$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa File: 919695ea-4fb8-3d6b-a522-e72feddea0c8.roa (raw, json) Hash identifier: J7O8I93OiJnrAcnq4SfU59a1uSt0tutfmPk9U1cbVWU= Subject key identifier: 42:37:FC:BB:20:BB:D0:0E:86:1A:9F:8C:4E:A7:B2:44:B4:DC:CA:65 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584768EAC5E7A728AC0A5707CD00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa Signing time: Wed 02 Oct 2024 17:17:03 +0000 ROA not before: Wed 02 Oct 2024 17:17:03 +0000 ROA not after: Tue 31 Dec 2024 18:17:03 +0000 asID: 54994 IP address blocks: 138.113.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:68:ea:c5:e7:a7:28:ac:0a:57:07:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 2 17:17:03 2024 GMT Not After : Dec 31 18:17:03 2024 GMT Subject: CN=ea6de576-1c5d-4aec-9855-fdf4cf60ceaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c1:3f:b0:35:85:64:3b:33:71:7b:9d:e6:48: 13:2c:95:6c:4e:c5:92:91:12:55:67:b3:35:7e:cd: 1c:9a:6a:1e:68:c0:53:e2:9b:de:6c:5a:0c:1e:ad: a5:a6:16:da:8a:27:17:f1:f3:03:15:2e:7b:a7:31: e5:00:f3:6d:43:db:94:5b:30:c9:b9:28:3c:23:6a: 13:be:49:5a:0c:b0:3e:4e:f2:60:c4:21:b6:97:e9: d2:0b:a9:52:e3:99:20:4b:da:de:2c:60:07:cb:c7: 72:50:c5:8b:e7:d8:9f:6c:71:44:d0:a9:f1:1e:a3: cc:6d:7c:d5:09:56:47:52:0b:e3:ab:d8:8e:2a:e1: 37:e0:5c:1f:f1:51:e8:0a:f3:de:04:07:af:a7:23: d4:9e:08:11:18:60:58:49:3a:45:1f:e3:56:c0:23: 8b:1f:d0:9a:4e:0e:c1:4e:4d:c2:04:1c:2c:6e:5b: 31:c0:f0:3b:b6:eb:c3:f0:e3:04:06:d5:12:f4:3a: 94:6d:4d:62:4b:b5:6b:c7:36:8f:5f:9c:c6:ec:09: db:ff:50:e9:5e:72:2b:2d:0f:6f:54:05:3a:b8:2d: 13:d9:a1:2c:33:cf:ce:eb:32:34:c8:ac:4f:4e:bd: db:9a:3e:25:97:d9:34:74:d6:64:69:24:b8:0c:8e: a4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:FC:BB:20:BB:D0:0E:86:1A:9F:8C:4E:A7:B2:44:B4:DC:CA:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/919695ea-4fb8-3d6b-a522-e72feddea0c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 138.113.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f5:10:a8:cd:fd:13:e2:6f:4c:b6:c5:c6:75:ce:7b:df:1f: 26:a5:32:e6:91:93:28:3e:3f:75:e4:8a:7d:35:2c:c5:61:ff: b5:48:89:58:7d:91:2e:fb:31:b3:f0:f5:82:2b:82:1a:87:42: 11:43:6a:20:8e:84:29:46:55:f6:c3:4b:99:9b:aa:4a:6f:e3: 2c:8e:51:b8:54:c9:d2:2a:b5:79:0d:93:c9:f9:e8:50:fd:79: 14:ca:5a:40:40:99:ed:74:4a:1e:6e:0f:00:c1:ca:88:b5:72: 9c:98:b7:ef:1a:3a:18:b3:26:47:38:8a:78:b6:f3:1d:15:de: 70:bd:52:1c:c1:ee:7f:f6:eb:f8:52:ee:b6:4a:ab:0f:08:1a: 58:b1:e9:30:73:5f:50:44:1e:4b:58:54:6e:e7:66:80:60:04: 7a:75:66:60:fb:b4:79:ea:6a:de:49:70:6f:15:31:40:c5:38: 81:6b:af:e3:d9:f8:97:ae:d9:07:b4:06:51:dc:95:58:7b:05: 72:ac:c0:b6:bd:9a:f7:c3:3b:0d:cb:10:e2:aa:65:05:ce:aa: f3:00:87:7f:38:59:aa:88:57:ec:89:97:87:fb:7e:1f:65:c4: 4d:04:3a:6c:b3:72:f9:52:34:4b:03:f3:97:78:36:85:6f:ef: e8:c7:6c:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdo6sXnpyisClcHzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI0MTAwMjE3MTcwM1oXDTI0MTIzMTE4MTcwM1owLzEtMCsGA1UEAxMk ZWE2ZGU1NzYtMWM1ZC00YWVjLTk4NTUtZmRmNGNmNjBjZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgME/sDWFZDszcXud5kgTLJVsTsWSkRJVZ7M1 fs0cmmoeaMBT4pvebFoMHq2lphbaiicX8fMDFS57pzHlAPNtQ9uUWzDJuSg8I2oT vklaDLA+TvJgxCG2l+nSC6lS45kgS9reLGAHy8dyUMWL59ifbHFE0KnxHqPMbXzV CVZHUgvjq9iOKuE34Fwf8VHoCvPeBAevpyPUnggRGGBYSTpFH+NWwCOLH9CaTg7B Tk3CBBwsblsxwPA7tuvD8OMEBtUS9DqUbU1iS7VrxzaPX5zG7Anb/1DpXnIrLQ9v VAU6uC0T2aEsM8/O6zI0yKxPTr3bmj4ll9k0dNZkaSS4DI6k3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI3/Lsgu9AOhhqfjE6nskS03MplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOTE5Njk1ZWEtNGZiOC0z ZDZiLWE1MjItZTcyZmVkZGVhMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr1EKjN/RPib0y2xcZ1znvfHyalMuaRkyg+P3Xkin01LMVh/7VIiVh9 kS77MbPw9YIrghqHQhFDaiCOhClGVfbDS5mbqkpv4yyOUbhUydIqtXkNk8n56FD9 eRTKWkBAme10Sh5uDwDByoi1cpyYt+8aOhizJkc4ini28x0V3nC9UhzB7n/26/hS 7rZKqw8IGlix6TBzX1BEHktYVG7nZoBgBHp1ZmD7tHnqat5JcG8VMUDFOIFrr+PZ +Jeu2Qe0BlHclVh7BXKswLa9mvfDOw3LEOKqZQXOqvMAh384WaqIV+yJl4f7fh9l xE0EOmyzcvlSNEsD85d4NoVv7+jHbFI= -----END CERTIFICATE-----Generated at Fri Nov 22 08:06:24 2024 by rpki-client on console-ams.rpki-client.org