dc:f0:15:b8:68: 3a:f7:e0:2e:64:a6:dd:e1:93:d5:f3:be:38:1f:c9:79:f5:1d: 19:7f:f6:0e:db:67:cd:52:d7:e4:23:58:d7:11:d5:c6:8d:65: c5:9d:9d:9d:64:61:df:98:b3:40:65:b6:4a:7f:e6:e3:8a:38: 07:43:03:d2:2e:f5:64:e6:4c:d6:4d:f8:7e:d3:d3:b6:5c:0d: 9f:92:f7:51:a2:82:f5:85:71:71:89:79:90:f7:cd:d3:b0:d1: 63:6c:12:42:aa:3f:62:68:58:b0:f8:df:d2:3d:38:27:3d:c5: cb:6c:7e:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglNPzhDcoE6UVOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk M2VkMjRlNDEtZDkzMi00ZDIxLTk0ZDMtOWNmZTI3YmIxN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIjZSKvJa+B5dLQDabqWLq46yQm9qiFK+s+I 2oe8Ag444lOBPV8RPmbB/j6QcxSQGcoAspb2l4EPdg2u2qT/zjUmw1o+IolPpWh7 N14ueCPw3uD2PI9JTzk00JMWYnJrN1M7OAROB+JBBFyVMt6srO0W1SQv749oWdo4 IK1/w0gN0T9bDCW+nJchOBv7U9mMyQcPJcrhD2OOArlz4QzmlSKuTfZSDtoK+NiC ipo+rlN5xW22JqvFeilyRopRgdxhoo7yabcxOb+LTxUHOI7Po3PU0l0e3Rcw6c8A BB+SHFbxP45D47AXkj9JcdReNKMWwuNZgo2SLTt7v2CG8xTZ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3pVMyMK/2A7DVJUt2Tm7nNeYPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYzk2ZjM3ODktODAzNC0z ODBjLTkzNzktN2NiNzM1ODExYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLQrDrYCVT7rHu1trHGiLIuhnPbnhyqLa4qIWxFliEGC2AlgW20B6Fm hDXg6uJs5nCqZdsiatnRLXZ1tZY3/vdBnIWkhWQuwlQEhGw+0cUTv6v2Ysi3LNH+ zHEfxRAu7N0NjPRfqRDq7dndW8I4UHEMfq+1WDGDimEtZPj0katq/e32quyKbxka KHnc8BW4aDr34C5kpt3hk9XzvjgfyXn1HRl/9g7bZ81S1+QjWNcR1caNZcWdnZ1k Yd+Ys0Bltkp/5uOKOAdDA9Iu9WTmTNZN+H7T07ZcDZ+S91GigvWFcXGJeZD3zdOw 0WNsEkKqP2JoWLD439I9OCc9xctsfuk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:28 2024 by rpki-client on console-fra.rpki-client.org