$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/21467b2c-c52d-35fc-84c9-a899fa7472a5.roa File: 21467b2c-c52d-35fc-84c9-a899fa7472a5.roa (raw, json) Hash identifier: ZPwjMRS9dIyxcYNXr0txKLsZiFLQHPZnM++xv5WXafQ= Subject key identifier: 36:6F:EA:7B:DD:B3:D9:83:D3:70:31:B5:78:6D:9E:BD:C8:7D:16:E2 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E228350DF1062C53FAE00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/21467b2c-c52d-35fc-84c9-a899fa7472a5.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:22:83:50:df:10:62:c5:3f:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=1de608b3-6ee2-4da2-b628-7a0218ba1df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:c6:57:b7:40:e1:26:19:03:aa:72:79:c0: 2e:16:10:d8:35:57:12:3c:37:cb:6c:a9:4d:41:48: b0:d9:54:32:f2:b6:77:2a:c8:22:09:81:4c:5a:7a: 2c:54:59:5b:bd:63:de:f8:79:6f:17:62:ad:d4:cf: 2b:f0:00:a0:89:fe:ad:38:a5:85:0b:ed:77:b4:6a: 47:12:8e:f9:62:15:87:bf:bd:8b:d1:14:78:f3:40: 9a:f3:14:39:94:08:51:1d:9d:f1:44:a0:58:a0:e5: 90:e3:d9:dc:93:51:56:a6:b7:89:32:db:82:be:ee: 7c:9f:ca:92:7e:65:bd:ba:d1:40:ac:af:e8:ac:a4: bc:b0:5f:af:0a:fd:a5:0b:9d:dc:20:53:1f:8b:ed: f6:39:72:9c:e5:d6:58:04:a0:25:2f:c0:fd:b8:42: 96:65:87:2f:f2:e7:85:79:5a:cf:51:0e:05:73:59: 8f:a0:ab:ea:33:f1:df:ed:ae:74:1f:57:a0:a7:4b: 17:69:d5:a1:af:a6:80:17:1f:83:ff:b4:eb:38:9c: 89:c5:c2:3c:d6:5b:0b:77:ff:7f:f2:62:9d:d1:07: e8:e1:0d:04:86:6f:fb:71:de:ef:bc:c4:bb:fd:1b: 95:c9:b1:77:a6:e0:da:56:44:ee:b8:28:46:50:be: fe:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6F:EA:7B:DD:B3:D9:83:D3:70:31:B5:78:6D:9E:BD:C8:7D:16:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/21467b2c-c52d-35fc-84c9-a899fa7472a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:db:34:a8:ef:1f:af:7a:e8:b6:c1:0e:be:3d:4d:df:68:cd: 58:03:20:60:3d:88:6e:1b:60:98:3f:c5:1c:80:f9:e9:f1:72: d2:de:93:bc:d6:75:f4:c4:93:c8:f6:a9:94:e4:f7:4b:10:3d: 6d:58:51:25:cc:e3:bc:fd:8a:57:2f:a1:18:71:64:c4:d8:58: 00:e5:c1:ea:5b:39:94:69:cd:47:ab:d3:76:a9:54:08:76:1c: 4c:6a:9d:d2:db:b9:41:7f:9c:d5:e5:8b:3a:f3:48:81:fb:6e: 82:cc:02:f9:0e:f6:77:f9:e9:5d:ef:4d:43:6a:7c:e9:96:af: bd:7b:32:72:45:7e:b9:a7:41:8a:f4:09:61:1b:64:ef:15:fc: 06:b0:28:6e:f3:84:d9:79:41:4c:16:d2:33:bd:15:22:77:83: cf:e6:d7:c2:a5:f4:92:39:4e:87:9b:47:13:90:03:7a:84:77: 2e:8d:5a:92:58:09:26:4b:d6:90:52:12:d9:7b:4a:d6:d5:6d: 2b:7f:80:f6:4a:68:8c:78:0c:4c:20:dd:0b:88:83:04:98:2f: 4e:19:01:83:de:9c:26:2e:10:91:a4:6a:6d:e0:ad:c5:c3:47: c8:f6:b6:e3:2b:fe:fd:58:52:7c:d0:6a:e3:32:3b:c7:2e:dd: b7:ca:a2:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiKDUN8QYsU/rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk MWRlNjA4YjMtNmVlMi00ZGEyLWI2MjgtN2EwMjE4YmExZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIXGV7dA4SYZA6pyecAuFhDYNVcSPDfLbKlN QUiw2VQy8rZ3KsgiCYFMWnosVFlbvWPe+HlvF2Kt1M8r8ACgif6tOKWFC+13tGpH Eo75YhWHv72L0RR480Ca8xQ5lAhRHZ3xRKBYoOWQ49nck1FWpreJMtuCvu58n8qS fmW9utFArK/orKS8sF+vCv2lC53cIFMfi+32OXKc5dZYBKAlL8D9uEKWZYcv8ueF eVrPUQ4Fc1mPoKvqM/Hf7a50H1egp0sXadWhr6aAFx+D/7TrOJyJxcI81lsLd/9/ 8mKd0Qfo4Q0Ehm/7cd7vvMS7/RuVybF3puDaVkTuuChGUL7+lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZv6nvds9mD03AxtXhtnr3IfRbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMjE0NjdiMmMtYzUyZC0z NWZjLTg0YzktYTg5OWZhNzQ3MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzbNKjvH6966LbBDr49Td9ozVgDIGA9iG4bYJg/xRyA+enxctLek7zW dfTEk8j2qZTk90sQPW1YUSXM47z9ilcvoRhxZMTYWADlwepbOZRpzUer03apVAh2 HExqndLbuUF/nNXlizrzSIH7boLMAvkO9nf56V3vTUNqfOmWr717MnJFfrmnQYr0 CWEbZO8V/AawKG7zhNl5QUwW0jO9FSJ3g8/m18Kl9JI5ToebRxOQA3qEdy6NWpJY CSZL1pBSEtl7StbVbSt/gPZKaIx4DEwg3QuIgwSYL04ZAYPenCYuEJGkam3grcXD R8j2tuMr/v1YUnzQauMyO8cu3bfKogU= -----END CERTIFICATE-----Generated at Wed May 8 02:19:35 2024 by rpki-client on console-ams.rpki-client.org