$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa File: ea556a40-a873-3ed9-aa90-580d0a9fa927.roa (raw, json) Hash identifier: sCgGjsFbsprSDU19WggJtgoLszNJcyw9CIF4jmCrxPY= Subject key identifier: EA:58:CB:95:5A:D1:D6:64:93:AA:9F:32:5A:78:83:5D:C0:8B:C4:66 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F4328584563F3082E66886E46E5CBB980 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa Signing time: Sun 31 Mar 2024 13:00:36 +0000 ROA not before: Sun 31 Mar 2024 13:00:36 +0000 ROA not after: Sat 29 Jun 2024 13:00:36 +0000 asID: 395437 IP address blocks: 138.43.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:63:f3:08:2e:66:88:6e:46:e5:cb:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Mar 31 13:00:36 2024 GMT Not After : Jun 29 13:00:36 2024 GMT Subject: CN=db41a993-1444-4ef2-9a6d-4b749bf82b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:36:75:f2:8c:4b:14:97:6e:5b:46:7e:a2:84: db:32:02:70:d6:f8:6b:1f:24:10:94:90:9c:8c:63: ef:ab:8b:f5:33:64:cf:d5:58:25:3c:0b:a1:c4:16: b7:c9:5d:23:4b:d8:c5:34:ad:93:70:68:18:53:59: bf:6e:ba:be:ef:54:bd:fa:67:62:f3:ab:aa:27:5a: ee:26:d9:70:45:6c:05:53:83:9f:a0:a9:2f:76:78: 62:79:c3:4d:ea:f6:54:40:11:76:e4:e7:4d:98:cb: ea:70:11:f6:99:76:5c:0c:84:8e:ef:56:24:1b:8a: df:79:54:7c:0f:56:c7:13:93:15:5f:11:4d:7d:2c: b3:75:fa:00:7e:ba:8a:43:1e:b9:8c:d2:d8:a9:31: 8c:37:11:90:d7:b0:58:78:a3:24:ff:83:95:d6:5d: 6f:d5:93:1f:d6:f2:8a:9b:34:64:b1:38:3e:69:d8: 3a:03:b7:8e:da:74:0d:9e:50:7f:32:4c:36:3e:1b: 4e:ce:02:f5:3e:c4:76:10:f4:47:24:ff:9a:55:57: b4:ce:13:fe:65:cd:9e:e1:fd:9f:2e:bd:bb:d3:2d: 25:3c:89:1f:49:4e:b2:f9:85:a9:49:22:18:87:f9: 49:38:93:e1:04:8c:d9:ea:b1:9f:be:fc:f0:b6:d8: 62:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:58:CB:95:5A:D1:D6:64:93:AA:9F:32:5A:78:83:5D:C0:8B:C4:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 138.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d9:79:39:1a:ca:94:24:80:2f:77:a4:d1:f8:05:ae:42:04: 19:ce:a1:af:4d:7d:b2:fd:53:f4:ca:c4:7e:50:a6:40:25:d2: 79:74:6b:f6:e7:b2:07:91:7e:7c:6b:8b:3f:82:e4:9a:d5:fa: bc:7b:b4:22:48:39:36:ad:f7:95:8c:3d:76:a8:9e:bd:84:f4: 0c:02:ff:90:c7:23:b4:fb:3d:5f:e4:6c:7c:e4:29:2e:36:37: 52:d1:f1:06:f4:e4:4f:0d:d5:be:bb:92:15:da:af:4d:d6:3f: 80:86:43:e8:8b:06:5e:00:8e:7d:e2:6b:0f:d3:3e:97:3b:2c: 96:fc:8e:d6:8a:e3:42:17:58:e6:10:d6:28:20:9f:36:57:ac: 8e:46:30:1c:29:7d:61:c8:bf:1a:ca:a4:c2:04:c7:ac:cd:5c: cb:7a:d0:0a:dc:5d:92:17:c0:d9:87:40:6f:26:33:db:56:0c: 7b:7e:6f:c5:97:0e:e7:b4:6f:f3:e1:17:ab:94:b4:2b:97:20: 33:9e:74:71:52:ee:97:04:af:be:6c:3d:79:32:1c:77:de:16: aa:17:c8:94:ac:8d:fc:27:48:86:6b:86:02:46:b1:0b:47:9b: 72:b3:21:5a:c5:7b:8e:01:6b:e7:5e:a2:c4:e0:0d:f7:dd:66: bf:6c:1d:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8wguZohuRuXLuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk ZGI0MWE5OTMtMTQ0NC00ZWYyLTlhNmQtNGI3NDliZjgyYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjZ18oxLFJduW0Z+ooTbMgJw1vhrHyQQlJCc jGPvq4v1M2TP1VglPAuhxBa3yV0jS9jFNK2TcGgYU1m/brq+71S9+mdi86uqJ1ru JtlwRWwFU4OfoKkvdnhiecNN6vZUQBF25OdNmMvqcBH2mXZcDISO71YkG4rfeVR8 D1bHE5MVXxFNfSyzdfoAfrqKQx65jNLYqTGMNxGQ17BYeKMk/4OV1l1v1ZMf1vKK mzRksTg+adg6A7eO2nQNnlB/Mkw2PhtOzgL1PsR2EPRHJP+aVVe0zhP+Zc2e4f2f Lr270y0lPIkfSU6y+YWpSSIYh/lJOJPhBIzZ6rGfvvzwtthi4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpYy5Va0dZkk6qfMlp4g13Ai8RmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvZWE1NTZhNDAtYTg3My0z ZWQ5LWFhOTAtNTgwZDBhOWZhOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7ZeTkaypQkgC93pNH4Ba5CBBnOoa9NfbL9U/TKxH5QpkAl0nl0a/bn sgeRfnxriz+C5JrV+rx7tCJIOTat95WMPXaonr2E9AwC/5DHI7T7PV/kbHzkKS42 N1LR8Qb05E8N1b67khXar03WP4CGQ+iLBl4Ajn3iaw/TPpc7LJb8jtaK40IXWOYQ 1iggnzZXrI5GMBwpfWHIvxrKpMIEx6zNXMt60ArcXZIXwNmHQG8mM9tWDHt+b8WX Due0b/PhF6uUtCuXIDOedHFS7pcEr75sPXkyHHfeFqoXyJSsjfwnSIZrhgJGsQtH m3KzIVrFe44Ba+deosTgDffdZr9sHWU= -----END CERTIFICATE-----Generated at Thu May 9 20:58:15 2024 by rpki-client on console-fra.rpki-client.org