$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa File: f529b062-9b30-3398-84a5-e7d5fad5abf1.roa (raw, json) Hash identifier: kEstGZW75auWmAqdGU3SLfuTbi9Bhp8CF5M0kQM6v4M= Subject key identifier: 63:DA:C7:84:12:92:5C:91:DE:51:A2:F9:06:62:74:5C:7A:86:3A:99 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285847E094F68CDE2F8A74E0D54EE0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 36040 IP address blocks: 136.22.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:f6:8c:de:2f:8a:74:e0:d5:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=3ba6cfbe-06a4-46ef-92da-327999cb880a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:65:17:0c:9b:6b:f0:0b:b5:b7:bf:ba:8f: 4c:0f:92:63:a7:33:a4:b6:ff:15:43:fb:98:2a:b0: e0:a9:df:da:03:fc:d8:b8:52:4a:da:cd:c1:0a:99: 08:82:f2:ec:e5:b2:46:f8:27:f3:67:ce:9b:95:91: f1:6b:de:19:67:b4:5f:9f:ed:de:4c:b6:80:24:70: 76:d8:dc:15:c8:da:7d:4f:61:eb:58:db:d8:41:d3: bd:76:a8:f6:b4:f6:88:d0:90:1a:c1:7a:44:e5:0b: da:e9:f8:d1:a5:1c:d0:c2:24:75:92:56:72:39:c0: 7d:08:11:96:5b:27:6f:8c:69:c5:da:05:dd:cc:9a: 35:ee:18:37:ec:f2:82:7c:dd:21:a0:cf:44:8a:80: 77:1c:3d:cb:af:06:ca:7a:08:40:64:4f:2b:8a:cf: 74:eb:13:00:d5:c8:54:cf:05:88:fd:0b:24:bb:aa: fe:6d:9d:f9:5d:0e:3b:f8:62:5f:e6:2f:1e:dc:d4: 77:18:ff:74:99:57:c7:bc:a6:cb:80:75:76:82:26: e4:f7:89:1b:d3:22:84:3c:5b:57:8d:b5:d2:ff:1e: 94:e1:d4:be:26:e4:05:b2:d3:9a:6a:a4:ae:b6:7a: 77:66:7a:14:90:97:d8:e6:2b:39:b7:c1:30:37:d2: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DA:C7:84:12:92:5C:91:DE:51:A2:F9:06:62:74:5C:7A:86:3A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:95:e7:3a:27:18:ec:6c:c4:36:16:2e:d3:12:95:3f:02:de: 1f:be:b3:21:1c:cf:b3:3f:fa:35:a1:98:bf:4a:2f:cb:c1:e2: bc:0e:dc:4b:8a:30:1f:ad:26:6b:3e:95:8a:4c:63:76:62:27: dc:5d:91:8e:f7:3d:e8:c0:e6:9c:ee:3b:4b:bf:1c:49:1f:0c: ac:13:72:1b:06:d9:a9:c4:a0:df:d5:58:ab:97:46:d6:1a:57: 17:4e:1b:8c:78:bb:b6:ad:72:bf:68:ae:92:38:fd:91:84:2f: 85:b2:c8:4d:5f:54:a8:85:01:65:95:ed:38:6e:ec:79:a6:79: e0:64:6b:df:99:fd:fd:29:c0:ae:c6:f0:82:7d:76:1e:d8:36: 1c:4a:49:80:79:ab:9b:b0:86:45:36:ed:41:cb:83:2e:3c:0c: ca:3d:38:80:0f:fa:d9:33:bd:92:1a:bb:1b:92:37:8a:1f:cc: b2:17:aa:3e:a2:3a:84:d4:e0:19:b8:b9:0d:22:2e:e3:40:42: d2:84:24:0e:a4:df:86:38:73:b4:d7:70:7a:42:c2:8e:e4:89: 3e:45:a1:98:66:64:1b:fc:42:53:0b:bc:62:ab:d6:b3:a0:bf: a1:b6:9e:a8:db:bf:18:ce:48:61:af:cc:48:48:a0:51:72:bf: 79:f2:d8:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglPaM3i+KdODVTuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk M2JhNmNmYmUtMDZhNC00NmVmLTkyZGEtMzI3OTk5Y2I4ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBJlFwyba/ALtbe/uo9MD5JjpzOktv8VQ/uY KrDgqd/aA/zYuFJK2s3BCpkIgvLs5bJG+CfzZ86blZHxa94ZZ7Rfn+3eTLaAJHB2 2NwVyNp9T2HrWNvYQdO9dqj2tPaI0JAawXpE5Qva6fjRpRzQwiR1klZyOcB9CBGW WydvjGnF2gXdzJo17hg37PKCfN0hoM9EioB3HD3LrwbKeghAZE8ris906xMA1chU zwWI/Qsku6r+bZ35XQ47+GJf5i8e3NR3GP90mVfHvKbLgHV2gibk94kb0yKEPFtX jbXS/x6U4dS+JuQFstOaaqSutnp3ZnoUkJfY5is5t8EwN9KPOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPax4QSklyR3lGi+QZidFx6hjqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZjUyOWIwNjItOWIzMC0z Mzk4LTg0YTUtZTdkNWZhZDVhYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKV5zonGOxsxDYWLtMSlT8C3h++syEcz7M/+jWhmL9KL8vB4rwO3EuK MB+tJms+lYpMY3ZiJ9xdkY73PejA5pzuO0u/HEkfDKwTchsG2anEoN/VWKuXRtYa VxdOG4x4u7atcr9orpI4/ZGEL4WyyE1fVKiFAWWV7Thu7HmmeeBka9+Z/f0pwK7G 8IJ9dh7YNhxKSYB5q5uwhkU27UHLgy48DMo9OIAP+tkzvZIauxuSN4ofzLIXqj6i OoTU4Bm4uQ0iLuNAQtKEJA6k34Y4c7TXcHpCwo7kiT5FoZhmZBv8QlMLvGKr1rOg v6G2nqjbvxjOSGGvzEhIoFFyv3ny2Cg= -----END CERTIFICATE-----Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org