$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa File: 305a652b-8f6d-3a59-84d7-290880080ccf.roa (raw, json) Hash identifier: YtHZzAKcJXvU4BcTmT6GN8cKLasL2fmzRJ4DOUfbCko= Subject key identifier: 17:60:F7:D2:1B:79:7E:9D:9D:E5:C9:C3:7F:09:2D:17:B7:EC:DF:C8 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F432858472C65D830527E15D1BA0EFF80 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 396259 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:d8:30:52:7e:15:d1:ba:0e:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=02496b3c-8e66-4ce6-a2c1-38b2963c56a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:07:cc:c5:8e:4b:d4:14:ae:8d:94:d4:cb:2a: 65:c3:6a:48:c5:cc:89:74:8a:e5:11:54:9a:8a:2b: a1:2c:db:42:a7:da:a6:80:26:0f:48:25:1b:72:c1: 61:87:be:4e:df:6a:48:67:27:8f:b8:b8:58:39:88: a2:83:ec:6d:11:b6:b0:be:d4:96:0c:36:54:6c:d2: 78:ed:57:66:c8:77:8c:6a:10:22:a8:cb:6c:46:18: a3:75:a6:5f:aa:17:8f:8b:bc:10:f0:26:d5:ce:bd: b0:1e:65:78:37:1a:f1:2c:d7:23:61:56:dd:e0:1c: 2f:e3:9c:5d:77:74:39:f7:62:df:83:42:d4:fc:1e: ad:d4:a8:19:42:fd:a3:e0:d9:d3:eb:e2:a4:77:7f: fb:33:e8:15:a1:51:ba:f0:8e:9f:c6:fe:5d:ea:fc: 31:56:6e:ca:73:e9:69:fd:d4:fd:05:81:40:05:37: 2c:cc:6b:b7:69:4d:63:53:e5:5a:a8:34:7c:01:a1: 66:db:1b:57:ac:71:ec:fc:2f:d5:8c:2a:c9:29:a4: 98:3f:7b:ad:ee:93:10:d6:e7:26:db:5d:40:9a:50: 9e:3c:6c:d5:88:cd:7c:53:f3:ac:ee:18:f0:23:c8: b6:2a:25:04:55:aa:a9:d5:ce:31:17:db:69:d5:0c: 85:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:60:F7:D2:1B:79:7E:9D:9D:E5:C9:C3:7F:09:2D:17:B7:EC:DF:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fd:a8:8f:fc:a3:c4:ed:8b:1e:74:90:16:46:61:58:4e:ce: d6:d2:f4:fb:8b:85:f7:31:e4:52:17:36:49:a0:e4:90:48:29: ba:df:ba:55:18:bb:e1:97:06:d8:ba:4c:e3:b0:74:a4:9f:a8: 70:44:9c:b5:56:fb:01:ea:ed:b8:c1:59:61:d1:c7:19:35:f6: c4:a5:85:82:b1:e0:6a:13:b1:9b:b4:81:d8:cd:aa:45:bf:4c: 88:06:17:65:40:38:c4:ab:75:f7:48:60:a5:3c:9c:be:15:f9: 01:d0:c3:39:c9:84:7d:4f:1b:db:24:f4:4f:6f:3f:f1:13:26: 02:44:79:c4:75:ac:6b:c5:ce:2e:87:da:73:59:bc:f3:77:01: 5b:16:4d:ad:2f:a0:ab:2d:16:d1:d3:d1:38:e6:93:cc:aa:d2: 09:f0:19:83:47:06:ff:a2:c8:6b:c1:93:ce:89:a3:8f:ea:d3: 40:1b:d8:8d:4c:01:76:34:a0:6c:c7:ba:04:21:83:1a:1f:de: 82:df:d6:d8:19:66:72:19:bc:18:df:24:73:e9:38:2e:b4:aa: d5:3d:3f:e2:59:de:b9:c1:c2:a5:2c:e3:16:ef:7c:fb:59:ac: ce:d2:76:f8:66:cd:cf:e1:66:cd:81:50:ce:db:31:69:4c:73: 56:78:41:bf -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEcsZdgwUn4V0boO/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk MDI0OTZiM2MtOGU2Ni00Y2U2LWEyYzEtMzhiMjk2M2M1NmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AfMxY5L1BSujZTUyyplw2pIxcyJdIrlEVSa iiuhLNtCp9qmgCYPSCUbcsFhh75O32pIZyePuLhYOYiig+xtEbawvtSWDDZUbNJ4 7VdmyHeMahAiqMtsRhijdaZfqhePi7wQ8CbVzr2wHmV4NxrxLNcjYVbd4Bwv45xd d3Q592Lfg0LU/B6t1KgZQv2j4NnT6+Kkd3/7M+gVoVG68I6fxv5d6vwxVm7Kc+lp /dT9BYFABTcszGu3aU1jU+VaqDR8AaFm2xtXrHHs/C/VjCrJKaSYP3ut7pMQ1ucm 211AmlCePGzViM18U/Os7hjwI8i2KiUEVaqp1c4xF9tp1QyFWwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBdg99IbeX6dneXJw38JLRe37N/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMzA1YTY1MmItOGY2ZC0z YTU5LTg0ZDctMjkwODgwMDgwY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF/9qI/8o8Ttix50kBZGYVhOztbS9PuLhfcx5FIXNkmg5JBI KbrfulUYu+GXBti6TOOwdKSfqHBEnLVW+wHq7bjBWWHRxxk19sSlhYKx4GoTsZu0 gdjNqkW/TIgGF2VAOMSrdfdIYKU8nL4V+QHQwznJhH1PG9sk9E9vP/ETJgJEecR1 rGvFzi6H2nNZvPN3AVsWTa0voKstFtHT0Tjmk8yq0gnwGYNHBv+iyGvBk86Jo4/q 00Ab2I1MAXY0oGzHugQhgxof3oLf1tgZZnIZvBjfJHPpOC60qtU9P+JZ3rnBwqUs 4xbvfPtZrM7Sdvhmzc/hZs2BUM7bMWlMc1Z4Qb8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:52 2024 by rpki-client on console-ams.rpki-client.org