$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa File: d68f8121-c948-33b4-a37c-8f46a2e590c6.roa (raw, json) Hash identifier: nA12y3aLgF1rCrZ0822q0kOzq5qJKTVj09o9oVmvqak= Subject key identifier: A8:2D:BD:EA:45:DE:E4:54:2F:50:78:20:08:B6:EC:78:11:68:54:44 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584540B89FC62BBF3EC0990B0100 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa Signing time: Mon 18 Mar 2024 22:09:48 +0000 ROA not before: Mon 18 Mar 2024 22:09:48 +0000 ROA not after: Sun 16 Jun 2024 22:09:48 +0000 asID: 36040 IP address blocks: 136.22.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:b8:9f:c6:2b:bf:3e:c0:99:0b:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Mar 18 22:09:48 2024 GMT Not After : Jun 16 22:09:48 2024 GMT Subject: CN=ee392113-1cdb-4989-9563-526f5b2b6029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:57:45:0d:0e:e6:8a:fc:11:b8:e8:db:5b:31: e5:03:d1:08:00:fd:5a:c8:a0:ba:1d:a8:e3:4d:14: 1d:e0:e8:72:2a:85:e6:e1:71:ed:60:a1:26:1c:7e: c9:91:09:26:37:d8:34:78:66:2f:e9:93:ba:7e:27: f7:6d:df:49:48:2a:d6:6d:c0:5e:a8:d8:2d:ae:c9: 4d:56:2c:bc:17:79:6d:8a:3e:52:7d:83:0f:32:20: 0b:0b:84:a3:a5:9e:e7:65:89:31:c2:d4:0f:6d:bc: a1:97:d3:2e:b4:26:18:6c:4b:4c:1d:3c:4d:9b:ba: bd:a1:93:cf:4d:8f:e2:7d:7d:a7:e0:08:da:eb:79: 63:c6:5b:a7:a0:73:7b:9e:94:53:e5:ed:49:66:11: 85:55:c8:d7:0f:c0:71:5d:ca:d3:45:81:7e:3f:69: 24:e5:70:0c:b8:f6:e8:a4:6e:34:0a:37:b9:57:37: 13:96:57:76:ef:71:ac:44:76:ca:e5:86:be:f0:77: c4:46:c6:6a:76:31:31:da:bf:ca:3b:d0:07:9c:0a: fa:9a:17:62:dc:e0:e9:c7:8d:65:e4:33:b7:f2:e9: ec:2a:14:f5:02:aa:e1:c8:b3:df:71:3c:1c:84:06: bf:f5:37:a9:34:9e:36:12:30:a0:73:44:e0:f2:e0: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2D:BD:EA:45:DE:E4:54:2F:50:78:20:08:B6:EC:78:11:68:54:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:0b:9d:48:95:89:3b:32:9a:3b:85:8b:86:ea:7b:f2:42:54: c6:c1:21:a6:d3:4d:32:0b:ca:f3:e5:92:46:c1:54:b6:5a:9d: 21:b3:5b:d7:84:3c:16:f1:71:92:2a:d2:70:45:90:ea:f8:80: 4b:bd:70:a4:4e:33:24:40:08:84:e3:01:71:df:08:aa:e2:18: 26:f3:3e:b4:87:ab:08:fb:18:65:89:c1:0f:34:53:ef:45:94: 82:99:78:11:a8:cf:a8:1f:b5:1a:d6:e3:78:9c:2f:fc:81:29: 23:d8:3c:ee:83:8b:13:23:ec:33:84:8c:37:29:db:cd:51:46: a1:71:f3:7e:ef:2c:47:fc:50:76:97:05:9b:11:78:f1:fa:54: a6:76:3b:72:74:32:d7:37:8c:ff:0b:3b:e7:80:c2:fa:b0:e7: 7b:1f:4f:96:c3:fc:a7:ba:be:23:58:1f:9a:97:df:61:d0:1a: bd:64:b5:fd:30:29:3c:1c:7a:7d:e2:25:c8:b2:9c:dd:6d:a3: df:b6:46:60:06:54:ff:a5:b6:32:fa:2c:02:d8:1b:58:71:ee: d8:23:5c:dd:c1:58:4e:85:8f:6b:55:4f:da:75:b8:a7:73:d6: c6:ec:8b:c3:03:19:56:8c:c5:eb:8a:c1:e9:7a:a3:7f:83:e9: 8e:6e:7c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAuJ/GK78+wJkLAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MDMxODIyMDk0OFoXDTI0MDYxNjIyMDk0OFowLzEtMCsGA1UEAxMk ZWUzOTIxMTMtMWNkYi00OTg5LTk1NjMtNTI2ZjViMmI2MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnldFDQ7mivwRuOjbWzHlA9EIAP1ayKC6Hajj TRQd4OhyKoXm4XHtYKEmHH7JkQkmN9g0eGYv6ZO6fif3bd9JSCrWbcBeqNgtrslN Viy8F3ltij5SfYMPMiALC4SjpZ7nZYkxwtQPbbyhl9MutCYYbEtMHTxNm7q9oZPP TY/ifX2n4Aja63ljxlunoHN7npRT5e1JZhGFVcjXD8BxXcrTRYF+P2kk5XAMuPbo pG40Cje5VzcTlld273GsRHbK5Ya+8HfERsZqdjEx2r/KO9AHnAr6mhdi3ODpx41l 5DO38unsKhT1AqrhyLPfcTwchAa/9TepNJ42EjCgc0Tg8uDG9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgtvepF3uRUL1B4IAi27HgRaFREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZDY4ZjgxMjEtYzk0OC0z M2I0LWEzN2MtOGY0NmEyZTU5MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMLnUiViTsymjuFi4bqe/JCVMbBIabTTTILyvPlkkbBVLZanSGzW9eE PBbxcZIq0nBFkOr4gEu9cKROMyRACITjAXHfCKriGCbzPrSHqwj7GGWJwQ80U+9F lIKZeBGoz6gftRrW43icL/yBKSPYPO6DixMj7DOEjDcp281RRqFx837vLEf8UHaX BZsRePH6VKZ2O3J0Mtc3jP8LO+eAwvqw53sfT5bD/Ke6viNYH5qX32HQGr1ktf0w KTwcen3iJciynN1to9+2RmAGVP+ltjL6LALYG1hx7tgjXN3BWE6Fj2tVT9p1uKdz 1sbsi8MDGVaMxeuKwel6o3+D6Y5ufLI= -----END CERTIFICATE-----Generated at Sat May 18 07:21:33 2024 by rpki-client on console-fra.rpki-client.org