$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa File: 87921b26-3e4d-3bf5-b82d-926923c0f68c.roa (raw, json) Hash identifier: R2ByvmLwg1EREidFE102h2C0w0A6SzdIp0OYJNH7fZI= Subject key identifier: 12:58:9E:A5:A9:30:37:5E:B1:81:F5:98:91:CB:0D:E7:56:60:29:18 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F432858474DE5F4497BADD572C889AEB0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 54994 IP address blocks: 138.113.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e5:f4:49:7b:ad:d5:72:c8:89:ae:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=54ae3254-5ce0-48ad-bffe-cf381b356b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:61:68:ea:eb:1e:36:39:f3:9d:91:d7:a0: 1d:09:74:83:e8:9b:84:34:aa:56:eb:40:c2:6d:5b: 8b:0a:12:7b:88:95:c8:46:a3:34:46:e6:61:67:38: d4:ff:85:5d:41:31:7b:d4:ff:68:a4:97:6e:5f:8f: 62:70:c3:70:51:03:7d:67:52:05:9e:db:ca:66:8f: 4e:08:98:0c:0c:22:9d:65:81:54:e0:ef:fe:a8:be: 63:07:05:5c:f8:1e:54:a9:f4:34:a4:d9:7a:6f:bb: bc:9e:87:d5:e9:d0:a2:a6:21:c1:91:db:d2:b2:a3: 18:e9:6e:6c:8b:9c:ff:86:ad:e0:c3:39:bb:d6:3a: ee:2b:c9:2a:ee:20:f5:13:5d:22:1d:b2:de:a9:84: 93:89:9b:e9:3e:ad:c8:d1:a2:c4:ef:c0:e3:d6:54: 6d:1e:a5:00:9f:f4:01:61:e7:c2:cd:4f:a1:33:62: b5:06:01:84:f1:12:9f:2d:e2:b1:75:be:f2:84:a5: 50:5a:94:cc:32:9f:b8:34:bf:5a:6a:ce:ad:50:63: d6:bb:fa:98:bf:c6:13:66:05:d9:b5:56:d7:89:92: e8:83:62:34:9a:25:b5:0d:71:66:fe:7d:b2:5d:07: b9:d5:17:ff:7f:5a:dd:13:b5:87:c3:85:dd:7f:d4: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:58:9E:A5:A9:30:37:5E:B1:81:F5:98:91:CB:0D:E7:56:60:29:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ee:29:ec:b8:f4:b8:41:73:1c:88:ca:24:02:5c:6f:85:9e: b0:19:60:4c:98:6e:05:37:92:c1:8c:73:10:98:ec:9d:c9:7e: a0:ce:d4:c0:37:6a:4c:45:8c:14:af:08:61:7d:65:52:3f:53: d4:a3:3c:eb:5b:fd:33:27:91:f0:e3:cf:56:af:39:30:d8:0d: 0f:5d:63:a0:83:9d:ef:f0:d0:f4:d4:f5:97:30:d8:3f:58:66: f0:84:0e:a2:d6:e4:ac:81:78:ee:26:6f:23:25:f1:42:38:45: 5c:62:77:20:c1:77:0f:e7:9d:70:74:46:4b:e9:da:20:45:e8: 30:c3:66:2b:2c:c1:c6:52:ae:0a:43:3f:e5:79:30:0a:d4:f6: 34:b6:a5:9b:cc:ca:8d:11:39:e7:4b:43:29:0c:20:f5:41:4e: f5:cb:c7:f8:ff:57:31:5a:3d:7e:61:80:16:e9:ac:06:36:35: c0:29:10:a5:8d:03:43:21:96:8c:52:47:1f:ad:d6:13:15:a6: 52:33:9e:68:09:87:f3:9f:76:1a:21:05:41:51:3d:56:17:b9: 67:ef:b1:dd:6b:ef:0e:d7:6b:fe:3d:3e:7f:47:7c:bb:ba:be: fe:e1:1d:82:c1:89:54:b4:60:77:b3:bd:ee:cd:69:66:9e:65: 30:0e:54:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5fRJe63VcsiJrrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk NTRhZTMyNTQtNWNlMC00OGFkLWJmZmUtY2YzODFiMzU2YjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDBhaOrrHjY5852R16AdCXSD6JuENKpW60DC bVuLChJ7iJXIRqM0RuZhZzjU/4VdQTF71P9opJduX49icMNwUQN9Z1IFntvKZo9O CJgMDCKdZYFU4O/+qL5jBwVc+B5UqfQ0pNl6b7u8nofV6dCipiHBkdvSsqMY6W5s i5z/hq3gwzm71jruK8kq7iD1E10iHbLeqYSTiZvpPq3I0aLE78Dj1lRtHqUAn/QB YefCzU+hM2K1BgGE8RKfLeKxdb7yhKVQWpTMMp+4NL9aas6tUGPWu/qYv8YTZgXZ tVbXiZLog2I0miW1DXFm/n2yXQe51Rf/f1rdE7WHw4Xdf9SmBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJYnqWpMDdesYH1mJHLDedWYCkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvODc5MjFiMjYtM2U0ZC0z YmY1LWI4MmQtOTI2OTIzYzBmNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7uKey49LhBcxyIyiQCXG+FnrAZYEyYbgU3ksGMcxCY7J3JfqDO1MA3 akxFjBSvCGF9ZVI/U9SjPOtb/TMnkfDjz1avOTDYDQ9dY6CDne/w0PTU9Zcw2D9Y ZvCEDqLW5KyBeO4mbyMl8UI4RVxidyDBdw/nnXB0Rkvp2iBF6DDDZisswcZSrgpD P+V5MArU9jS2pZvMyo0ROedLQykMIPVBTvXLx/j/VzFaPX5hgBbprAY2NcApEKWN A0MhloxSRx+t1hMVplIznmgJh/OfdhohBUFRPVYXuWfvsd1r7w7Xa/49Pn9HfLu6 vv7hHYLBiVS0YHezve7NaWaeZTAOVP4= -----END CERTIFICATE-----Generated at Mon Nov 25 19:20:05 2024 by rpki-client on console-ams.rpki-client.org