$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa File: 249c943d-b89a-3ace-b703-d24eed8a0e72.roa (raw, json) Hash identifier: WHIYukfRAf/H94VTabG8nXpgMe9iX1U62a8GI5d5SNQ= Subject key identifier: 13:1D:CD:47:E3:33:68:8D:9D:39:4D:37:4D:67:8E:51:C7:F0:6E:59 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E222F4677940EC86A6080 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:22:2f:46:77:94:0e:c8:6a:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=4c2809d4-06e6-41d5-b4f8-6bc254d3d475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:22:20:e5:a5:e0:7b:80:d4:59:a8:3d:20: 62:d8:ac:a1:46:29:36:8c:a9:27:a4:61:e6:be:bd: 90:c2:c9:ef:18:ff:7a:eb:13:49:8d:1f:01:87:67: ea:35:fd:d8:c3:03:7e:7e:cd:dc:9b:79:4d:a6:45: a5:64:c5:b2:fe:42:84:57:8f:ee:e3:e1:1c:77:a1: 16:a3:b2:3b:29:f9:c3:a1:51:17:75:26:10:fc:60: ed:50:2e:e1:df:cc:78:70:df:08:e8:27:84:68:54: a9:00:f0:39:c3:70:c3:53:52:a7:20:d2:71:7c:d9: ce:29:6d:b7:5d:61:9c:3e:04:fa:f0:df:c7:7f:22: 0c:75:1e:77:fd:87:c9:73:1e:31:94:57:b8:c8:6c: 19:4c:e1:63:15:1f:3a:96:35:04:6d:34:d3:ce:21: 38:ba:cc:0d:b2:50:21:8f:62:0e:f7:9d:b3:45:5c: db:36:07:d4:63:4e:3d:1e:f0:e5:00:4f:9c:84:9f: 57:54:48:6c:d3:5b:a1:bd:2d:53:14:59:ea:a2:da: 07:f1:b6:3a:d5:c3:fb:73:4c:1a:9e:15:27:b2:a2: ff:74:b3:9f:3c:13:59:04:44:8e:d4:82:24:45:b2: 61:7d:57:69:9e:90:2b:23:48:4a:51:2d:32:30:d7: e1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1D:CD:47:E3:33:68:8D:9D:39:4D:37:4D:67:8E:51:C7:F0:6E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/249c943d-b89a-3ace-b703-d24eed8a0e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1e:b6:f8:8f:82:7b:e6:c0:92:9d:5e:a5:0a:ee:f7:3f:09: 39:d1:b6:bd:fd:1d:75:9e:09:45:42:68:3e:3a:10:79:fe:cd: ed:26:37:d5:12:33:b7:1e:02:16:87:ef:c4:50:02:eb:a5:58: c4:5c:de:46:ef:ea:c0:37:35:d3:31:65:b6:47:a2:02:dd:d3: 9d:f2:32:b5:70:fc:7f:bd:42:0d:47:68:1b:b3:10:94:20:59: fb:f2:b8:41:4b:18:80:8a:a1:08:53:28:b3:ba:95:a4:4a:75: 16:1c:52:70:d4:c8:16:4b:22:1b:24:1c:e6:79:8b:23:da:4e: 66:bd:54:95:09:31:f8:e9:64:ca:1b:e6:96:35:4c:03:8d:a3: c5:1d:49:3f:34:74:a5:33:83:b8:66:09:d1:76:2e:96:5a:89: da:8e:48:22:11:66:55:91:81:62:10:94:5a:25:3a:ae:0c:7f: 94:55:f2:d0:9f:71:8c:db:3e:9d:72:da:8a:fe:b2:a2:6d:9d: bc:6a:94:b5:6e:c5:21:44:e4:ae:0c:9e:59:e9:d2:28:f8:67: 70:cd:0f:0f:89:65:d1:d6:74:13:e2:0a:6a:6e:2f:bd:a9:38: 59:6d:14:bd:24:18:7a:eb:d7:37:01:87:92:0c:2d:7f:75:a0: b5:69:5f:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiIvRneUDshqYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk NGMyODA5ZDQtMDZlNi00MWQ1LWI0ZjgtNmJjMjU0ZDNkNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6AiIOWl4HuA1FmoPSBi2KyhRik2jKknpGHm vr2QwsnvGP966xNJjR8Bh2fqNf3YwwN+fs3cm3lNpkWlZMWy/kKEV4/u4+Ecd6EW o7I7KfnDoVEXdSYQ/GDtUC7h38x4cN8I6CeEaFSpAPA5w3DDU1KnINJxfNnOKW23 XWGcPgT68N/HfyIMdR53/YfJcx4xlFe4yGwZTOFjFR86ljUEbTTTziE4uswNslAh j2IO952zRVzbNgfUY049HvDlAE+chJ9XVEhs01uhvS1TFFnqotoH8bY61cP7c0wa nhUnsqL/dLOfPBNZBESO1IIkRbJhfVdpnpArI0hKUS0yMNfh+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMdzUfjM2iNnTlNN01njlHH8G5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMjQ5Yzk0M2QtYjg5YS0z YWNlLWI3MDMtZDI0ZWVkOGEwZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwetviPgnvmwJKdXqUK7vc/CTnRtr39HXWeCUVCaD46EHn+ze0mN9US M7ceAhaH78RQAuulWMRc3kbv6sA3NdMxZbZHogLd053yMrVw/H+9Qg1HaBuzEJQg WfvyuEFLGICKoQhTKLO6laRKdRYcUnDUyBZLIhskHOZ5iyPaTma9VJUJMfjpZMob 5pY1TAONo8UdST80dKUzg7hmCdF2LpZaidqOSCIRZlWRgWIQlFolOq4Mf5RV8tCf cYzbPp1y2or+sqJtnbxqlLVuxSFE5K4Mnlnp0ij4Z3DNDw+JZdHWdBPiCmpuL72p OFltFL0kGHrr1zcBh5IMLX91oLVpX1k= -----END CERTIFICATE-----Generated at Wed May 8 15:12:57 2024 by rpki-client on console-ams.rpki-client.org