$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa File: ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa (raw, json) Hash identifier: xa9SBYUPiT7eisipu/NwKEPM2tnGMBB3cvSkz5P+4qE= Subject key identifier: 2C:C0:6F:4E:89:58:BD:AC:32:10:A1:E1:0D:71:CA:BC:76:7C:57:98 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285847E094FA84CE80AE8AF5254E00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 36040 IP address blocks: 136.22.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:fa:84:ce:80:ae:8a:f5:25:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=86f3abab-efc0-4ef5-9234-d0852585efb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:de:b9:90:d9:c1:d3:dc:0b:70:7f:9d:42: 08:0e:c2:e7:92:68:17:6e:ae:97:07:95:11:6f:fe: 54:78:80:50:53:f5:fc:1a:f4:30:32:6d:bb:db:00: ec:bb:f1:b3:40:4e:7f:b3:cd:1b:b6:2d:13:2a:89: 1f:5e:92:f4:5b:29:b7:86:81:78:32:c8:dd:70:9f: ad:07:92:32:44:43:d2:30:7e:f8:04:c1:8e:4b:f9: fd:d1:9d:5d:e2:6f:6e:c3:05:40:50:61:b5:6a:73: 30:4d:28:22:49:74:74:24:8f:3d:a1:6f:ab:6d:f2: ad:69:e9:39:a3:c2:2f:ef:ca:b8:d9:11:2e:cb:38: 1a:0e:82:0a:da:de:4b:a3:4f:76:23:72:e2:fe:eb: 29:23:f0:2f:0a:97:ee:03:15:09:58:bd:87:3b:fe: 5d:98:1f:6b:97:94:a8:75:2c:25:37:03:47:14:f1: 1a:0b:e0:dc:ac:b7:08:0c:2e:8b:04:98:04:5b:1b: 6d:19:af:a4:13:90:20:d7:74:15:cb:19:52:46:08: aa:f3:91:de:cc:2b:de:3d:9d:0c:c2:55:29:c0:86: 96:4a:ea:c4:12:c3:24:38:ef:fc:ef:6f:59:a6:d4: da:12:79:c2:0a:02:c8:b7:46:93:a7:20:0e:f5:c5: 69:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C0:6F:4E:89:58:BD:AC:32:10:A1:E1:0D:71:CA:BC:76:7C:57:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d8:12:ec:8a:93:ab:5d:49:54:c3:cf:5a:68:57:31:da:ee: db:bf:00:75:67:9f:67:92:d1:91:6c:39:99:f1:32:53:c9:9f: fe:c5:ef:53:98:b5:78:8c:35:21:ca:50:90:a4:04:c3:71:0c: d7:2f:e6:66:77:70:59:fc:05:84:5d:f0:1f:3d:ef:ca:9e:84: 85:49:56:95:7b:05:a4:1c:3a:cf:d7:ec:9e:a8:b2:67:e3:27: 0f:47:69:f4:bc:ac:5e:dd:75:90:29:63:3a:d1:8e:5b:0e:8d: e4:7a:49:2a:44:f0:f7:94:3c:63:24:3f:55:cd:ca:eb:64:04: 58:dd:0c:66:4f:8b:98:64:fb:6b:f6:cf:6a:bc:11:38:05:d5: 63:82:df:71:23:70:90:06:4e:6f:b7:fd:6b:a2:09:3a:10:60: c1:c5:68:5d:70:2c:46:23:c1:79:b4:61:52:b5:29:6b:6f:76: 59:f5:a7:b4:94:3c:87:57:a7:f3:e9:e8:ad:61:8f:32:0d:d8: 57:13:4e:df:4f:6d:ea:fe:a1:b4:19:50:a4:27:5a:51:df:ec: fe:ba:9c:20:9c:04:00:28:f1:be:88:1f:fe:09:9e:0a:b4:f5: f4:bc:31:6f:16:7b:08:ec:e6:e5:02:f8:e8:1a:6d:8f:fd:41: cb:6d:43:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglPqEzoCuivUlTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk ODZmM2FiYWItZWZjMC00ZWY1LTkyMzQtZDA4NTI1ODVlZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDDeuZDZwdPcC3B/nUIIDsLnkmgXbq6XB5UR b/5UeIBQU/X8GvQwMm272wDsu/GzQE5/s80bti0TKokfXpL0Wym3hoF4MsjdcJ+t B5IyREPSMH74BMGOS/n90Z1d4m9uwwVAUGG1anMwTSgiSXR0JI89oW+rbfKtaek5 o8Iv78q42REuyzgaDoIK2t5Lo092I3Li/uspI/AvCpfuAxUJWL2HO/5dmB9rl5So dSwlNwNHFPEaC+DcrLcIDC6LBJgEWxttGa+kE5Ag13QVyxlSRgiq85HezCvePZ0M wlUpwIaWSurEEsMkOO/8729ZptTaEnnCCgLIt0aTpyAO9cVp5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzAb06JWL2sMhCh4Q1xyrx2fFeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNkMzhlODItOTJiMi0z NDg5LTlkMmQtZTMzZjE4ZjI5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnYEuyKk6tdSVTDz1poVzHa7tu/AHVnn2eS0ZFsOZnxMlPJn/7F71OY tXiMNSHKUJCkBMNxDNcv5mZ3cFn8BYRd8B8978qehIVJVpV7BaQcOs/X7J6osmfj Jw9HafS8rF7ddZApYzrRjlsOjeR6SSpE8PeUPGMkP1XNyutkBFjdDGZPi5hk+2v2 z2q8ETgF1WOC33EjcJAGTm+3/WuiCToQYMHFaF1wLEYjwXm0YVK1KWtvdln1p7SU PIdXp/Pp6K1hjzIN2FcTTt9Pber+obQZUKQnWlHf7P66nCCcBAAo8b6IH/4Jngq0 9fS8MW8Wewjs5uUC+OgabY/9QcttQwk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:44:18 2024 by rpki-client on console-ams.rpki-client.org