$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/20026cd7-f9ed-36a7-a797-a8dc7faf892d.roa File: 20026cd7-f9ed-36a7-a797-a8dc7faf892d.roa (raw, json) Hash identifier: xnVB+EGJO6dKJcQvAyVHlFtUCQhgZgN+7zi7erHvQl8= Subject key identifier: 60:8F:7F:D9:F0:23:05:EA:52:E5:5F:74:38:A5:EF:DD:1D:6F:53:31 Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F43285845462DEB733D718A97DDBCDC00 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/20026cd7-f9ed-36a7-a797-a8dc7faf892d.roa Signing time: Wed 20 Mar 2024 21:05:11 +0000 ROA not before: Wed 20 Mar 2024 21:05:11 +0000 ROA not after: Tue 18 Jun 2024 21:05:11 +0000 asID: 36492 IP address blocks: 136.23.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:2d:eb:73:3d:71:8a:97:dd:bc:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Mar 20 21:05:11 2024 GMT Not After : Jun 18 21:05:11 2024 GMT Subject: CN=671100d8-7d50-49ef-b01a-762a9c9829e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:23:52:04:6a:d8:35:9f:23:0c:e1:e7:a6:97: 32:02:00:3b:06:65:6f:0e:4f:41:db:42:c3:a1:5f: 05:51:b8:64:6b:8a:7a:7c:26:b1:3d:77:61:b8:69: 8d:94:6b:4d:32:b7:f6:8b:c3:3e:d6:c9:45:24:53: f9:08:1b:09:de:69:11:d9:0d:0a:9e:cb:e1:86:3c: 9c:08:c0:02:e1:99:0b:47:6a:46:f8:3a:c6:af:d1: 6e:5d:39:c6:18:38:7d:6e:15:f6:db:13:04:3e:d2: 65:7d:7f:76:a3:e1:c3:82:d3:e0:70:9a:37:d0:52: 59:1d:96:85:9c:e6:b3:04:cf:04:5b:50:44:34:fe: e8:93:49:4e:1e:4b:8f:c9:47:06:c6:40:f8:ad:ee: 99:45:0d:58:04:97:b2:46:3b:66:1c:3c:69:81:05: 04:10:ec:54:e4:36:a3:32:b1:74:7a:f7:83:a0:32: 6d:69:e5:ce:04:6e:a2:9a:05:4f:35:5d:a3:5a:6a: ee:1f:fe:92:21:73:47:9f:2d:7f:31:bc:b2:71:97: 95:43:aa:91:11:61:d4:9a:51:04:b6:75:93:2d:60: 0f:ac:14:e4:60:bd:c1:84:ff:bd:74:45:91:4f:ce: 4c:f0:26:5f:b3:50:74:1d:a4:9f:7c:2b:bb:f5:05: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8F:7F:D9:F0:23:05:EA:52:E5:5F:74:38:A5:EF:DD:1D:6F:53:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/20026cd7-f9ed-36a7-a797-a8dc7faf892d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.23.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:96:2d:a9:d3:40:30:99:5d:21:1c:3a:4c:7f:69:0a:94:23: ee:ef:e5:63:46:4e:f9:44:99:7c:3b:90:6b:ac:b3:48:59:b5: 7b:32:41:81:4c:72:10:b7:86:44:88:3f:bb:05:c0:ce:9c:bf: 2e:c4:dd:ef:66:dc:2c:9d:ed:51:1b:00:bf:02:2e:b4:89:f2: f0:7e:6d:61:fd:78:71:c3:13:6b:b7:d8:13:25:98:fe:5a:70: 69:c2:10:a3:36:6e:0c:04:40:be:9b:b3:94:c0:77:e9:71:18: 9c:c0:6b:16:d3:68:36:f2:0b:73:e3:da:ae:6b:5e:46:90:a3: 74:6a:27:65:8a:3e:46:32:02:cf:be:d6:4e:8f:94:b6:c0:bd: 2c:f5:fc:4e:2f:9f:74:04:ef:e9:a5:ee:a1:5d:da:70:c8:ad: ce:12:84:74:a8:6c:fd:b3:18:dd:f7:08:58:c9:a4:7f:27:41: 68:39:ad:f4:9e:d1:60:d3:3c:95:bd:83:7f:5f:b9:c4:f4:5a: 0e:35:85:fe:82:6e:dd:80:cb:63:44:9a:55:94:83:77:99:82: 46:be:1c:dd:bf:f0:d9:5d:1e:2a:98:3a:4f:e0:e3:95:4f:4e: 95:1b:ec:64:20:f0:09:1d:99:eb:f3:d5:83:78:93:c0:24:97: 13:11:97:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLetzPXGKl9283AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI0MDMyMDIxMDUxMVoXDTI0MDYxODIxMDUxMVowLzEtMCsGA1UEAxMk NjcxMTAwZDgtN2Q1MC00OWVmLWIwMWEtNzYyYTljOTgyOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyNSBGrYNZ8jDOHnppcyAgA7BmVvDk9B20LD oV8FUbhka4p6fCaxPXdhuGmNlGtNMrf2i8M+1slFJFP5CBsJ3mkR2Q0Knsvhhjyc CMAC4ZkLR2pG+DrGr9FuXTnGGDh9bhX22xMEPtJlfX92o+HDgtPgcJo30FJZHZaF nOazBM8EW1BENP7ok0lOHkuPyUcGxkD4re6ZRQ1YBJeyRjtmHDxpgQUEEOxU5Daj MrF0eveDoDJtaeXOBG6imgVPNV2jWmruH/6SIXNHny1/MbyycZeVQ6qREWHUmlEE tnWTLWAPrBTkYL3BhP+9dEWRT85M8CZfs1B0HaSffCu79QW3PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCPf9nwIwXqUuVfdDil790db1MxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMjAwMjZjZDctZjllZC0z NmE3LWE3OTctYThkYzdmYWY4OTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuWLanTQDCZXSEcOkx/aQqUI+7v5WNGTvlEmXw7kGuss0hZtXsyQYFM chC3hkSIP7sFwM6cvy7E3e9m3Cyd7VEbAL8CLrSJ8vB+bWH9eHHDE2u32BMlmP5a cGnCEKM2bgwEQL6bs5TAd+lxGJzAaxbTaDbyC3Pj2q5rXkaQo3RqJ2WKPkYyAs++ 1k6PlLbAvSz1/E4vn3QE7+ml7qFd2nDIrc4ShHSobP2zGN33CFjJpH8nQWg5rfSe 0WDTPJW9g39fucT0Wg41hf6Cbt2Ay2NEmlWUg3eZgka+HN2/8NldHiqYOk/g45VP TpUb7GQg8Akdmevz1YN4k8AklxMRl4k= -----END CERTIFICATE-----Generated at Wed May 1 20:51:38 2024 by rpki-client on console-ams.rpki-client.org