$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa File: 08662a15-e04a-359b-8c07-283ea782a9b0.roa (raw, json) Hash identifier: YF3OeZUPyWRifRUNtpKspGDbJ0c6sWx8jiXcS6EXsFs= Subject key identifier: 5C:6C:8F:B5:01:8E:6E:E0:83:2D:F4:96:48:CD:70:5E:56:BA:7E:70 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285847600BA6AFC991413165D4C680 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 16839 IP address blocks: 149.96.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:a6:af:c9:91:41:31:65:d4:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=91d0e987-2a94-4f92-802b-5921a955fa88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a1:39:ee:19:23:47:9c:ab:10:43:dd:b5:71: 20:79:21:c3:d0:65:cf:89:ff:c5:47:17:e2:08:60: a8:c0:e9:66:22:17:61:f4:24:cd:bf:dd:f4:2c:b4: ab:57:25:65:a1:48:5c:11:59:17:76:f9:0b:bd:a1: d7:e2:6c:d9:ef:3d:3c:50:4a:e3:17:ae:11:98:7b: e2:59:6e:cc:03:78:62:6b:f8:45:8d:b1:55:34:ee: b5:62:84:ff:60:09:d4:4a:12:46:9d:16:6e:a0:a9: eb:5d:50:6b:15:47:1a:66:bd:9d:02:85:1d:ad:84: a0:46:d2:03:db:63:d6:1c:e0:4f:77:5c:c4:ae:ba: 4f:c0:cb:04:2d:50:fd:00:d2:73:f5:bf:fb:35:d0: 2d:a8:b7:33:4f:82:8f:65:90:c3:fc:8f:ae:d9:9b: ba:f2:5b:00:97:6b:b6:16:ed:42:fd:4c:2c:a1:49: f7:a9:ca:d8:77:10:77:52:ff:8b:a1:3c:a5:3c:30: 62:c2:bb:d2:c7:e1:db:24:33:26:33:d0:7e:36:f4: 45:d5:a2:3b:f2:e2:49:39:71:1d:f8:db:33:38:c3: e8:b8:39:b5:69:b6:88:7b:56:71:8d:56:f9:c9:db: d7:85:69:52:da:99:db:73:e4:42:b7:7d:fb:26:ab: a8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6C:8F:B5:01:8E:6E:E0:83:2D:F4:96:48:CD:70:5E:56:BA:7E:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08662a15-e04a-359b-8c07-283ea782a9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d9:4f:47:6a:03:f6:d5:33:7f:af:38:35:0a:af:52:02:f1: 58:29:ba:2f:45:e7:3d:d5:5a:14:f3:f8:46:c7:92:94:c3:ac: e4:1e:cb:cd:2b:0c:c6:27:cb:fd:90:fa:a3:3c:46:bd:39:ac: 96:4a:b8:41:e7:d9:18:94:87:fd:09:95:a7:50:04:f3:d2:68: c1:5b:f8:fc:79:41:12:d8:52:2a:02:6d:81:15:d9:c3:8d:69: 4d:ce:8d:e9:29:73:15:3f:fe:3e:ba:30:87:35:b7:a0:7f:85: af:96:bf:f7:e0:2a:f7:c2:f6:fe:32:59:87:1e:b2:bd:e2:d7: 69:9e:92:f2:a7:c3:8c:e7:cc:84:0f:fa:d5:27:bb:f1:4e:51: a2:f4:3f:fa:f9:8d:aa:e8:cc:82:15:cc:02:73:c1:a5:9d:40: 4b:48:98:2c:28:e4:79:65:b7:ff:6f:3c:73:ae:d7:bd:b0:af: 5d:f8:56:9a:0a:da:70:8a:24:83:69:a9:dd:5a:4d:10:50:11: 74:79:ee:e2:b5:26:cf:a0:0e:85:ed:7c:22:40:67:8e:47:d7: 49:9f:d0:dc:ca:92:d7:87:4f:f6:88:6e:d6:56:72:12:87:05: 74:60:d6:70:64:12:fa:6f:c2:22:4f:6c:d2:54:bf:cf:b2:7d: 59:fe:80:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6avyZFBMWXUxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OTFkMGU5ODctMmE5NC00ZjkyLTgwMmItNTkyMWE5NTVmYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KE57hkjR5yrEEPdtXEgeSHD0GXPif/FRxfi CGCowOlmIhdh9CTNv930LLSrVyVloUhcEVkXdvkLvaHX4mzZ7z08UErjF64RmHvi WW7MA3hia/hFjbFVNO61YoT/YAnUShJGnRZuoKnrXVBrFUcaZr2dAoUdrYSgRtID 22PWHOBPd1zErrpPwMsELVD9ANJz9b/7NdAtqLczT4KPZZDD/I+u2Zu68lsAl2u2 Fu1C/UwsoUn3qcrYdxB3Uv+LoTylPDBiwrvSx+HbJDMmM9B+NvRF1aI78uJJOXEd +NszOMPouDm1abaIe1ZxjVb5ydvXhWlS2pnbc+RCt337JquoGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxsj7UBjm7ggy30lkjNcF5Wun5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDg2NjJhMTUtZTA0YS0z NTliLThjMDctMjgzZWE3ODJhOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHZT0dqA/bVM3+vODUKr1IC8Vgpui9F5z3VWhTz+EbHkpTDrOQey80r DMYny/2Q+qM8Rr05rJZKuEHn2RiUh/0JladQBPPSaMFb+Px5QRLYUioCbYEV2cON aU3OjekpcxU//j66MIc1t6B/ha+Wv/fgKvfC9v4yWYcesr3i12mekvKnw4znzIQP +tUnu/FOUaL0P/r5jarozIIVzAJzwaWdQEtImCwo5Hllt/9vPHOu172wr134VpoK 2nCKJINpqd1aTRBQEXR57uK1Js+gDoXtfCJAZ45H10mf0NzKkteHT/aIbtZWchKH BXRg1nBkEvpvwiJPbNJUv8+yfVn+gKQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:06 2024 by rpki-client on console-fra.rpki-client.org