$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa File: 1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa (raw, json) Hash identifier: cpUY2ZNLb6InWJB+gUk8YBvqHwURVNEx/q7YhlFC4so= Subject key identifier: A2:CD:86:13:93:B2:11:A0:FB:E9:B2:3C:77:19:A6:2B:1E:30:AA:FD Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285847600BA113C080EABF6D5B4D00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 16839 IP address blocks: 149.96.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:a1:13:c0:80:ea:bf:6d:5b:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=7af0d972-00c5-459d-8acf-291cbe0f606e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a9:1c:e4:ac:2a:33:87:5f:92:b2:40:19:77: ab:fc:e1:41:5e:a9:9a:2a:d4:04:95:5b:e7:c6:b7: cb:f1:28:a6:8d:2c:b7:7a:57:80:a6:3c:28:b8:62: eb:50:d1:a8:c5:a6:88:01:b8:e4:10:19:5c:62:a6: 95:36:26:49:d6:e8:62:57:6f:ff:f9:32:b5:29:07: b0:04:fb:5d:8f:6f:cb:72:9f:32:90:4e:40:58:f9: f6:fb:38:22:cb:02:68:71:85:be:c9:03:84:18:6c: 5b:82:77:61:d6:09:22:44:c7:a8:00:97:cb:46:e2: 55:56:d9:2b:37:94:5a:63:b8:fa:75:0b:d4:ca:d4: a0:5e:c5:21:09:ad:a8:25:b0:32:99:d9:b0:c0:c4: 49:c5:0c:9a:88:fb:e5:68:d5:41:f2:a2:87:b2:bd: 49:56:8c:13:24:e0:ef:2f:61:f0:fa:88:3f:9a:a6: 3a:08:bc:1b:6e:20:f7:d8:5c:64:fd:81:5d:71:29: 15:90:5e:bc:96:94:a2:f5:e5:13:b7:38:c8:3b:32: 52:04:cb:f5:ad:6f:0d:5a:d6:f3:41:92:6c:63:6f: 7e:9d:2d:4e:4e:65:73:91:ad:84:db:37:ed:c1:89: ad:63:4b:c6:a3:95:78:d6:47:97:c2:03:75:22:4c: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CD:86:13:93:B2:11:A0:FB:E9:B2:3C:77:19:A6:2B:1E:30:AA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1341ff8e-369f-3db1-8e49-f7b98666c9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a2:aa:9d:68:b3:3b:0d:37:f8:7b:29:a6:26:e5:09:11:f1: 8a:6e:ab:1f:3d:97:bc:8c:8f:c4:b7:77:61:ba:53:e2:a0:2f: 75:6e:60:53:26:40:f9:9f:dc:5f:a9:ad:f3:78:e5:80:bc:a1: ec:b6:9f:4d:83:38:4f:d1:2c:07:9b:1b:f9:e7:51:fd:be:50: 20:13:33:c7:fa:3d:e6:2c:7d:8b:a2:b2:53:bb:48:4a:32:a2: b5:cb:89:a8:75:fe:44:94:83:54:94:39:a4:31:b5:98:08:a9: 24:b0:36:08:fd:df:4d:b7:95:b7:45:10:d1:61:7e:5f:6c:76: 91:fc:d4:d8:c6:db:3a:a2:c8:31:fd:65:d2:5c:bb:d1:0c:fd: 56:5d:9a:d3:94:24:90:04:58:3c:9d:95:5f:85:f3:3d:e5:94: 21:cc:1c:73:f6:1e:2a:d5:40:54:dd:eb:c8:66:7e:42:07:34: 0d:5d:c8:06:b6:d6:93:ed:97:bc:00:03:e8:10:69:6e:94:2d: 61:22:15:76:b2:f3:87:9d:b0:d0:c4:7a:22:f9:84:5e:42:11: 8f:11:86:ea:52:1f:1e:38:b0:b9:7a:9a:96:b0:a1:57:91:7b: 32:9f:4f:8a:0a:8f:a1:2f:64:6a:b0:bc:1e:b2:6a:8f:7b:d4: 20:bd:48:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6ETwIDqv21bTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk N2FmMGQ5NzItMDBjNS00NTlkLThhY2YtMjkxY2JlMGY2MDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKkc5KwqM4dfkrJAGXer/OFBXqmaKtQElVvn xrfL8SimjSy3eleApjwouGLrUNGoxaaIAbjkEBlcYqaVNiZJ1uhiV2//+TK1KQew BPtdj2/Lcp8ykE5AWPn2+zgiywJocYW+yQOEGGxbgndh1gkiRMeoAJfLRuJVVtkr N5RaY7j6dQvUytSgXsUhCa2oJbAymdmwwMRJxQyaiPvlaNVB8qKHsr1JVowTJODv L2Hw+og/mqY6CLwbbiD32Fxk/YFdcSkVkF68lpSi9eUTtzjIOzJSBMv1rW8NWtbz QZJsY29+nS1OTmVzka2E2zftwYmtY0vGo5V41keXwgN1IkxUKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLNhhOTshGg++myPHcZpiseMKr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMTM0MWZmOGUtMzY5Zi0z ZGIxLThlNDktZjdiOTg2NjZjOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyiqp1oszsNN/h7KaYm5QkR8Ypuqx89l7yMj8S3d2G6U+KgL3VuYFMm QPmf3F+prfN45YC8oey2n02DOE/RLAebG/nnUf2+UCATM8f6PeYsfYuislO7SEoy orXLiah1/kSUg1SUOaQxtZgIqSSwNgj93023lbdFENFhfl9sdpH81NjG2zqiyDH9 ZdJcu9EM/VZdmtOUJJAEWDydlV+F8z3llCHMHHP2HirVQFTd68hmfkIHNA1dyAa2 1pPtl7wAA+gQaW6ULWEiFXay84edsNDEeiL5hF5CEY8RhupSHx44sLl6mpawoVeR ezKfT4oKj6EvZGqwvB6yao971CC9SNc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:50 2024 by rpki-client on console-ams.rpki-client.org