$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1da4e4c9-eaa5-3ed3-8160-6146ae54c581.roa File: 1da4e4c9-eaa5-3ed3-8160-6146ae54c581.roa (raw, json) Hash identifier: lL2x22vjeHUxe4ALxVIvYYbQfCF7bbIjwrM2FsaZfJA= Subject key identifier: 79:CE:C4:BD:12:0D:85:7E:E9:0B:C0:2F:CC:72:CD:05:20:AF:39:5A Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E1E6C852ACA4C9020FC00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1da4e4c9-eaa5-3ed3-8160-6146ae54c581.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1e:6c:85:2a:ca:4c:90:20:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=02bc0eb0-cc8f-40c2-946e-e00aaaedf169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:0c:99:bf:e8:1e:a6:b9:f9:a1:51:8f:35: b6:f8:3d:67:ff:26:96:c4:a1:8c:1e:21:ee:31:83: 35:c8:f9:d5:64:0b:e9:a7:22:79:a6:d9:9d:ad:6f: cd:bc:09:3b:bf:fa:7e:27:83:87:3d:39:a5:a9:08: 60:4c:5b:8e:b1:05:3e:ca:0f:e3:9d:4c:e0:17:01: 10:95:99:c9:ac:75:52:65:56:5b:ea:15:8b:0d:e7: 7f:c7:ef:7a:1f:6b:b6:dd:d4:8e:19:e6:39:a6:a7: d8:a9:95:98:7e:9e:e1:f5:6e:c7:69:d9:21:d9:b6: 5e:f2:77:c5:1a:28:b5:4d:d8:1a:b6:2b:66:90:d5: b5:52:d1:20:13:a5:36:21:43:aa:dd:33:7e:9a:f9: 56:1c:d6:ac:66:c9:26:c2:8d:68:84:a9:7d:2d:15: d4:65:fd:aa:35:f3:ec:2e:05:4b:b8:e2:d5:6c:5b: c4:5e:91:1b:99:78:c5:b7:fa:6e:f2:57:71:ca:ed: 4d:11:78:17:21:24:e9:a7:32:2f:90:31:6c:ee:c0: 35:c0:98:43:c1:94:b8:8a:4e:e4:86:b4:07:b4:69: e0:90:b2:93:22:2f:95:7c:81:eb:85:21:dd:a7:5d: 55:33:62:86:b5:17:14:b3:23:ca:6c:9e:61:dc:59: e4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CE:C4:BD:12:0D:85:7E:E9:0B:C0:2F:CC:72:CD:05:20:AF:39:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1da4e4c9-eaa5-3ed3-8160-6146ae54c581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c6:02:be:e1:a6:a6:8b:bb:25:7b:d9:96:11:77:ce:7f:d8: 40:d5:67:fd:bd:de:b6:ad:08:c5:8d:9d:9f:c2:6c:20:f4:42: dc:a0:f3:3a:18:34:a2:62:81:c7:40:f1:11:94:e6:6b:f8:ed: a3:15:18:90:8c:4f:4b:c9:5e:30:22:12:90:b9:0e:d0:36:8a: 64:4e:af:d4:40:db:14:cc:09:32:da:c1:fb:6f:d1:87:0f:1d: d4:75:d3:04:c7:b7:8f:9e:03:40:bd:01:fc:94:2a:4a:91:30: 66:c0:83:08:4d:37:db:56:3e:cd:38:73:86:fe:20:10:fc:06: 60:1c:a6:60:16:0e:db:39:76:99:1b:95:26:53:1d:2d:d1:4e: 01:21:2a:8e:05:3f:ba:82:d3:16:8c:cb:22:be:f8:93:3b:e4: 86:a8:03:70:1b:ff:b0:59:56:66:22:b5:9f:af:65:24:fd:b0: da:0f:ff:f5:fc:e1:cc:00:04:28:0a:d7:59:e4:f0:4e:1a:b8: d5:05:0f:48:e2:d1:0d:9c:77:aa:d3:23:9e:51:76:3f:50:e7: 12:15:9e:3e:37:e9:17:28:13:85:a6:91:dc:12:01:d9:ac:11: 29:20:e7:c0:80:c9:86:70:a9:e5:7f:78:af:43:63:54:fa:9d: c7:c0:37:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXh5shSrKTJAg/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk MDJiYzBlYjAtY2M4Zi00MGMyLTk0NmUtZTAwYWFhZWRmMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU0Mmb/oHqa5+aFRjzW2+D1n/yaWxKGMHiHu MYM1yPnVZAvppyJ5ptmdrW/NvAk7v/p+J4OHPTmlqQhgTFuOsQU+yg/jnUzgFwEQ lZnJrHVSZVZb6hWLDed/x+96H2u23dSOGeY5pqfYqZWYfp7h9W7Hadkh2bZe8nfF Gii1TdgatitmkNW1UtEgE6U2IUOq3TN+mvlWHNasZskmwo1ohKl9LRXUZf2qNfPs LgVLuOLVbFvEXpEbmXjFt/pu8ldxyu1NEXgXISTppzIvkDFs7sA1wJhDwZS4ik7k hrQHtGngkLKTIi+VfIHrhSHdp11VM2KGtRcUsyPKbJ5h3FnkHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnOxL0SDYV+6QvAL8xyzQUgrzlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMWRhNGU0YzktZWFhNS0z ZWQzLTgxNjAtNjE0NmFlNTRjNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvGAr7hpqaLuyV72ZYRd85/2EDVZ/293ratCMWNnZ/CbCD0Qtyg8zoY NKJigcdA8RGU5mv47aMVGJCMT0vJXjAiEpC5DtA2imROr9RA2xTMCTLawftv0YcP HdR10wTHt4+eA0C9AfyUKkqRMGbAgwhNN9tWPs04c4b+IBD8BmAcpmAWDts5dpkb lSZTHS3RTgEhKo4FP7qC0xaMyyK++JM75IaoA3Ab/7BZVmYitZ+vZST9sNoP//X8 4cwABCgK11nk8E4auNUFD0ji0Q2cd6rTI55Rdj9Q5xIVnj436RcoE4WmkdwSAdms ESkg58CAyYZwqeV/eK9DY1T6ncfAN5E= -----END CERTIFICATE-----Generated at Wed May 8 15:12:57 2024 by rpki-client on console-ams.rpki-client.org