$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/39435e5a-77b4-36dc-94b2-d5f33dd6d45b.roa File: 39435e5a-77b4-36dc-94b2-d5f33dd6d45b.roa (raw, json) Hash identifier: 4kmGDYLTL/RuCaFvQQEJuL83Oy4eHv0zIFfDMI99a6Q= Subject key identifier: 60:20:70:71:A4:5C:6D:A6:24:79:5C:97:09:8B:10:82:C3:0F:A5:DF Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E1FFD1C355B138C8C8040 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/39435e5a-77b4-36dc-94b2-d5f33dd6d45b.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1f:fd:1c:35:5b:13:8c:8c:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=dbfb2c38-d2e5-4eb0-8b50-ce2658ff43f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:6a:5e:89:ac:6b:70:b2:e6:08:67:a7:14: 48:fc:c4:ae:5b:f3:3d:97:2d:bd:83:bb:ef:15:76: e6:76:0f:85:a9:db:07:37:31:b1:b2:66:3f:67:e0: 42:24:b8:0c:c9:dd:60:b4:d6:48:0f:e3:22:c8:11: 4e:e6:ae:1c:8c:0b:f1:78:b1:4e:0a:5a:a2:dc:be: 90:13:43:c2:9c:88:e4:af:5f:ce:1e:52:b0:c1:21: d1:6f:b2:7c:7a:bb:cb:2c:2f:65:ad:63:61:17:ea: f9:22:6d:14:b6:50:aa:76:83:50:43:4b:e7:1f:cc: ce:0d:f8:25:65:a9:68:2b:4b:e0:9d:3a:5f:06:cb: 23:31:23:2b:59:9b:8f:b6:45:c5:53:3d:ce:8a:51: 63:58:dd:69:d4:54:d7:15:0e:a9:25:c1:90:0a:05: f4:3c:c3:6d:51:7d:8f:ef:ea:94:67:30:14:0a:b3: ef:01:8b:5a:a2:8e:b9:4a:00:d4:7d:32:24:b7:c7: 18:17:2b:50:57:72:24:7a:c6:b3:b4:a7:8b:9a:79: cb:d2:f6:a2:a3:de:9f:68:31:c5:8c:4a:6a:9c:43: b3:b1:cc:ea:14:e9:25:7c:ee:ad:d4:64:f3:2b:32: 28:36:b0:df:4d:6b:8b:29:5d:6e:fc:66:19:13:ef: 66:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:20:70:71:A4:5C:6D:A6:24:79:5C:97:09:8B:10:82:C3:0F:A5:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/39435e5a-77b4-36dc-94b2-d5f33dd6d45b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:be:08:5f:39:58:2d:75:9c:52:da:a5:cb:1b:5f:5b:e5:3f: e6:d3:3d:73:07:5a:da:1c:4e:db:e7:99:b2:ef:80:e3:f1:e7: 6e:eb:6d:a5:e4:0e:a7:55:6a:f4:97:36:b6:e7:13:0f:9f:51: b8:0e:f0:18:36:1d:7e:5f:c7:88:88:96:81:a5:c1:78:bb:16: 72:48:0c:cf:ad:a3:f0:7c:11:a2:7c:f9:81:e5:70:b1:8d:2c: a9:65:98:c9:19:92:df:b8:9b:b2:1f:97:a1:53:46:54:2d:d9: d6:42:c0:c2:99:5b:06:0e:8f:2e:8d:ea:91:48:21:26:e1:10: d7:c7:bb:f6:6c:33:58:19:e1:b6:e8:e9:4a:ea:9c:9e:2a:54: 43:3a:73:f7:a1:96:60:af:aa:f1:31:b3:63:e0:78:71:02:b8: 4a:53:9a:91:46:fa:91:e1:4a:1f:4f:79:a7:2d:0d:f5:4d:1c: ce:09:e5:2f:f0:7c:4d:73:f3:1b:ef:0b:09:47:e5:af:9f:0b: 51:cb:83:91:ca:55:9f:f3:e6:03:47:e1:ba:21:1d:8d:11:26: 4c:7d:6b:2a:07:7e:08:19:56:6b:4e:1b:24:b2:49:4b:db:a9: 22:93:04:bf:18:a9:3c:09:78:cd:58:9b:49:15:30:39:65:b9: 6c:7c:6d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXh/9HDVbE4yMgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk ZGJmYjJjMzgtZDJlNS00ZWIwLThiNTAtY2UyNjU4ZmY0M2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIRqXomsa3Cy5ghnpxRI/MSuW/M9ly29g7vv FXbmdg+FqdsHNzGxsmY/Z+BCJLgMyd1gtNZID+MiyBFO5q4cjAvxeLFOClqi3L6Q E0PCnIjkr1/OHlKwwSHRb7J8ervLLC9lrWNhF+r5Im0UtlCqdoNQQ0vnH8zODfgl ZaloK0vgnTpfBssjMSMrWZuPtkXFUz3OilFjWN1p1FTXFQ6pJcGQCgX0PMNtUX2P 7+qUZzAUCrPvAYtaoo65SgDUfTIkt8cYFytQV3IkesaztKeLmnnL0vaio96faDHF jEpqnEOzsczqFOklfO6t1GTzKzIoNrDfTWuLKV1u/GYZE+9mTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAgcHGkXG2mJHlclwmLEILDD6XfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMzk0MzVlNWEtNzdiNC0z NmRjLTk0YjItZDVmMzNkZDZkNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE++CF85WC11nFLapcsbX1vlP+bTPXMHWtocTtvnmbLvgOPx527rbaXk DqdVavSXNrbnEw+fUbgO8Bg2HX5fx4iIloGlwXi7FnJIDM+to/B8EaJ8+YHlcLGN LKllmMkZkt+4m7Ifl6FTRlQt2dZCwMKZWwYOjy6N6pFIISbhENfHu/ZsM1gZ4bbo 6UrqnJ4qVEM6c/ehlmCvqvExs2PgeHECuEpTmpFG+pHhSh9PeactDfVNHM4J5S/w fE1z8xvvCwlH5a+fC1HLg5HKVZ/z5gNH4bohHY0RJkx9ayoHfggZVmtOGySySUvb qSKTBL8YqTwJeM1Ym0kVMDlluWx8beA= -----END CERTIFICATE-----Generated at Wed May 8 23:45:24 2024 by rpki-client on console-fra.rpki-client.org