$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa File: 38b13889-d80f-38c2-bade-6634f5978a7c.roa (raw, json) Hash identifier: fHe3XtU7CF6m2rAojSRiRpuqEu34C6/kKywsBs8VdwM= Subject key identifier: E9:01:86:C5:7B:CB:65:A2:6E:01:69:41:69:2C:66:66:E7:5F:93:51 Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F43285845655834450BA1FC26248FAA00 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa Signing time: Mon 01 Apr 2024 01:00:26 +0000 ROA not before: Mon 01 Apr 2024 01:00:26 +0000 ROA not after: Sun 30 Jun 2024 01:00:26 +0000 asID: 16509 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:65:58:34:45:0b:a1:fc:26:24:8f:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Apr 1 01:00:26 2024 GMT Not After : Jun 30 01:00:26 2024 GMT Subject: CN=0962aa37-4530-4d34-8b10-5ad5c58ddddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:0b:38:49:6f:d9:c2:a2:96:c0:c5:5e:c7: e4:05:3d:17:05:d4:89:63:e5:52:17:3f:dc:ee:39: 52:f8:4c:9e:18:37:ad:ff:9c:dd:fe:b9:e2:9f:6b: a5:14:b7:1d:91:19:df:6f:2f:fd:b8:1f:7c:42:21: 54:5c:b5:f7:84:57:d9:51:63:95:f0:ea:f7:49:db: 54:8f:47:d6:55:37:8e:df:9a:58:86:6e:70:6e:77: 26:43:16:d2:34:1a:94:e3:3c:a7:f4:21:d0:ea:ff: 8e:d1:ce:92:f3:15:a0:82:df:38:1f:29:90:54:10: e7:2b:1e:53:f9:96:8e:17:03:4e:c8:f6:4d:3a:fd: e6:35:11:3f:d1:d5:b1:69:0e:8a:d7:e1:c8:67:78: c6:30:5a:3a:e6:63:f4:16:c8:b3:7c:20:71:50:4c: 5c:13:c2:a9:42:3e:21:60:fc:24:5c:c7:42:6e:93: 98:5b:01:30:9a:f8:60:fa:8e:23:7f:72:fd:03:2f: a7:9f:f3:1e:60:8d:ea:e7:10:7c:59:12:60:63:34: 6c:23:3f:f5:9b:1c:aa:74:e2:97:f5:09:dc:f3:07: 56:86:1b:a3:64:b4:0d:78:e4:7c:30:16:2e:ed:ec: 7c:65:0c:15:d2:b3:4f:5d:57:23:ae:b3:81:99:36: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:01:86:C5:7B:CB:65:A2:6E:01:69:41:69:2C:66:66:E7:5F:93:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:9d:4f:ed:ec:69:a6:65:f2:f2:c3:10:72:ed:cf:8b:85:94: 5c:ee:a6:32:aa:96:ba:63:80:16:5a:46:4d:3e:9a:3c:83:ac: 75:05:76:95:5f:d1:61:a4:ad:64:34:24:41:64:0c:91:47:ea: d3:dc:c6:e0:8f:ac:84:5e:cd:42:c4:e6:81:96:d8:91:f1:0a: 8a:0f:38:d4:f2:e5:c4:82:d7:9c:c0:96:9e:6e:fa:39:f9:a3: 95:4b:05:0b:83:10:0b:60:70:50:d9:cd:9d:01:c9:de:da:fa: d0:16:6c:a4:5a:15:4e:61:7c:ad:6b:00:e4:d7:e4:3f:f2:09: 17:fc:9a:4e:07:b9:06:e6:30:d6:ec:e7:45:c4:2b:90:4e:7f: b8:58:b0:f3:1b:d1:69:ec:64:58:30:a6:8b:d0:da:a3:ac:19: 69:02:be:b8:19:ae:15:16:cb:90:93:24:dc:37:a6:29:b0:9e: d4:e4:f8:93:5f:78:58:16:e9:52:9c:6f:6d:a1:0b:ce:ea:64: d9:5c:29:d5:b3:73:bc:a9:ef:92:ff:3f:5f:7a:9c:09:b2:65: aa:05:61:d4:c2:b1:52:20:60:d7:01:c9:34:55:19:be:fe:a1: 26:c8:9c:86:9c:28:46:3c:d5:27:56:4c:d1:4a:14:c4:19:84: c6:73:74:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVlWDRFC6H8JiSPqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI0MDQwMTAxMDAyNloXDTI0MDYzMDAxMDAyNlowLzEtMCsGA1UEAxMk MDk2MmFhMzctNDUzMC00ZDM0LThiMTAtNWFkNWM1OGRkZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJMLOElv2cKilsDFXsfkBT0XBdSJY+VSFz/c 7jlS+EyeGDet/5zd/rnin2ulFLcdkRnfby/9uB98QiFUXLX3hFfZUWOV8Or3SdtU j0fWVTeO35pYhm5wbncmQxbSNBqU4zyn9CHQ6v+O0c6S8xWggt84HymQVBDnKx5T +ZaOFwNOyPZNOv3mNRE/0dWxaQ6K1+HIZ3jGMFo65mP0FsizfCBxUExcE8KpQj4h YPwkXMdCbpOYWwEwmvhg+o4jf3L9Ay+nn/MeYI3q5xB8WRJgYzRsIz/1mxyqdOKX 9Qnc8wdWhhujZLQNeOR8MBYu7ex8ZQwV0rNPXVcjrrOBmTYFfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkBhsV7y2WibgFpQWksZmbnX5NRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvMzhiMTM4ODktZDgwZi0z OGMyLWJhZGUtNjYzNGY1OTc4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+dT+3saaZl8vLDEHLtz4uFlFzupjKqlrpjgBZaRk0+mjyDrHUFdpVf 0WGkrWQ0JEFkDJFH6tPcxuCPrIRezULE5oGW2JHxCooPONTy5cSC15zAlp5u+jn5 o5VLBQuDEAtgcFDZzZ0Byd7a+tAWbKRaFU5hfK1rAOTX5D/yCRf8mk4HuQbmMNbs 50XEK5BOf7hYsPMb0WnsZFgwpovQ2qOsGWkCvrgZrhUWy5CTJNw3pimwntTk+JNf eFgW6VKcb22hC87qZNlcKdWzc7yp75L/P196nAmyZaoFYdTCsVIgYNcByTRVGb7+ oSbInIacKEY81SdWTNFKFMQZhMZzdMI= -----END CERTIFICATE-----Generated at Thu May 2 17:33:25 2024 by rpki-client on console-ams.rpki-client.org