$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/242549c7-f54d-3714-8575-2926da36b1f2.roa File: 242549c7-f54d-3714-8575-2926da36b1f2.roa (raw, json) Hash identifier: 2k9bp4wO2Jm88i364D7zCwpPnPwAi3Q9Ntca2hzZnfY= Subject key identifier: 88:7C:3A:BE:B8:A4:02:7D:30:F5:A3:3E:7A:EF:2B:A2:85:C3:B1:54 Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F43285847E094D6907085070658103680 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/242549c7-f54d-3714-8575-2926da36b1f2.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 36492 IP address blocks: 136.22.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:94:d6:90:70:85:07:06:58:10:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=82f65898-c708-41a9-886a-447cc7d709f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:01:61:47:13:11:8a:aa:14:b9:e7:8c:bb:d5: dd:d4:2e:bd:3e:0c:74:22:b0:dc:1f:66:9f:87:91: 15:65:0a:4a:74:9e:15:f1:82:ab:c2:f4:be:90:6a: d4:f1:dc:5b:a5:a5:92:4f:99:d7:5c:b2:a6:92:a0: 8d:aa:39:6c:d3:8c:d8:1f:d9:10:70:f4:b2:9d:e0: 67:93:f2:57:5a:43:3d:06:e3:4a:9f:8c:67:25:c6: bd:ec:af:be:8b:f0:61:d0:38:e8:ba:c8:a8:14:dc: 6e:22:7b:aa:52:74:c7:04:a1:0c:52:52:fd:64:ab: b1:5a:d3:d9:8f:ca:e3:f1:4f:fc:68:bf:21:e9:a7: ec:a1:f6:f4:70:ae:90:82:39:cc:cb:48:6b:71:fe: e3:c0:55:75:b7:7c:3e:40:8b:ab:07:eb:2a:b9:cf: 10:07:d4:b2:22:d8:80:29:53:f2:0f:92:b1:5c:5f: 80:0b:93:4a:af:c2:58:e8:1e:cf:a4:21:44:59:30: 4f:7c:53:26:86:a6:b0:dd:68:a5:c2:b8:8a:c0:88: b7:78:32:cc:a1:95:49:50:7b:e6:90:e4:e0:ff:40: fc:56:2c:12:e6:13:3d:e2:0d:82:b2:55:a1:fa:84: 2a:6a:19:ad:80:40:e0:69:2b:db:62:2b:3b:84:37: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7C:3A:BE:B8:A4:02:7D:30:F5:A3:3E:7A:EF:2B:A2:85:C3:B1:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/242549c7-f54d-3714-8575-2926da36b1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.22.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d4:ff:d5:86:5f:90:c9:3b:a6:d0:d1:25:7d:c0:07:65:9e: a4:2a:bc:b9:0b:9d:6b:b8:4d:b1:cd:9c:91:c2:e0:a9:40:e1: 75:e5:f8:d4:9a:7a:19:17:51:a2:cb:19:6d:54:5d:be:cd:04: b2:72:76:f7:49:bb:d6:e4:8e:29:f9:30:39:92:17:be:d8:3d: bb:d8:21:14:3d:ad:ea:84:55:bd:16:da:64:66:d3:e5:7b:c0: 2f:e6:7f:27:16:3c:1d:36:d7:5d:61:b2:71:03:d4:bc:67:42: f4:27:6b:a1:8d:32:f4:bf:aa:5f:93:1b:82:47:fc:54:92:93: dc:c4:90:05:15:b5:03:32:dd:f3:64:04:7a:e6:9f:3c:f7:68: 0f:91:78:94:ae:6d:27:f0:6c:fa:58:45:21:ef:17:05:32:4b: 90:9e:ce:0d:22:19:28:69:a1:bc:b0:87:ce:f3:49:7d:a8:1b: f1:c7:3a:e4:da:05:99:39:fe:f9:cd:1d:6f:0d:f9:59:1e:20: f5:d5:9b:94:ff:49:45:37:78:e6:aa:dd:7f:a6:4a:ad:1d:e3: e6:f9:10:7d:52:9b:d1:ce:78:fc:56:2a:b6:b3:20:3f:a2:cd: 1a:2b:36:69:31:18:e0:a5:da:cf:c6:93:66:a4:56:39:a5:22: 5d:f2:c0:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglNaQcIUHBlgQNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk ODJmNjU4OTgtYzcwOC00MWE5LTg4NmEtNDQ3Y2M3ZDcwOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQFhRxMRiqoUueeMu9Xd1C69Pgx0IrDcH2af h5EVZQpKdJ4V8YKrwvS+kGrU8dxbpaWST5nXXLKmkqCNqjls04zYH9kQcPSyneBn k/JXWkM9BuNKn4xnJca97K++i/Bh0DjousioFNxuInuqUnTHBKEMUlL9ZKuxWtPZ j8rj8U/8aL8h6afsofb0cK6QgjnMy0hrcf7jwFV1t3w+QIurB+squc8QB9SyItiA KVPyD5KxXF+AC5NKr8JY6B7PpCFEWTBPfFMmhqaw3WilwriKwIi3eDLMoZVJUHvm kOTg/0D8ViwS5hM94g2CslWh+oQqahmtgEDgaSvbYis7hDfqWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh8Or64pAJ9MPWjPnrvK6KFw7FUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMjQyNTQ5YzctZjU0ZC0z NzE0LTg1NzUtMjkyNmRhMzZiMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBYRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHU/9WGX5DJO6bQ0SV9wAdlnqQqvLkLnWu4TbHNnJHC4KlA4XXl+NSa ehkXUaLLGW1UXb7NBLJydvdJu9bkjin5MDmSF77YPbvYIRQ9reqEVb0W2mRm0+V7 wC/mfycWPB02111hsnED1LxnQvQna6GNMvS/ql+TG4JH/FSSk9zEkAUVtQMy3fNk BHrmnzz3aA+ReJSubSfwbPpYRSHvFwUyS5Cezg0iGShpobywh87zSX2oG/HHOuTa BZk5/vnNHW8N+VkeIPXVm5T/SUU3eOaq3X+mSq0d4+b5EH1Sm9HOePxWKrazID+i zRorNmkxGOCl2s/Gk2akVjmlIl3ywBQ= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:40 2024 by rpki-client on console-fra.rpki-client.org