$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa File: ea556a40-a873-3ed9-aa90-580d0a9fa927.roa (raw, json) Hash identifier: 7DSm3QWQdyc1ZBf2Z6rcuTntVzS/gR1kd1hpOOgBSX8= Subject key identifier: 66:C3:19:38:DB:7D:44:1E:DE:7F:70:48:6C:49:87:73:B8:F1:7F:6B Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F432858472405C5D1FA50B43F82D4CCC0 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa Signing time: Sun 08 Sep 2024 01:00:31 +0000 ROA not before: Sun 08 Sep 2024 01:00:31 +0000 ROA not after: Sat 07 Dec 2024 02:00:31 +0000 asID: 395437 IP address blocks: 138.43.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:24:05:c5:d1:fa:50:b4:3f:82:d4:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Sep 8 01:00:31 2024 GMT Not After : Dec 7 02:00:31 2024 GMT Subject: CN=beff91be-550d-43b4-b8b8-41c8369a23d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:08:67:73:77:4d:57:0d:fb:80:24:e0:58:56: 3d:4e:d7:2b:72:51:7f:6d:dd:fb:1c:42:80:81:c1: 16:63:1f:c3:99:96:df:44:dd:2f:60:3c:a0:64:71: 4e:36:b4:4c:31:8b:0e:14:15:60:38:aa:6a:ec:5c: 9c:c6:bd:2b:7d:99:de:f1:42:fb:8d:17:87:c6:0e: 92:7f:c6:50:ef:e3:4a:1b:59:4a:2a:96:15:95:ef: 95:50:9e:83:40:3f:70:f8:f5:c4:f9:51:c3:63:01: 2c:2e:d0:76:94:35:f7:3e:b2:10:ff:87:4a:40:a7: c7:d5:e1:bf:a8:b3:d8:f3:f3:6f:47:c8:bf:18:37: aa:90:40:cc:be:11:47:42:56:86:79:4d:6f:44:ee: 06:5a:e7:29:92:3c:2e:20:f7:1f:02:a4:63:70:bf: 62:80:18:07:ff:a6:2f:98:c4:6c:be:84:a0:28:ed: 9a:a4:c4:f5:d4:ed:85:4a:40:7b:68:5d:41:a8:82: b4:2b:30:90:da:71:4f:58:e4:09:1e:18:87:d1:95: d8:45:e5:34:01:76:ad:78:7b:41:5a:a1:0d:0c:44: 87:31:15:16:ca:b6:a4:9b:5d:09:7a:03:11:37:cf: 0e:27:86:a5:37:d9:12:a5:f8:17:12:53:d1:f1:e9: 37:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C3:19:38:DB:7D:44:1E:DE:7F:70:48:6C:49:87:73:B8:F1:7F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 138.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5f:d9:10:60:b2:4f:60:84:97:bd:7a:c8:05:cf:89:7a:8f: a7:72:03:22:ec:82:67:4e:92:ac:f9:88:e3:ec:06:fa:b6:96: 62:4e:11:34:73:00:2f:21:08:a6:10:8f:38:7e:21:17:d6:37: 45:78:64:1f:52:84:c9:61:a8:63:28:95:0e:e4:a6:50:04:7a: f5:c4:db:e4:12:d2:95:3b:02:80:ac:b5:23:6e:53:d5:5d:2a: b2:4b:48:dc:01:1a:de:1b:58:b3:cd:2e:20:b4:fc:2c:f8:b2: d2:79:9b:ba:43:bc:3b:92:c5:ba:fa:33:b7:65:46:2f:01:b5: ea:7c:7a:81:f9:b8:75:29:23:57:a1:5c:5a:15:73:1b:1f:94: 5d:0b:09:7f:05:4c:2a:a0:01:1c:a6:20:4d:78:ac:de:61:3f: 27:63:4d:d8:16:15:c8:40:8e:a6:a5:6d:98:87:67:91:ff:51: 77:33:4b:5d:1e:eb:20:b0:da:ab:5e:01:cd:ef:33:cd:1c:20: 3e:40:66:5e:ea:23:97:0b:f8:c2:4d:a6:19:85:02:73:36:72: f8:d1:af:f6:23:f8:ed:db:24:b2:10:8b:ce:7a:3d:17:81:97: 5d:0f:62:8d:b0:81:a0:48:12:7a:8a:6d:b3:97:bd:de:03:cb: 69:a0:34:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBcXR+lC0P4LUzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk YmVmZjkxYmUtNTUwZC00M2I0LWI4YjgtNDFjODM2OWEyM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAhnc3dNVw37gCTgWFY9TtcrclF/bd37HEKA gcEWYx/DmZbfRN0vYDygZHFONrRMMYsOFBVgOKpq7Fycxr0rfZne8UL7jReHxg6S f8ZQ7+NKG1lKKpYVle+VUJ6DQD9w+PXE+VHDYwEsLtB2lDX3PrIQ/4dKQKfH1eG/ qLPY8/NvR8i/GDeqkEDMvhFHQlaGeU1vRO4GWucpkjwuIPcfAqRjcL9igBgH/6Yv mMRsvoSgKO2apMT11O2FSkB7aF1BqIK0KzCQ2nFPWOQJHhiH0ZXYReU0AXateHtB WqENDESHMRUWyrakm10JegMRN88OJ4alN9kSpfgXElPR8ek31wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbDGTjbfUQe3n9wSGxJh3O48X9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvZWE1NTZhNDAtYTg3My0z ZWQ5LWFhOTAtNTgwZDBhOWZhOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1f2RBgsk9ghJe9esgFz4l6j6dyAyLsgmdOkqz5iOPsBvq2lmJOETRz AC8hCKYQjzh+IRfWN0V4ZB9ShMlhqGMolQ7kplAEevXE2+QS0pU7AoCstSNuU9Vd KrJLSNwBGt4bWLPNLiC0/Cz4stJ5m7pDvDuSxbr6M7dlRi8Btep8eoH5uHUpI1eh XFoVcxsflF0LCX8FTCqgARymIE14rN5hPydjTdgWFchAjqalbZiHZ5H/UXczS10e 6yCw2qteAc3vM80cID5AZl7qI5cL+MJNphmFAnM2cvjRr/Yj+O3bJLIQi856PReB l10PYo2wgaBIEnqKbbOXvd4Dy2mgNBE= -----END CERTIFICATE-----Generated at Thu Nov 21 15:51:05 2024 by rpki-client on console-ams.rpki-client.org