$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa File: 0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa (raw, json) Hash identifier: 17KQDeLEitLdsCf4VyQv2WgEmQRcDHOhmu7gz0LygiQ= Subject key identifier: F9:48:82:E9:1A:E1:1A:3D:8D:BD:6D:50:62:C1:21:93:0D:39:2A:47 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E201D19DB93F163B64680 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 199.91.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:20:1d:19:db:93:f1:63:b6:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=8b908ae0-9d90-4cc8-9dc4-7463410cc1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:0c:d5:a1:2d:25:ce:aa:58:c5:f1:7c:c7: 0e:0f:cf:cf:26:05:ac:05:4b:32:f1:da:cb:d7:d5: 2f:d6:96:c2:2e:5a:4c:31:65:7e:e1:5a:69:b1:9e: 17:a2:d0:cc:82:ed:ed:e1:77:78:5f:4e:36:c1:1c: f5:bb:15:de:70:ea:82:ff:86:27:ee:a6:d1:07:28: 68:e6:b9:ee:88:4e:ad:40:2c:88:3d:1b:ca:b7:e3: 63:c2:2c:03:b6:64:38:4e:04:a7:a3:f8:e1:9b:43: 65:dd:e4:23:ae:1a:79:63:aa:fe:c4:c6:06:9d:76: bc:03:7f:d9:ca:72:fb:a6:c0:5a:bd:bb:07:3f:07: 49:4b:7d:81:8e:bd:00:ed:4b:a0:9a:15:10:09:3b: d2:7d:29:57:38:d6:34:c9:9b:f8:3f:c1:c4:5b:c9: 44:a8:f2:eb:16:1a:1a:04:2e:20:f2:5f:58:c9:f7: bb:40:cc:d6:88:5e:4b:cd:37:c5:e1:d8:69:7b:c5: 7d:bb:a8:91:05:9a:b8:44:f0:ba:a4:03:91:5c:95: 33:b9:a4:7b:79:95:ef:ca:55:8e:c6:b0:8d:ab:35: 9f:a4:5b:3b:d9:fb:47:e0:29:ca:c6:04:9a:cd:c2: 83:d2:d6:cb:d5:9e:23:6a:ef:5c:34:ee:8b:81:25: 67:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:48:82:E9:1A:E1:1A:3D:8D:BD:6D:50:62:C1:21:93:0D:39:2A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0ad04e97-51ef-39b2-a90e-798f8e45c4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1c:89:31:4b:90:dd:33:c5:63:64:37:d0:8c:c7:b7:ad:f4: 7e:b1:cf:55:c9:bd:8a:18:1b:e3:56:4d:d8:2f:de:e2:99:27: 39:00:4a:23:ff:62:28:68:d7:b0:8e:65:f0:ee:67:c7:01:c5: e5:9f:fd:ca:3a:0c:bc:9d:9c:be:31:52:4f:f3:01:40:8e:ca: fd:10:d2:4f:1f:a9:68:03:a3:13:86:12:a9:85:e1:d1:4f:16: 3f:62:66:c2:6b:5e:95:bd:48:ee:d8:82:35:ca:d5:4e:bd:28: d6:ec:9e:5e:a1:e9:bd:ca:eb:3c:9b:e1:da:79:26:41:a6:9a: 37:ee:56:35:3e:46:1c:11:1e:9c:e0:cd:fd:71:9c:1c:b1:d3: 5a:91:20:53:53:75:5c:09:c5:22:c4:ed:49:21:4b:3f:49:65: 49:b3:dc:b6:4e:88:ba:1f:39:45:15:ef:d6:1d:a8:11:dc:1f: f2:82:42:7a:ee:86:e9:bf:18:c9:ed:18:4a:57:f5:82:b5:a6: c5:c9:e5:25:c5:bc:15:25:dc:55:d7:c1:28:7e:78:9c:0e:1d: d0:92:53:df:39:45:58:e0:e4:55:0e:df:e6:a9:27:b0:86:4f: d6:11:a8:b2:7b:7e:06:2f:a8:9a:b7:bf:55:fa:14:46:db:84: e9:d7:38:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiAdGduT8WO2RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk OGI5MDhhZTAtOWQ5MC00Y2M4LTlkYzQtNzQ2MzQxMGNjMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBQM1aEtJc6qWMXxfMcOD8/PJgWsBUsy8drL 19Uv1pbCLlpMMWV+4VppsZ4XotDMgu3t4Xd4X042wRz1uxXecOqC/4Yn7qbRByho 5rnuiE6tQCyIPRvKt+NjwiwDtmQ4TgSno/jhm0Nl3eQjrhp5Y6r+xMYGnXa8A3/Z ynL7psBavbsHPwdJS32Bjr0A7UugmhUQCTvSfSlXONY0yZv4P8HEW8lEqPLrFhoa BC4g8l9Yyfe7QMzWiF5LzTfF4dhpe8V9u6iRBZq4RPC6pAORXJUzuaR7eZXvylWO xrCNqzWfpFs72ftH4CnKxgSazcKD0tbL1Z4jau9cNO6LgSVniQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlIguka4Ro9jb1tUGLBIZMNOSpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGFkMDRlOTctNTFlZi0z OWIyLWE5MGUtNzk4ZjhlNDVjNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0ciTFLkN0zxWNkN9CMx7et9H6xz1XJvYoYG+NWTdgv3uKZJzkASiP/ Yiho17COZfDuZ8cBxeWf/co6DLydnL4xUk/zAUCOyv0Q0k8fqWgDoxOGEqmF4dFP Fj9iZsJrXpW9SO7YgjXK1U69KNbsnl6h6b3K6zyb4dp5JkGmmjfuVjU+RhwRHpzg zf1xnByx01qRIFNTdVwJxSLE7UkhSz9JZUmz3LZOiLofOUUV79YdqBHcH/KCQnru hum/GMntGEpX9YK1psXJ5SXFvBUl3FXXwSh+eJwOHdCSU985RVjg5FUO3+apJ7CG T9YRqLJ7fgYvqJq3v1X6FEbbhOnXOKc= -----END CERTIFICATE-----Generated at Thu May 9 01:28:28 2024 by rpki-client on console-fra.rpki-client.org