$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0e3823b1-0050-343b-a162-3f3371f67a91.roa File: 0e3823b1-0050-343b-a162-3f3371f67a91.roa (raw, json) Hash identifier: Yqe1WXilIeZnZS7HRLLlHg5XC1zk0nE6+Z90Z2c3Pac= Subject key identifier: DC:4F:BB:89:70:6A:8C:2D:AE:12:F5:AC:48:FC:D9:56:D9:45:B7:BD Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E200CDB5618E99AD6E980 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0e3823b1-0050-343b-a162-3f3371f67a91.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:20:0c:db:56:18:e9:9a:d6:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=00de117c-4430-41de-a5d7-2f6228340137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:45:26:7d:ea:59:57:5f:19:46:c6:46:61:1d: 97:17:3e:de:4b:2f:ee:17:77:06:de:17:7b:5e:41: 87:33:2d:7a:36:35:1a:38:cf:d5:fe:17:fb:c9:67: fa:c8:e1:2a:79:2d:13:25:8c:b3:69:f1:74:6c:b1: 55:16:4c:72:ce:38:91:f5:20:f5:86:c1:1a:af:52: 22:e7:52:27:0b:fd:02:2c:d5:18:b3:cd:c5:0e:86: a8:02:2a:0b:fd:f3:0c:a5:8b:d9:da:0f:22:cc:0b: 34:09:d0:6d:4b:25:81:97:f5:20:5f:e7:ea:ef:52: ce:95:65:63:da:ba:39:94:99:42:5e:31:54:40:dd: 94:70:96:16:ee:f1:45:17:fd:da:26:6d:50:fa:70: bd:58:8e:69:c9:cd:a3:d6:14:84:04:26:ef:6f:65: 04:3f:40:e5:26:e6:80:47:ad:3a:0e:70:2c:19:19: fa:54:f8:5b:94:11:54:87:b5:0c:a6:c8:50:14:0a: 34:82:e2:f8:78:3a:94:ed:26:20:4c:4d:3b:01:da: fe:bb:cb:a1:b9:cf:de:5b:9f:a2:23:0d:9f:77:29: 00:f7:6d:cc:5e:9d:70:9d:d0:64:bd:6c:8c:3e:e5: f7:44:fd:78:72:0c:e1:93:d8:4d:e8:04:3c:8b:82: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:BB:89:70:6A:8C:2D:AE:12:F5:AC:48:FC:D9:56:D9:45:B7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0e3823b1-0050-343b-a162-3f3371f67a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:de:4d:02:c8:62:4c:4c:86:ec:9a:8e:87:09:fd:2f:01:76: 58:d4:b4:7b:ef:d4:f5:64:d7:00:17:40:86:85:fb:45:cb:53: ab:45:63:92:f7:8c:4d:0a:cb:2d:38:4f:ea:8b:29:08:d6:8e: 8c:98:00:9f:89:15:a7:7c:70:b4:6c:f5:f8:5c:b1:8e:98:9a: 60:e3:9f:d6:2f:75:e0:d2:fa:66:81:4e:46:19:5f:8f:83:2e: ec:e9:9b:f7:5e:e2:0d:a5:c5:fc:ba:d1:3e:5b:0c:7a:45:e8: 28:9b:ff:f2:63:6d:35:24:1b:91:3a:1f:8a:6d:f7:53:d3:dd: 2c:b0:f7:82:b1:9f:b5:68:77:84:3a:c3:cf:9f:02:c2:c6:b8: 07:d1:34:93:38:db:71:fb:3e:3f:7b:7b:d3:63:25:d8:e5:b2: f2:64:31:7d:ee:3b:d9:82:06:9d:1d:a6:cc:41:9e:d4:20:e2: c9:ef:5a:e7:f2:63:ba:ff:63:3a:b0:5c:74:a8:f9:47:fa:e0: 08:ff:47:b8:12:75:da:45:88:4b:e1:17:c7:32:92:1b:01:ad: 59:e5:e8:bf:98:ad:f3:d7:5d:66:90:c2:d2:04:34:b3:9e:8a: b4:23:60:92:84:84:0a:7c:ab:22:98:db:87:89:07:53:a2:98: c4:02:51:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiAM21YY6ZrW6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk MDBkZTExN2MtNDQzMC00MWRlLWE1ZDctMmY2MjI4MzQwMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0UmfepZV18ZRsZGYR2XFz7eSy/uF3cG3hd7 XkGHMy16NjUaOM/V/hf7yWf6yOEqeS0TJYyzafF0bLFVFkxyzjiR9SD1hsEar1Ii 51InC/0CLNUYs83FDoaoAioL/fMMpYvZ2g8izAs0CdBtSyWBl/UgX+fq71LOlWVj 2ro5lJlCXjFUQN2UcJYW7vFFF/3aJm1Q+nC9WI5pyc2j1hSEBCbvb2UEP0DlJuaA R606DnAsGRn6VPhblBFUh7UMpshQFAo0guL4eDqU7SYgTE07Adr+u8uhuc/eW5+i Iw2fdykA923MXp1wndBkvWyMPuX3RP14cgzhk9hN6AQ8i4LEbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxPu4lwaowtrhL1rEj82VbZRbe9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGUzODIzYjEtMDA1MC0z NDNiLWExNjItM2YzMzcxZjY3YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABreTQLIYkxMhuyajocJ/S8BdljUtHvv1PVk1wAXQIaF+0XLU6tFY5L3 jE0Kyy04T+qLKQjWjoyYAJ+JFad8cLRs9fhcsY6YmmDjn9YvdeDS+maBTkYZX4+D Luzpm/de4g2lxfy60T5bDHpF6Cib//JjbTUkG5E6H4pt91PT3Syw94Kxn7Vod4Q6 w8+fAsLGuAfRNJM423H7Pj97e9NjJdjlsvJkMX3uO9mCBp0dpsxBntQg4snvWufy Y7r/YzqwXHSo+Uf64Aj/R7gSddpFiEvhF8cykhsBrVnl6L+YrfPXXWaQwtIENLOe irQjYJKEhAp8qyKY24eJB1OimMQCUcE= -----END CERTIFICATE-----Generated at Wed May 8 02:19:35 2024 by rpki-client on console-ams.rpki-client.org