$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa File: 7405a99a-393f-3196-80ba-b4ad1406ad44.roa (raw, json) Hash identifier: O1kncSB3y217xd5ts0PsJmYdQBjHQM3dmWRU1TeF0Cg= Subject key identifier: 31:65:DC:C9:64:89:5E:56:C0:D5:5A:0C:39:BA:19:EB:ED:5C:11:C4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285844FE2ADB2434AA86D105655240 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa Signing time: Sat 24 Feb 2024 02:00:26 +0000 ROA not before: Sat 24 Feb 2024 02:00:26 +0000 ROA not after: Fri 24 May 2024 01:00:26 +0000 asID: 701 IP address blocks: 138.89.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fe:2a:db:24:34:aa:86:d1:05:65:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 24 02:00:26 2024 GMT Not After : May 24 01:00:26 2024 GMT Subject: CN=137de741-6bfb-4c9f-8b14-fc0e5ba7ffc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:23:cb:ae:cc:ff:e1:47:a0:15:14:3d:71: fc:c5:c4:92:c0:3c:f0:76:78:39:a0:ee:8f:4f:51: e2:37:f7:62:01:8b:50:30:1e:55:96:a3:2f:a5:5b: 25:ff:b6:05:d2:64:04:c0:e4:41:ea:c5:22:bf:65: f9:7d:ec:aa:ce:07:52:73:c6:46:21:62:4e:d2:92: 1e:9d:55:cb:93:02:cf:53:1b:5d:17:f9:98:6f:80: f4:ec:35:10:7d:19:f3:a1:4c:60:00:55:9a:67:ff: ae:33:72:bb:47:e5:37:69:9c:55:f4:cb:7d:ae:c5: f2:c6:1f:78:de:91:6b:8f:5d:a0:03:47:91:ad:f9: 68:69:aa:e9:a4:41:16:f6:6a:20:9d:ad:64:ce:d8: ac:6f:71:57:55:60:a4:56:c9:ba:2c:e2:8d:ca:0c: 00:45:7c:bc:b3:46:5a:a5:3e:fe:88:c7:eb:d8:46: e5:47:0b:13:45:bc:e2:cc:fd:25:25:c2:21:dc:8d: 99:20:ca:cc:38:d5:40:00:c0:58:8e:48:87:ab:64: f6:b3:8a:2e:77:b7:59:ed:9e:a5:c9:b5:a0:8a:05: 9b:2f:ea:02:a7:7f:1b:80:af:63:fe:af:4c:78:06: 69:34:5f:73:44:01:e3:c3:95:d8:20:a9:7d:9f:ee: c2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:65:DC:C9:64:89:5E:56:C0:D5:5A:0C:39:BA:19:EB:ED:5C:11:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 138.89.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0b:f5:46:f6:84:02:75:ff:48:41:74:bc:8e:a5:0a:de:95: a2:fa:53:f3:e9:8b:44:db:e0:55:6e:99:5c:ea:ee:45:b4:d8: b7:c8:a9:73:18:ac:69:66:b6:f2:c4:fd:fe:fa:23:c4:86:c1: 59:cf:99:fa:ec:c1:52:81:3c:ac:a3:29:0e:7e:0b:43:1c:fe: 4b:0e:8c:ab:49:a9:0f:7c:3e:7d:03:7d:3b:b0:3f:77:13:bb: f2:9b:35:6b:1c:d7:a7:26:9c:4b:f3:c7:25:51:65:02:29:e9: 00:a9:b8:f2:eb:48:fd:0f:55:b3:b0:3a:ba:80:0e:af:8e:34: db:ec:60:45:c6:9f:a6:9f:4c:17:28:eb:79:0c:e9:5b:ac:3c: 98:ba:c6:12:b5:90:16:9d:2f:0c:1c:6d:4a:6f:32:4c:f8:5b: a0:29:b3:bc:70:73:c3:ce:75:61:16:22:c5:a3:43:57:1e:b2: d8:d2:eb:39:d2:e9:86:c5:66:3d:00:bb:ce:76:53:bf:d4:26: 1b:c5:fe:ab:06:ec:fa:d3:ce:94:15:52:81:e9:70:b5:43:5d: 50:af:cb:ea:8a:7e:7a:5e:59:a9:6d:e1:f6:93:59:c5:5a:83: c6:62:7f:9f:f2:45:73:57:75:a1:b9:1c:92:a3:bc:f6:27:38: 60:d6:df:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET+KtskNKqG0QVlUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI0MDIyNDAyMDAyNloXDTI0MDUyNDAxMDAyNlowLzEtMCsGA1UEAxMk MTM3ZGU3NDEtNmJmYi00YzlmLThiMTQtZmMwZTViYTdmZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqcjy67M/+FHoBUUPXH8xcSSwDzwdng5oO6P T1HiN/diAYtQMB5VlqMvpVsl/7YF0mQEwORB6sUiv2X5feyqzgdSc8ZGIWJO0pIe nVXLkwLPUxtdF/mYb4D07DUQfRnzoUxgAFWaZ/+uM3K7R+U3aZxV9Mt9rsXyxh94 3pFrj12gA0eRrfloaarppEEW9mogna1kztisb3FXVWCkVsm6LOKNygwARXy8s0Za pT7+iMfr2EblRwsTRbzizP0lJcIh3I2ZIMrMONVAAMBYjkiHq2T2s4oud7dZ7Z6l ybWgigWbL+oCp38bgK9j/q9MeAZpNF9zRAHjw5XYIKl9n+7CxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFl3MlkiV5WwNVaDDm6GevtXBHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQwNWE5OWEtMzkzZi0z MTk2LTgwYmEtYjRhZDE0MDZhZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHilkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAML9Ub2hAJ1/0hBdLyOpQrelaL6U/Ppi0Tb4FVumVzq7kW02LfIqXMY rGlmtvLE/f76I8SGwVnPmfrswVKBPKyjKQ5+C0Mc/ksOjKtJqQ98Pn0DfTuwP3cT u/KbNWsc16cmnEvzxyVRZQIp6QCpuPLrSP0PVbOwOrqADq+ONNvsYEXGn6afTBco 63kM6VusPJi6xhK1kBadLwwcbUpvMkz4W6Aps7xwc8POdWEWIsWjQ1cestjS6znS 6YbFZj0Au852U7/UJhvF/qsG7PrTzpQVUoHpcLVDXVCvy+qKfnpeWalt4faTWcVa g8Zif5/yRXNXdaG5HJKjvPYnOGDW37Y= -----END CERTIFICATE-----Generated at Thu May 9 15:25:02 2024 by rpki-client on console-ams.rpki-client.org