$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa File: ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa (raw, json) Hash identifier: vJD01ucPLqlR44pLVJxFJ/gy97iLNHkAYD8F/cgpz3E= Subject key identifier: 4A:B2:BF:66:6C:0C:9D:EE:23:90:CD:9A:94:92:81:71:D7:80:8D:30 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F4328584726D07E3DD6C5F5CB2F96AC00 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 395437 IP address blocks: 138.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:7e:3d:d6:c5:f5:cb:2f:96:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=d73720fd-f75e-4c78-8caa-3fc838f2d97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bf:46:9f:0d:ab:1a:dc:c5:4a:8f:95:4c:e5: 98:1a:7d:f3:8e:71:30:ba:2f:ea:5a:f8:1e:00:7d: 94:fe:d4:f7:4d:1c:5e:3a:32:98:52:f5:83:43:f7: 72:34:18:1a:3f:26:40:ad:ec:e8:51:46:2e:49:cd: d0:93:09:06:71:bb:e0:59:00:4d:d2:cb:96:eb:2b: b9:4c:32:a1:e5:b8:5f:94:17:ae:a0:90:a0:a1:7c: 23:c7:eb:13:32:d8:33:d9:49:b2:67:88:96:af:00: 09:ce:ee:52:50:4c:fd:9b:b8:18:7f:22:15:b7:c6: 15:03:50:ff:54:85:19:52:93:13:a7:58:16:81:95: 5a:17:e1:26:7b:c1:a1:e5:c9:40:92:6c:e4:4a:85: 0a:df:cd:20:8a:11:87:61:73:0c:70:70:8e:e9:0f: 8c:e0:00:15:01:b5:9f:57:62:e5:37:cf:4d:1c:6c: 55:ee:f1:da:ad:46:f4:72:a5:0d:69:de:16:ce:18: 40:44:ba:72:7f:b9:6f:06:ac:93:ce:ac:a9:7e:a3: 1d:56:94:70:be:82:fb:62:aa:e9:48:fa:f2:d1:de: 16:e1:d4:91:e7:1e:2d:ee:5b:ce:bd:99:f6:d7:fc: 27:aa:5d:0e:ca:95:9a:2a:a3:ab:84:b9:06:2b:78: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B2:BF:66:6C:0C:9D:EE:23:90:CD:9A:94:92:81:71:D7:80:8D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 138.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:05:d0:fe:d6:12:d2:40:4d:f9:87:4e:1a:8d:c7:70:6d:09: 3a:d5:ab:b2:b3:74:53:86:c2:ea:e9:5c:4b:75:2c:07:7c:76: 2c:fc:33:55:3f:4a:83:ec:ad:92:91:96:e0:07:e2:5f:e5:e1: e9:c6:30:2b:15:b9:56:5a:df:9b:29:c8:19:4e:53:3b:0f:c6: 7d:d2:6d:bb:ec:e2:db:a0:ec:48:d1:14:8f:c7:e3:8f:80:6e: 5d:63:5f:97:93:24:6c:2a:7b:17:32:96:20:a2:f7:f2:e7:fd: 45:f3:2b:1d:bf:e0:0d:12:66:6a:81:f9:23:c9:90:b8:54:13: 8c:6c:25:d3:a1:e0:91:fc:08:90:05:7d:a1:8a:07:c3:a0:dc: f6:91:59:f2:e6:a3:e0:f9:b5:a2:ec:ac:cb:a8:70:6d:57:0b: 22:a4:13:be:54:2e:b0:f7:28:2c:7d:a8:02:5e:60:58:a3:62: 18:dd:ef:fa:09:45:d3:55:ef:8a:33:7f:98:35:17:77:b9:cf: 21:2b:ee:ec:ab:54:39:72:72:89:f9:bb:17:0f:76:69:e4:72: 15:2e:34:f6:6a:3b:a7:53:e7:03:29:f8:4f:88:22:86:f4:99: 3a:32:52:72:53:d7:e6:51:d2:fa:34:41:a5:d2:ea:76:ce:00: 41:26:0d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0H491sX1yy+WrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk ZDczNzIwZmQtZjc1ZS00Yzc4LThjYWEtM2ZjODM4ZjJkOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6r9Gnw2rGtzFSo+VTOWYGn3zjnEwui/qWvge AH2U/tT3TRxeOjKYUvWDQ/dyNBgaPyZArezoUUYuSc3QkwkGcbvgWQBN0suW6yu5 TDKh5bhflBeuoJCgoXwjx+sTMtgz2UmyZ4iWrwAJzu5SUEz9m7gYfyIVt8YVA1D/ VIUZUpMTp1gWgZVaF+Eme8Gh5clAkmzkSoUK380gihGHYXMMcHCO6Q+M4AAVAbWf V2LlN89NHGxV7vHarUb0cqUNad4WzhhARLpyf7lvBqyTzqypfqMdVpRwvoL7Yqrp SPry0d4W4dSR5x4t7lvOvZn21/wnql0OypWaKqOrhLkGK3jwwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqyv2ZsDJ3uI5DNmpSSgXHXgI0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvYmE5YzVkMDYtMTNkMS0z ZmY3LTlkMzAtOTUxYTliMTRjZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcF0P7WEtJATfmHThqNx3BtCTrVq7KzdFOGwurpXEt1LAd8diz8M1U/ SoPsrZKRluAH4l/l4enGMCsVuVZa35spyBlOUzsPxn3Sbbvs4tug7EjRFI/H44+A bl1jX5eTJGwqexcyliCi9/Ln/UXzKx2/4A0SZmqB+SPJkLhUE4xsJdOh4JH8CJAF faGKB8Og3PaRWfLmo+D5taLsrMuocG1XCyKkE75ULrD3KCx9qAJeYFijYhjd7/oJ RdNV74ozf5g1F3e5zyEr7uyrVDlycon5uxcPdmnkchUuNPZqO6dT5wMp+E+IIob0 mToyUnJT1+ZR0vo0QaXS6nbOAEEmDRM= -----END CERTIFICATE-----Generated at Thu Nov 21 15:06:15 2024 by rpki-client on console-fra.rpki-client.org