$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa File: 8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa (raw, json) Hash identifier: 1DLxj4b1ayyZhSclyqrDHD5+7U2OukbTS8RBGC4haJY= Subject key identifier: 64:B5:FD:53:B1:CE:DB:F3:8D:02:D0:58:75:66:05:73:5B:DC:6E:04 Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F432858473FF0A78346ADED00E691E140 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 611 IP address blocks: 138.119.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:a7:83:46:ad:ed:00:e6:91:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=2908622d-79de-4177-8e80-66b0a948d9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:d7:95:d6:78:39:de:96:56:ed:6f:dd:4a: eb:2f:d3:7c:64:34:53:88:fe:25:7c:45:12:74:0f: 27:a8:2c:45:bb:05:5f:ef:0c:dd:3e:12:e6:b4:ea: 3d:92:fb:8f:01:a0:be:e4:ee:1c:5b:30:65:85:06: 9f:63:1e:6e:05:04:3b:44:37:d2:5b:ac:02:09:80: 3b:2a:97:4b:b3:e3:c6:27:9e:3f:89:02:c9:a0:42: 70:c9:3b:fc:91:28:e0:32:8b:05:f1:8d:dc:01:3e: 22:4d:cb:9d:11:fa:b9:47:cf:86:21:18:7f:8f:60: 30:aa:1a:b1:af:1b:0a:06:7d:71:db:5c:23:0d:8f: 14:9d:57:07:eb:a4:56:5a:86:40:0d:ba:89:c4:46: 10:4e:29:dc:d3:30:a4:3f:32:2b:08:c3:7a:c5:e5: 16:4b:29:82:1a:fb:18:e8:cf:a2:ef:ed:ab:28:90: 3b:70:80:b3:c6:60:e8:9a:fd:ac:5f:3a:d4:4c:84: 71:37:c7:dc:1c:10:75:b4:a0:21:11:55:a5:06:15: a4:d0:20:f0:d6:f1:26:c3:45:c2:66:2a:4a:0d:1a: 56:95:88:a6:3e:6b:2c:97:50:3b:d9:bd:e1:90:c6: ec:fb:83:b8:38:ec:53:81:5a:93:aa:5e:b6:47:ca: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B5:FD:53:B1:CE:DB:F3:8D:02:D0:58:75:66:05:73:5B:DC:6E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/8356f46f-0489-3de9-8c30-fa0cd8ee0a82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 138.119.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:91:24:98:ec:bf:39:24:2a:6e:db:0d:a4:c6:63:55:94:57: cc:c7:8f:11:c2:a6:3b:f9:72:68:7d:d0:ea:ae:83:f7:53:d6: 4d:54:1d:fc:b0:ab:59:97:d7:bc:a9:73:0a:66:27:68:c3:b0: 6a:eb:22:e1:3a:0a:07:b5:c6:72:df:83:b5:a6:ab:57:6e:87: e9:4e:de:30:54:c8:84:d5:d4:9f:31:4a:65:2d:d4:1b:10:a0: 19:12:1e:1e:16:ae:75:d7:da:a7:3b:99:e0:a8:29:e0:8c:e4: 20:d4:39:6d:f6:8c:c4:cf:e7:f0:1b:42:3d:f2:78:31:8a:df: 1e:91:48:cd:fe:45:5d:27:14:1b:8e:7c:f0:8c:99:11:c5:0f: af:f8:75:5d:c8:aa:76:93:b0:48:7c:00:77:85:94:ba:16:fb: 16:e7:a1:c7:5d:9f:c3:0e:3f:6e:a4:e9:a0:36:8c:77:8a:2c: ed:d8:64:75:30:2a:bf:c7:f3:55:f8:f1:0e:c8:dc:0f:89:49: 3c:53:81:ec:d0:f6:92:41:59:2e:a7:7a:2a:c3:b5:13:f8:d8: c2:d1:1a:e1:25:ff:3a:66:5c:4d:95:89:4d:33:01:78:85:33: 7c:03:91:2d:26:5a:2a:7f:a1:1d:fe:8e:29:d3:90:d5:45:61: a2:01:46:ef -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEc/8KeDRq3tAOaR4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk MjkwODYyMmQtNzlkZS00MTc3LThlODAtNjZiMGE5NDhkOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAPXldZ4Od6WVu1v3UrrL9N8ZDRTiP4lfEUS dA8nqCxFuwVf7wzdPhLmtOo9kvuPAaC+5O4cWzBlhQafYx5uBQQ7RDfSW6wCCYA7 KpdLs+PGJ54/iQLJoEJwyTv8kSjgMosF8Y3cAT4iTcudEfq5R8+GIRh/j2Awqhqx rxsKBn1x21wjDY8UnVcH66RWWoZADbqJxEYQTinc0zCkPzIrCMN6xeUWSymCGvsY 6M+i7+2rKJA7cICzxmDomv2sXzrUTIRxN8fcHBB1tKAhEVWlBhWk0CDw1vEmw0XC ZipKDRpWlYimPmssl1A72b3hkMbs+4O4OOxTgVqTql62R8ru2wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGS1/VOxztvzjQLQWHVmBXNb3G4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODM1NmY0NmYtMDQ4OS0z ZGU5LThjMzAtZmEwY2Q4ZWUwYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAincwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATpEkmOy/OSQqbtsNpMZjVZRXzMePEcKmO/lyaH3Q6q6D91PWTVQd/LCr WZfXvKlzCmYnaMOwausi4ToKB7XGct+DtaarV26H6U7eMFTIhNXUnzFKZS3UGxCg GRIeHhauddfapzuZ4Kgp4IzkINQ5bfaMxM/n8BtCPfJ4MYrfHpFIzf5FXScUG458 8IyZEcUPr/h1XciqdpOwSHwAd4WUuhb7Fuehx12fww4/bqTpoDaMd4os7dhkdTAq v8fzVfjxDsjcD4lJPFOB7ND2kkFZLqd6KsO1E/jYwtEa4SX/OmZcTZWJTTMBeIUz fAORLSZaKn+hHf6OKdOQ1UVhogFG7w== -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:42 2024 by rpki-client on console-ams.rpki-client.org