$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa File: 38b13889-d80f-38c2-bade-6634f5978a7c.roa (raw, json) Hash identifier: HNZOp1Op41qMKdJsLCij2mKJpGoemObhNnHtFSejplk= Subject key identifier: 3B:83:A5:86:B1:E3:38:10:13:B2:14:62:2F:6A:DC:70:47:E1:AE:48 Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F43285847256B2418FE6266106E242080 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa Signing time: Sun 08 Sep 2024 13:00:41 +0000 ROA not before: Sun 08 Sep 2024 13:00:41 +0000 ROA not after: Sat 07 Dec 2024 14:00:41 +0000 asID: 16509 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:25:6b:24:18:fe:62:66:10:6e:24:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Sep 8 13:00:41 2024 GMT Not After : Dec 7 14:00:41 2024 GMT Subject: CN=ddfc67bd-7c82-46b5-9c9a-fddb5d12e89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:49:91:f4:1f:d6:8f:4d:18:97:63:01:91:0f: 20:f7:f7:c4:4e:11:3a:62:e0:aa:87:9f:de:09:0b: 71:7a:67:d4:77:c9:d1:2d:9b:aa:49:7a:3d:6a:d3: 1b:61:87:f4:ea:ae:3c:56:0d:20:e2:c7:85:f8:80: f9:4b:8f:8f:2b:a7:37:68:d3:9f:68:d9:4d:44:f6: a1:f3:47:a2:4c:b4:61:83:34:56:91:8c:8a:c2:2c: 51:e7:2f:c5:20:3c:b5:eb:9c:1d:d8:a7:49:55:a9: 18:c1:9c:c7:26:27:41:96:25:06:ce:b9:6a:06:70: 11:46:0a:fe:4b:04:fe:97:c5:33:76:0e:ac:74:df: c0:c0:de:b2:9f:38:02:5f:07:3a:30:c8:e4:fa:54: 99:70:65:4d:d2:71:a5:4c:a1:2a:6a:0a:be:5e:85: d2:03:88:6e:0d:c5:b2:01:8d:15:30:9f:04:e1:a8: 81:5b:ad:3a:45:e4:40:65:ba:b1:54:cd:59:37:e8: e5:3b:33:9c:fe:b7:96:b2:1d:ea:2e:ba:2b:cd:0d: b3:87:94:05:89:1c:6c:fa:24:05:e4:02:2e:56:d4: f4:29:df:16:81:6c:82:95:fa:fa:98:5a:c9:b7:81: 9b:c2:0a:37:ab:a8:a3:87:7e:9b:96:50:7e:3f:7d: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:83:A5:86:B1:E3:38:10:13:B2:14:62:2F:6A:DC:70:47:E1:AE:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:59:2c:b2:a5:22:fa:53:da:2d:07:30:0b:b8:25:01:fd:80: dc:52:07:e1:49:b1:1f:25:43:e6:b7:5e:b3:5a:f3:74:e4:e4: 43:25:7a:8c:a0:8d:99:03:60:91:da:f1:d0:5d:50:ff:60:2b: 30:40:14:a2:40:07:f8:ca:21:db:ee:d1:eb:de:ac:66:40:d5: 93:fa:56:68:1e:2a:95:fe:c5:59:66:fa:d9:31:40:fd:0f:c6: d6:67:00:cd:bf:ce:fa:06:7f:f3:d4:6a:22:7b:3f:a4:04:9d: 53:38:57:2b:fe:57:eb:2a:af:e1:8f:22:b6:2a:51:dc:63:c8: e3:8b:22:d6:40:d0:2a:9c:45:01:a5:5d:9f:82:eb:47:e4:38: 25:e4:5a:9b:35:0a:3d:0e:54:7f:86:9b:3d:08:13:9f:b9:a3: 24:72:1b:a2:05:03:5f:2a:8f:f7:98:98:1e:a1:5f:0d:cf:9d: 8d:b9:80:07:19:dc:26:09:63:de:38:25:6e:7f:af:d9:15:e4: 64:e7:4f:bf:e9:55:84:b6:88:5f:e7:57:ca:96:66:85:ae:4f: 78:b5:79:be:2e:5c:81:01:04:c6:1c:86:39:1d:d1:62:f1:41: f3:31:91:d0:80:45:02:b5:96:d1:1c:89:0b:ac:f0:b4:ad:87: f4:12:6b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEclayQY/mJmEG4kIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI0MDkwODEzMDA0MVoXDTI0MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGRmYzY3YmQtN2M4Mi00NmI1LTljOWEtZmRkYjVkMTJlODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEmR9B/Wj00Yl2MBkQ8g9/fEThE6YuCqh5/e CQtxemfUd8nRLZuqSXo9atMbYYf06q48Vg0g4seF+ID5S4+PK6c3aNOfaNlNRPah 80eiTLRhgzRWkYyKwixR5y/FIDy165wd2KdJVakYwZzHJidBliUGzrlqBnARRgr+ SwT+l8Uzdg6sdN/AwN6ynzgCXwc6MMjk+lSZcGVN0nGlTKEqagq+XoXSA4huDcWy AY0VMJ8E4aiBW606ReRAZbqxVM1ZN+jlOzOc/reWsh3qLrorzQ2zh5QFiRxs+iQF 5AIuVtT0Kd8WgWyClfr6mFrJt4Gbwgo3q6ijh36bllB+P32lgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuDpYax4zgQE7IUYi9q3HBH4a5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvMzhiMTM4ODktZDgwZi0z OGMyLWJhZGUtNjYzNGY1OTc4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhZLLKlIvpT2i0HMAu4JQH9gNxSB+FJsR8lQ+a3XrNa83Tk5EMleoyg jZkDYJHa8dBdUP9gKzBAFKJAB/jKIdvu0everGZA1ZP6VmgeKpX+xVlm+tkxQP0P xtZnAM2/zvoGf/PUaiJ7P6QEnVM4Vyv+V+sqr+GPIrYqUdxjyOOLItZA0CqcRQGl XZ+C60fkOCXkWps1Cj0OVH+Gmz0IE5+5oyRyG6IFA18qj/eYmB6hXw3PnY25gAcZ 3CYJY944JW5/r9kV5GTnT7/pVYS2iF/nV8qWZoWuT3i1eb4uXIEBBMYchjkd0WLx QfMxkdCARQK1ltEciQus8LSth/QSa9c= -----END CERTIFICATE-----Generated at Sun Nov 24 17:21:50 2024 by rpki-client on console-fra.rpki-client.org