$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/12f600f9-93ef-39b4-be5e-2daab2b96860.roa File: 12f600f9-93ef-39b4-be5e-2daab2b96860.roa (raw, json) Hash identifier: 69UZbKNLzFNxXQgTqaLgQsVv875vDDq7l4cDb5nGfQ4= Subject key identifier: 5B:A2:DE:F8:A8:B5:B9:3B:29:98:71:93:42:3C:83:F0:2E:DF:21:B1 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E1F8ABD9A096FE4EB2480 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/12f600f9-93ef-39b4-be5e-2daab2b96860.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1f:8a:bd:9a:09:6f:e4:eb:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=ca026854-cfae-4c98-8230-c441a412efa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:19:e4:26:90:e5:54:4b:10:d4:5f:72:a3:a6: 0d:3a:72:91:16:5a:0e:ee:3b:0f:94:66:b5:5b:cf: 3c:ac:30:eb:9c:98:5a:78:9f:7c:c0:37:89:84:10: 79:57:10:84:03:bd:de:d9:63:1a:e3:be:b7:76:89: 32:d3:9f:bb:96:ea:5b:72:c9:13:35:71:aa:66:d1: 14:f8:3d:07:48:18:76:f2:8c:f4:6a:75:ee:d0:66: da:09:12:1d:31:20:51:86:16:51:38:37:8b:6e:34: f8:9b:7c:18:59:90:70:25:5f:81:9c:03:f2:37:a4: 4b:95:8c:09:df:cf:70:6b:1a:df:b4:08:aa:f5:ce: 77:91:23:d6:8e:5e:2b:b9:e2:3b:0f:95:92:38:64: ee:39:99:b7:3d:45:f4:1e:9e:f4:42:46:69:0b:8d: 43:47:cc:26:8a:cb:ca:78:fe:ab:25:2c:8b:b3:1f: 71:23:7d:e0:63:b7:d1:36:64:2e:5c:a1:1f:17:c6: 2c:7f:07:41:5e:0f:a9:71:29:e2:7a:29:f1:c8:25: df:66:52:6d:4a:8f:0f:87:e4:24:46:8a:aa:c2:1e: 74:97:74:14:e2:1a:bb:39:bb:1c:3f:f3:43:8c:4c: 31:1c:4b:67:d4:14:7b:24:65:c9:4b:fb:4f:e9:72: dd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A2:DE:F8:A8:B5:B9:3B:29:98:71:93:42:3C:83:F0:2E:DF:21:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/12f600f9-93ef-39b4-be5e-2daab2b96860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:73:1d:9c:38:5e:7e:85:17:65:05:38:12:72:3c:90:01:82: f3:79:eb:40:63:d2:a5:23:55:f7:60:76:c6:d2:e0:e0:31:0a: 4b:f7:f0:c2:aa:28:48:20:b2:bb:89:00:b3:56:e8:92:bc:7a: 1e:56:6e:35:2d:1d:88:29:5d:e2:5d:7b:50:e5:85:1b:6f:78: 1a:9f:ff:f0:23:f8:11:f7:83:01:91:05:45:e5:de:ab:bd:d4: 0b:7f:13:89:ea:2c:31:88:10:66:c4:75:37:04:fb:93:15:07: 16:b8:66:38:c1:e4:d7:20:93:72:3b:a5:fb:4f:68:98:71:3a: 3a:79:aa:01:21:bc:8e:29:67:63:89:38:c4:c8:c4:b3:bb:d3: 6a:80:df:1e:49:cd:9a:fb:aa:06:d8:bf:83:e6:97:ee:af:a8: 63:a1:5f:2e:cc:4d:1c:89:50:9a:da:c5:e3:e5:a8:24:d5:d7: 01:3a:f9:21:41:d9:e0:fd:56:db:78:ee:25:29:f4:ca:f0:ab: 14:56:e6:2d:4d:a9:fe:eb:70:4d:d5:8a:e3:4c:ab:c3:0a:c0: 2b:d8:13:a9:7b:f1:f0:f6:91:cd:06:34:d3:03:52:1b:30:2b: d8:73:3d:d1:18:10:7c:c5:8e:b5:34:88:8b:a5:46:fa:cb:d0: 8e:26:37:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXh+KvZoJb+TrJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk Y2EwMjY4NTQtY2ZhZS00Yzk4LTgyMzAtYzQ0MWE0MTJlZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRnkJpDlVEsQ1F9yo6YNOnKRFloO7jsPlGa1 W888rDDrnJhaeJ98wDeJhBB5VxCEA73e2WMa4763doky05+7lupbcskTNXGqZtEU +D0HSBh28oz0anXu0GbaCRIdMSBRhhZRODeLbjT4m3wYWZBwJV+BnAPyN6RLlYwJ 389waxrftAiq9c53kSPWjl4rueI7D5WSOGTuOZm3PUX0Hp70QkZpC41DR8wmisvK eP6rJSyLsx9xI33gY7fRNmQuXKEfF8YsfwdBXg+pcSnieinxyCXfZlJtSo8Ph+Qk Roqqwh50l3QU4hq7ObscP/NDjEwxHEtn1BR7JGXJS/tP6XLd9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFui3viotbk7KZhxk0I8g/Au3yGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMTJmNjAwZjktOTNlZi0z OWI0LWJlNWUtMmRhYWIyYjk2ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJzHZw4Xn6FF2UFOBJyPJABgvN560Bj0qUjVfdgdsbS4OAxCkv38MKq KEggsruJALNW6JK8eh5WbjUtHYgpXeJde1DlhRtveBqf//Aj+BH3gwGRBUXl3qu9 1At/E4nqLDGIEGbEdTcE+5MVBxa4ZjjB5Ncgk3I7pftPaJhxOjp5qgEhvI4pZ2OJ OMTIxLO702qA3x5JzZr7qgbYv4Pml+6vqGOhXy7MTRyJUJraxePlqCTV1wE6+SFB 2eD9Vtt47iUp9MrwqxRW5i1Nqf7rcE3ViuNMq8MKwCvYE6l78fD2kc0GNNMDUhsw K9hzPdEYEHzFjrU0iIulRvrL0I4mN9Y= -----END CERTIFICATE-----Generated at Wed May 8 21:06:09 2024 by rpki-client on console-fra.rpki-client.org