$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/cace7e8a-0b09-3209-ae9c-30f977b1282c.roa File: cace7e8a-0b09-3209-ae9c-30f977b1282c.roa (raw, json) Hash identifier: 5SoM3Yx6eddIlPLXp7PvhLsCSRVzRCPFqpVeAPv5z14= Subject key identifier: 46:66:A8:57:D1:F9:FC:D5:AF:F7:14:57:00:E0:B5:33:37:95:28:06 Certificate issuer: /CN=5fb6f799-d584-48a1-9c74-50e91497918a Certificate serial: 010D0C9F432858454C1BF54EFD2BD2FB8CA71DF8 Authority key identifier: B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/cace7e8a-0b09-3209-ae9c-30f977b1282c.roa Signing time: Sat 23 Mar 2024 00:03:50 +0000 ROA not before: Sat 23 Mar 2024 00:03:50 +0000 ROA not after: Fri 21 Jun 2024 00:03:50 +0000 asID: 0 IP address blocks: 138.112.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4c:1b:f5:4e:fd:2b:d2:fb:8c:a7:1d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fb6f799-d584-48a1-9c74-50e91497918a Validity Not Before: Mar 23 00:03:50 2024 GMT Not After : Jun 21 00:03:50 2024 GMT Subject: CN=96db4572-f5c3-4b96-8775-e0870033f2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:ca:76:47:24:9b:bf:f8:5a:2d:b8:ac:1f: 39:f5:05:2e:15:ac:0c:40:60:c3:e4:29:cf:4a:54: 42:4e:b4:38:e0:85:04:6b:04:52:d4:24:90:bc:71: ec:74:5e:03:8c:41:52:68:e5:3b:9e:71:e5:a7:7e: 17:f0:80:95:16:16:4b:78:7d:6e:b5:82:33:f6:11: c6:0c:cd:f9:58:2e:75:ad:cf:24:cc:30:8c:08:9b: 56:f5:eb:74:0a:dc:20:ba:bd:07:9c:b1:22:c9:39: eb:1c:cc:f3:00:7f:f7:7c:e6:27:41:3f:64:69:82: 04:55:95:70:6c:6f:b2:d6:e1:5d:a0:0f:26:d8:57: d2:20:88:67:80:57:9b:32:cf:7c:11:6a:f4:a3:35: 4b:eb:a6:e2:56:0b:c8:23:e6:10:0d:0e:d5:f2:49: 34:94:12:c0:98:2d:92:f4:14:92:67:ee:09:88:1f: 19:cf:ba:76:fa:76:c2:0c:73:7a:c1:2b:c0:61:50: 17:5c:7d:ae:dc:3d:20:46:04:2c:65:d9:dc:d5:ad: 04:4e:7b:f8:3b:ad:d0:2f:15:74:e7:0c:3e:ab:32: 68:76:65:3e:67:33:8d:dc:14:70:bd:4d:57:1c:7f: 86:ce:5e:73:b5:52:34:d5:3e:5b:ed:83:45:29:a9: 7b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:66:A8:57:D1:F9:FC:D5:AF:F7:14:57:00:E0:B5:33:37:95:28:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/cace7e8a-0b09-3209-ae9c-30f977b1282c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl X509v3 Authority Key Identifier: keyid:B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer sbgp-ipAddrBlock: critical IPv4: 138.112.