$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1aa8569a-f38f-338a-a366-6b3b66fea876.roa File: 1aa8569a-f38f-338a-a366-6b3b66fea876.roa (raw, json) Hash identifier: dk9YTrS/N/1ANMrkY+Tjt+fETmFnvDL4kalCqPK3NAM= Subject key identifier: EF:0F:BA:1B:38:8C:F7:07:8E:5D:25:20:5F:90:B6:03:C2:D3:18:32 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E1FCA2CF2C5F06D17F680 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1aa8569a-f38f-338a-a366-6b3b66fea876.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1f:ca:2c:f2:c5:f0:6d:17:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=1144fade-7cea-4291-8c61-b5fd55febf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:40:64:14:2c:1e:74:4a:39:e0:00:7a:35:9b: 65:a2:db:0e:0d:d3:28:05:7e:7d:45:fc:6b:a0:c6: 95:0a:1a:f7:63:e6:c1:26:60:97:17:ac:04:7a:8a: 56:07:fd:65:c0:04:47:98:13:8a:62:cc:06:6a:3f: 6a:b5:4f:90:60:c9:d5:50:9d:37:24:1e:0d:28:25: 83:05:26:4b:16:ca:01:85:6b:8f:2d:e0:51:85:b8: 3d:ae:23:10:3b:03:3b:73:38:38:91:bd:de:aa:81: 8b:56:cf:85:a5:69:59:cb:3a:2c:ce:fc:53:79:43: 34:4e:3b:1a:16:ab:14:fa:d4:ad:15:99:5b:97:14: 50:8a:e7:a5:1d:bb:4e:60:ac:3a:2f:7f:7d:35:f8: 36:1a:84:93:a4:f1:59:88:98:6f:2c:ae:47:f8:d1: 20:54:3f:5c:d1:7a:78:dd:dd:e5:08:f6:57:73:b4: 73:96:ab:57:f7:04:ce:67:f3:33:2e:57:2e:b7:a5: c0:ef:83:81:18:de:cc:21:f6:52:f8:d7:d8:db:24: 3a:31:b0:38:53:21:3e:f4:eb:8e:c8:2f:0e:c5:b7: 2d:f0:76:0f:f7:41:bd:b5:04:f4:1e:4d:72:98:51: 95:62:5e:3b:32:79:9a:47:0d:1d:05:6a:3f:4b:8a: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0F:BA:1B:38:8C:F7:07:8E:5D:25:20:5F:90:B6:03:C2:D3:18:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1aa8569a-f38f-338a-a366-6b3b66fea876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d2:d9:95:ff:92:43:7a:f8:f2:0e:89:4e:9d:04:47:90:4e: 6c:1a:2c:8f:61:13:e9:0b:32:ab:33:ff:97:77:2e:2c:4c:7a: 95:11:15:7b:25:e4:15:52:44:0d:aa:57:63:89:64:1b:70:1e: d4:2e:e9:2d:25:64:b6:38:8d:5b:80:a8:76:71:49:c3:2c:0b: 1f:bd:6b:3e:71:36:ec:5e:48:46:1a:31:04:05:ba:95:3d:ca: 74:14:bf:1c:1d:ff:67:e0:09:40:5e:44:a1:1a:11:29:41:3c: 9a:d1:f7:f6:3e:81:76:ce:80:56:6f:dd:63:f0:f9:a0:38:40: 8c:0e:6a:1d:58:6b:fc:fc:2e:2d:57:55:19:be:f6:2c:e0:58: 2e:99:7a:2a:23:94:c0:3f:c6:fe:f7:41:c4:40:cd:6d:06:f1: 93:62:b4:59:52:c5:ad:a4:98:1d:c7:79:12:8f:b4:5e:e5:78: ba:cf:82:50:30:51:36:64:45:6d:84:6b:f8:65:b9:ec:76:21: 5f:73:f3:54:d1:c4:78:4c:f1:95:bd:7a:3b:52:fc:54:90:72: 74:a6:32:0a:46:ff:3c:27:21:dc:ee:0b:43:21:18:49:15:cb: 6c:b8:de:a7:65:2f:94:e6:9d:5a:78:a5:fe:f1:a9:eb:08:6a: c2:1c:78:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXh/KLPLF8G0X9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk MTE0NGZhZGUtN2NlYS00MjkxLThjNjEtYjVmZDU1ZmViZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEBkFCwedEo54AB6NZtlotsODdMoBX59Rfxr oMaVChr3Y+bBJmCXF6wEeopWB/1lwARHmBOKYswGaj9qtU+QYMnVUJ03JB4NKCWD BSZLFsoBhWuPLeBRhbg9riMQOwM7czg4kb3eqoGLVs+FpWlZyzoszvxTeUM0Tjsa FqsU+tStFZlblxRQiuelHbtOYKw6L399Nfg2GoSTpPFZiJhvLK5H+NEgVD9c0Xp4 3d3lCPZXc7RzlqtX9wTOZ/MzLlcut6XA74OBGN7MIfZS+NfY2yQ6MbA4UyE+9OuO yC8Oxbct8HYP90G9tQT0Hk1ymFGVYl47MnmaRw0dBWo/S4q7QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8Puhs4jPcHjl0lIF+QtgPC0xgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMWFhODU2OWEtZjM4Zi0z MzhhLWEzNjYtNmIzYjY2ZmVhODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPS2ZX/kkN6+PIOiU6dBEeQTmwaLI9hE+kLMqsz/5d3LixMepURFXsl 5BVSRA2qV2OJZBtwHtQu6S0lZLY4jVuAqHZxScMsCx+9az5xNuxeSEYaMQQFupU9 ynQUvxwd/2fgCUBeRKEaESlBPJrR9/Y+gXbOgFZv3WPw+aA4QIwOah1Ya/z8Li1X VRm+9izgWC6ZeiojlMA/xv73QcRAzW0G8ZNitFlSxa2kmB3HeRKPtF7leLrPglAw UTZkRW2Ea/hluex2IV9z81TRxHhM8ZW9ejtS/FSQcnSmMgpG/zwnIdzuC0MhGEkV y2y43qdlL5TmnVp4pf7xqesIasIceDQ= -----END CERTIFICATE-----Generated at Wed May 8 02:19:35 2024 by rpki-client on console-ams.rpki-client.org