$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa File: 099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa (raw, json) Hash identifier: Y5Wlx2IqSw58lOyCkpJD9KMqWw4dvQvClYmRhncKm8s= Subject key identifier: 71:B2:C7:39:A8:10:47:75:36:27:E4:C1:FF:6C:33:27:A1:6F:50:13 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285847537B986FC33C968B33CAA880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 701 IP address blocks: 138.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:98:6f:c3:3c:96:8b:33:ca:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=52a71be0-152a-417c-9193-5b26c23e9176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:5b:05:b7:05:5b:23:c2:3d:9a:19:7b:46: 34:6c:aa:03:cd:80:20:78:4f:4c:da:a0:f2:5e:3f: e8:20:e5:88:28:13:bb:09:e1:93:f3:d3:6a:5d:76: ff:7b:de:cc:44:87:a9:e3:71:9a:c8:a8:4c:c8:d1: 3d:49:2b:e3:20:97:10:41:4e:35:a3:b4:9d:d4:cf: 4c:ea:db:36:ac:ce:62:c3:39:ae:44:60:2b:71:f8: b3:4d:22:26:aa:44:0f:2e:46:89:e5:32:24:3a:3f: bf:54:77:0a:7a:03:3b:72:b8:c2:91:6e:2f:8e:40: 03:7c:dd:96:74:88:bc:2e:6a:48:8e:b5:f2:21:b3: 0b:df:0e:bc:b0:db:26:e7:31:38:e5:20:3c:9f:cc: 0b:bf:c4:52:17:e1:56:d5:fb:de:f6:e6:a5:96:10: c9:9c:52:5c:30:c0:0f:97:bd:5c:cd:a5:d1:e6:5a: 88:06:45:f6:bf:12:23:4d:ff:c2:f7:ce:66:52:c9: 68:71:65:81:19:7e:cb:08:3d:5f:2b:42:fa:14:cf: d1:e3:4b:b9:ae:54:f8:39:74:65:a6:91:57:88:1e: bf:b9:a6:83:80:60:ee:6d:8b:01:21:55:f6:15:0e: 13:68:f2:ce:db:76:7d:30:04:4e:fc:16:a8:37:8c: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B2:C7:39:A8:10:47:75:36:27:E4:C1:FF:6C:33:27:A1:6F:50:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/099a2c80-5c0e-3ad9-85bf-c6cc5bf58a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.88.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:26:29:b7:2c:33:d6:7c:bd:e0:09:37:49:20:10:23:86:ec: 0a:af:fb:9f:af:6c:e1:29:a2:7f:80:8d:ba:b4:9b:21:b7:68: 6b:64:69:98:e8:8c:32:0e:22:15:18:fe:eb:bb:44:7b:63:87: db:6c:b2:ad:94:63:7f:0d:a2:03:21:79:4d:81:4a:c7:9a:73: 1c:77:14:9d:39:53:94:8f:ca:19:50:91:f6:13:86:04:09:f9: d1:9b:85:c9:33:ba:cd:62:4f:fa:25:a9:67:c2:fc:3a:99:6e: b7:63:7b:2e:e2:f0:62:4f:f3:90:6d:4e:b3:f2:ad:d0:35:3d: 07:7d:c9:22:f4:99:fe:f1:ac:78:5e:60:82:70:84:69:8d:a0: 17:56:47:67:42:a7:ea:c8:78:55:2c:d8:79:78:c1:2f:97:75: 8d:12:59:18:e1:db:c3:41:72:91:fc:f2:c4:bd:5d:b8:a2:e4: 31:d5:44:78:a4:e9:c3:0b:1b:d8:90:e4:8f:05:f7:59:7c:49: 26:8f:8f:6a:58:b0:0c:90:5a:42:fa:47:b1:44:d2:88:81:93: 20:f0:f7:8a:54:cc:a3:68:29:01:57:77:96:e3:fb:f3:11:dd: c5:b2:05:7d:df:97:c6:1b:ac:84:3a:42:f9:58:6c:e1:33:50: e6:5e:1e:e0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdTe5hvwzyWizPKqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk NTJhNzFiZTAtMTUyYS00MTdjLTkxOTMtNWIyNmMyM2U5MTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoFbBbcFWyPCPZoZe0Y0bKoDzYAgeE9M2qDy Xj/oIOWIKBO7CeGT89NqXXb/e97MRIep43GayKhMyNE9SSvjIJcQQU41o7Sd1M9M 6ts2rM5iwzmuRGArcfizTSImqkQPLkaJ5TIkOj+/VHcKegM7crjCkW4vjkADfN2W dIi8LmpIjrXyIbML3w68sNsm5zE45SA8n8wLv8RSF+FW1fve9uallhDJnFJcMMAP l71czaXR5lqIBkX2vxIjTf/C985mUslocWWBGX7LCD1fK0L6FM/R40u5rlT4OXRl ppFXiB6/uaaDgGDubYsBIVX2FQ4TaPLO23Z9MARO/BaoN4xB4wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHGyxzmoEEd1Nifkwf9sMyehb1ATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDk5YTJjODAtNWMwZS0z YWQ5LTg1YmYtYzZjYzViZjU4YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAilgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOCYptywz1ny94Ak3SSAQI4bsCq/7n69s4Smif4CNurSbIbdoa2RpmOiM Mg4iFRj+67tEe2OH22yyrZRjfw2iAyF5TYFKx5pzHHcUnTlTlI/KGVCR9hOGBAn5 0ZuFyTO6zWJP+iWpZ8L8Oplut2N7LuLwYk/zkG1Os/Kt0DU9B33JIvSZ/vGseF5g gnCEaY2gF1ZHZ0Kn6sh4VSzYeXjBL5d1jRJZGOHbw0FykfzyxL1duKLkMdVEeKTp wwsb2JDkjwX3WXxJJo+PaliwDJBaQvpHsUTSiIGTIPD3ilTMo2gpAVd3luP78xHd xbIFfd+XxhushDpC+Vhs4TNQ5l4e4A== -----END CERTIFICATE-----Generated at Thu Nov 21 22:39:16 2024 by rpki-client on console-fra.rpki-client.org