$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2f2f2794-783f-36e3-9f73-684bfd396087.roa File: 2f2f2794-783f-36e3-9f73-684bfd396087.roa (raw, json) Hash identifier: 7Lb0VUGD5ezQh3pRGlWkJ0v5nYb2xjoA23nWoLhV7nk= Subject key identifier: 92:B3:E8:4C:78:02:E4:CD:34:AE:94:A4:9C:27:F4:65:25:68:C4:7B Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E22190D88DD4E080D4540 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2f2f2794-783f-36e3-9f73-684bfd396087.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:22:19:0d:88:dd:4e:08:0d:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=2482fe12-5535-42d1-af3d-7ec31a7d1419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6a:a7:e9:6d:44:bf:49:3d:e3:e1:93:cb:28: cb:0d:45:fa:95:ef:de:d3:9f:bf:72:76:70:33:c4: 6e:de:35:8b:a1:fb:49:96:2a:3c:24:60:00:71:1c: 20:bc:9c:93:bd:1e:d7:a0:16:25:e0:41:f0:45:41: f4:49:4a:47:09:9a:5b:de:89:88:71:53:a6:0a:97: 0e:28:ca:8a:82:9b:5b:f3:97:92:10:3f:21:b6:11: db:c1:60:1a:48:cf:c7:c6:05:48:5e:da:6f:8e:a5: 12:f7:44:01:aa:1c:95:b8:bf:b1:99:6f:88:25:d5: ac:39:7b:8b:2a:d7:b5:28:ea:f2:8c:c5:8d:0b:78: 47:55:fa:63:1c:1b:66:57:22:ea:27:ce:fc:c5:4d: 0d:46:15:5d:4a:48:53:c8:de:4d:18:62:b4:90:56: 1f:61:05:ad:73:68:c8:d2:8f:26:d2:68:69:d3:57: fc:ea:33:3d:6c:63:6e:84:9c:a2:f1:95:43:d3:de: 41:1b:b8:ab:01:bd:bd:24:a3:cc:de:f0:39:06:db: 59:44:45:ac:d2:bf:56:b6:b6:6f:d2:31:d8:ec:41: 2e:37:b7:91:23:13:0c:da:8a:82:65:01:55:f4:31: d5:c7:af:57:ee:90:e4:7d:65:f8:c8:54:a2:7c:be: e3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B3:E8:4C:78:02:E4:CD:34:AE:94:A4:9C:27:F4:65:25:68:C4:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2f2f2794-783f-36e3-9f73-684bfd396087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e5:77:a0:71:e0:02:bf:c5:07:d9:0b:b2:e3:5a:9b:e0:87: a6:07:93:27:c8:a5:f3:88:b9:c5:b3:24:5a:f5:3d:92:89:fa: 85:38:38:48:13:80:c6:5d:47:d4:15:4e:67:5b:05:79:a3:4f: 06:93:23:92:19:26:c1:fa:5f:0c:c0:1d:56:30:07:fc:5a:e8: 47:e1:91:54:11:a7:7a:71:b1:31:4a:a9:e8:48:a1:13:5e:78: 5e:e6:36:73:ef:35:f2:cd:8c:03:c7:96:6d:5b:53:34:6c:28: 60:0f:21:1e:e9:eb:c4:f6:27:6e:74:1f:9c:19:de:97:d4:99: 8a:39:52:c6:89:fa:85:44:f1:21:6b:4f:3c:5e:d7:07:19:1c: e5:88:79:63:fb:e9:34:9b:69:82:94:75:01:b5:14:73:36:93: c7:57:e4:97:92:83:3f:3b:41:08:95:a3:02:54:a3:49:1e:a5: 56:c8:03:28:e1:73:a1:20:d6:e0:dc:1d:0a:dc:31:61:b7:3e: 00:be:78:b7:87:3c:d1:4c:a5:38:16:60:20:fb:82:8f:e0:e3: 1e:7f:02:e8:e2:0c:52:7e:a8:f7:51:6b:74:c0:eb:18:8c:b6: b4:a8:51:87:6d:42:1c:6c:68:08:05:5d:03:06:6b:d8:8e:41: 98:0d:69:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiIZDYjdTggNRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk MjQ4MmZlMTItNTUzNS00MmQxLWFmM2QtN2VjMzFhN2QxNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Gqn6W1Ev0k94+GTyyjLDUX6le/e05+/cnZw M8Ru3jWLoftJlio8JGAAcRwgvJyTvR7XoBYl4EHwRUH0SUpHCZpb3omIcVOmCpcO KMqKgptb85eSED8hthHbwWAaSM/HxgVIXtpvjqUS90QBqhyVuL+xmW+IJdWsOXuL Kte1KOryjMWNC3hHVfpjHBtmVyLqJ878xU0NRhVdSkhTyN5NGGK0kFYfYQWtc2jI 0o8m0mhp01f86jM9bGNuhJyi8ZVD095BG7irAb29JKPM3vA5BttZREWs0r9WtrZv 0jHY7EEuN7eRIxMM2oqCZQFV9DHVx69X7pDkfWX4yFSifL7j3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKz6Ex4AuTNNK6UpJwn9GUlaMR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMmYyZjI3OTQtNzgzZi0z NmUzLTlmNzMtNjg0YmZkMzk2MDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjld6Bx4AK/xQfZC7LjWpvgh6YHkyfIpfOIucWzJFr1PZKJ+oU4OEgT gMZdR9QVTmdbBXmjTwaTI5IZJsH6XwzAHVYwB/xa6EfhkVQRp3pxsTFKqehIoRNe eF7mNnPvNfLNjAPHlm1bUzRsKGAPIR7p68T2J250H5wZ3pfUmYo5UsaJ+oVE8SFr Tzxe1wcZHOWIeWP76TSbaYKUdQG1FHM2k8dX5JeSgz87QQiVowJUo0kepVbIAyjh c6Eg1uDcHQrcMWG3PgC+eLeHPNFMpTgWYCD7go/g4x5/AujiDFJ+qPdRa3TA6xiM trSoUYdtQhxsaAgFXQMGa9iOQZgNaZc= -----END CERTIFICATE-----Generated at Wed May 8 15:29:32 2024 by rpki-client on console-fra.rpki-client.org