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2f:de:47:42:90:1e:06:b7:23:9d:14:02:97:94:55:f6:be: ba:ad:42:a1:85:85:e3:c9:39:18:6b:8a:83:e0:6e:50:99:c7: 30:d4:62:c0:a4:63:fe:5e:9e:29:cb:58:9d:70:81:73:7b:a2: 03:bf:6b:8d:b0:88:8e:0f:11:96:a0:f4:ad:08:07:88:05:73: fe:1e:f9:af:fa:21:df:43:6f:35:74:40:b1:0f:02:98:55:31: 7e:47:31:96:67:be:f1:11:d3:9a:34:dc:70:71:4e:c0:44:30: 75:38:2e:4c:85:1a:18:71:2d:72:ef:3f:66:f4:a4:c6:e5:05: 17:9e:83:10:04:3d:ac:4a:30:54:dd:5b:6d:66:37:69:1b:c2: c8:c2:d2:26:f6:96:e6:37:cd:53:16:00:4c:a9:ea:3f:06:65: e9:cc:a6:91:45:fd:fe:8a:eb:ae:a5:6f:a7:a1:0d:f0:1d:99: 97:cf:b2:2c:b0:f5:31:84:d3:59:39:16:0e:7b:c7:2a:25:e1: 61:d5:22:f1:b9:2c:f2:74:04:71:77:c8:54:f0:27:3c:40:d9: 22:27:eb:89:71:4d:58:6d:b2:97:b7:5f:6c:2e:63:f4:ff:ad: 1c:c2:c3:f8:33:6f:0d:df:a2:d2:ba:1c:b8:a9:1f:9e:97:2d: ac:e8:23:e6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVMG/VO/SvS+4ynHfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZiNmY3OTktZDU4NC00OGExLTljNzQtNTBlOTE0OTc5 MThhMB4XDTI0MDMyMzAwMDM1MFoXDTI0MDYyMTAwMDM1MFowLzEtMCsGA1UEAxMk OTZkYjQ1NzItZjVjMy00Yjk2LTg3NzUtZTA4NzAwMzNmMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJjKdkckm7/4Wi24rB859QUuFawMQGDD5CnP SlRCTrQ44IUEawRS1CSQvHHsdF4DjEFSaOU7nnHlp34X8ICVFhZLeH1utYIz9hHG DM35WC51rc8kzDCMCJtW9et0Ctwgur0HnLEiyTnrHMzzAH/3fOYnQT9kaYIEVZVw bG+y1uFdoA8m2FfSIIhngFebMs98EWr0ozVL66biVgvII+YQDQ7V8kk0lBLAmC2S 9BSSZ+4JiB8Zz7p2+nbCDHN6wSvAYVAXXH2u3D0gRgQsZdnc1a0ETnv4O63QLxV0 5ww+qzJodmU+ZzON3BRwvU1XHH+Gzl5ztVI01T5b7YNFKal7DQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEZmqFfR+fzVr/cUVwDgtTM3lSgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmI2 Zjc5OS1kNTg0LTQ4YTEtOWM3NC01MGU5MTQ5NzkxOGEvY2FjZTdlOGEtMGIwOS0z MjA5LWFlOWMtMzBmOTc3YjEyODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWZiNmY3OTktZDU4NC00OGExLTlj NzQtNTBlOTE0OTc5MThhLzVmYjZmNzk5LWQ1ODQtNDhhMS05Yzc0LTUwZTkxNDk3 OTE4YS5jcmwwHwYDVR0jBBgwFoAUtGY/zm+cZ0UESsNDkbc3qfziJlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmI2Zjc5OS1kNTg0LTQ4YTEtOWM3NC01MGU5 MTQ5NzkxOGEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAinAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiS/eR0KQHga3I50UApeUVfa+uq1CoYWF48k5GGuKg+BuUJnHMNRiwKRj /l6eKctYnXCBc3uiA79rjbCIjg8RlqD0rQgHiAVz/h75r/oh30NvNXRAsQ8CmFUx fkcxlme+8RHTmjTccHFOwEQwdTguTIUaGHEtcu8/ZvSkxuUFF56DEAQ9rEowVN1b bWY3aRvCyMLSJvaW5jfNUxYATKnqPwZl6cymkUX9/orrrqVvp6EN8B2Zl8+yLLD1 MYTTWTkWDnvHKiXhYdUi8bks8nQEcXfIVPAnPEDZIifriXFNWG2yl7dfbC5j9P+t HMLD+DNvDd+i0rocuKkfnpctrOgj5g== -----END CERTIFICATE-----Generated at Fri Apr 26 11:11:46 2024 by rpki-client on console-ams.rpki-client.org