$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa File: 3ccc2b69-3869-30a1-8033-735bd84893f6.roa (raw, json) Hash identifier: W45lAV6YpvZ5+O7n7pRxZcXedgwA392qtGDfPlGvZ2E= Subject key identifier: D0:17:96:6C:D5:D6:6F:4C:84:49:CE:28:4B:11:B0:5D:C1:51:8B:8E Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E20AB21FF6F3302820800 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 199.91.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:20:ab:21:ff:6f:33:02:82:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=f81214a1-866b-40c0-8ec6-f82fafe36945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:36:44:c2:2e:83:53:89:1e:ad:c3:ba:67: 12:bd:aa:82:79:8f:5c:00:14:db:71:11:5c:dc:60: 94:44:25:b9:ba:fe:7c:a7:57:05:c2:2c:3c:dd:32: 00:07:f3:e9:93:0a:23:9b:e1:3c:a8:b9:b5:e5:f4: 12:96:08:cb:7b:ba:9f:aa:d8:c3:d3:57:2f:1b:ba: 96:3a:5b:bf:6b:9e:3c:6d:f5:99:2c:57:c4:78:9d: 35:ee:31:6e:24:d0:b8:75:a0:a5:9d:be:8f:b4:f3: a9:d3:a2:b6:58:fa:99:22:a1:08:76:c3:4a:22:2d: d4:1a:5f:5d:a2:19:cb:49:8b:21:1c:d7:90:c8:aa: 16:a6:08:65:e8:4e:74:0c:35:4e:ab:e4:6a:ad:1e: a0:3d:24:88:6e:6c:3a:6e:64:6c:aa:b5:e1:39:ff: c2:8f:51:27:03:46:44:7b:bc:c7:95:65:06:03:43: 29:b4:95:2d:29:93:41:6d:c6:ec:f4:47:d8:ae:27: f4:1f:0d:8c:b3:cc:3e:a3:8b:7d:ee:ff:d9:3f:14: 72:08:24:ce:11:9b:f0:66:22:69:89:54:4d:92:6d: 5e:73:af:79:01:2b:98:d0:81:82:cf:a9:bd:82:3d: 6e:b7:b0:78:ee:6d:c0:ad:be:de:2b:a1:4c:46:49: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:17:96:6C:D5:D6:6F:4C:84:49:CE:28:4B:11:B0:5D:C1:51:8B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3ccc2b69-3869-30a1-8033-735bd84893f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f9:79:e4:80:bf:da:eb:f6:58:f0:ae:03:4c:c7:20:f4:a2: cd:23:62:08:3b:74:09:2d:b8:e4:21:bc:4a:90:2b:92:e4:c6: 37:5f:8e:f9:b1:7b:a3:84:19:bb:44:1e:87:46:d9:0f:2a:7c: 4a:28:96:9d:20:f3:44:c8:5d:70:01:73:9f:53:33:c7:a1:77: 36:67:a2:2f:27:b5:e6:da:d5:c4:fa:6b:ac:82:c8:6a:24:63: a9:53:78:83:16:b6:17:26:2e:47:91:54:7b:57:e5:ce:cd:26: 57:8c:07:e3:41:59:83:f5:86:24:4c:2c:82:1b:f3:fd:ea:9b: 32:96:a4:4e:c4:f5:b4:02:0f:31:e2:04:22:87:63:43:2c:cb: 54:73:59:fc:92:3b:86:f5:9d:51:67:4d:da:10:ad:4f:e0:b5: b1:21:45:9b:94:25:5d:fa:ce:e6:51:f6:d0:3d:9c:17:5b:4e: 8f:d0:e7:3d:ab:77:df:f3:04:90:2a:fc:ca:0f:5d:f4:ab:8a: 01:52:b5:b3:16:b3:82:68:61:ad:81:5f:90:8f:44:84:6f:89: df:1a:66:2c:a4:09:85:00:27:f7:5a:2e:6e:0a:24:6e:d8:5e: 56:f8:cc:24:d9:44:06:f4:cf:4c:47:3b:10:c9:6d:aa:8d:80: 4b:70:97:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiCrIf9vMwKCCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk ZjgxMjE0YTEtODY2Yi00MGMwLThlYzYtZjgyZmFmZTM2OTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprw2RMIug1OJHq3DumcSvaqCeY9cABTbcRFc 3GCURCW5uv58p1cFwiw83TIAB/Ppkwojm+E8qLm15fQSlgjLe7qfqtjD01cvG7qW Olu/a548bfWZLFfEeJ017jFuJNC4daClnb6PtPOp06K2WPqZIqEIdsNKIi3UGl9d ohnLSYshHNeQyKoWpghl6E50DDVOq+RqrR6gPSSIbmw6bmRsqrXhOf/Cj1EnA0ZE e7zHlWUGA0MptJUtKZNBbcbs9EfYrif0Hw2Ms8w+o4t97v/ZPxRyCCTOEZvwZiJp iVRNkm1ec695ASuY0IGCz6m9gj1ut7B47m3Arb7eK6FMRknIYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAXlmzV1m9MhEnOKEsRsF3BUYuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvM2NjYzJiNjktMzg2OS0z MGExLTgwMzMtNzM1YmQ4NDg5M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv5eeSAv9rr9ljwrgNMxyD0os0jYgg7dAktuOQhvEqQK5Lkxjdfjvmx e6OEGbtEHodG2Q8qfEoolp0g80TIXXABc59TM8ehdzZnoi8nteba1cT6a6yCyGok Y6lTeIMWthcmLkeRVHtX5c7NJleMB+NBWYP1hiRMLIIb8/3qmzKWpE7E9bQCDzHi BCKHY0Msy1RzWfySO4b1nVFnTdoQrU/gtbEhRZuUJV36zuZR9tA9nBdbTo/Q5z2r d9/zBJAq/MoPXfSrigFStbMWs4JoYa2BX5CPRIRvid8aZiykCYUAJ/daLm4KJG7Y Xlb4zCTZRAb0z0xHOxDJbaqNgEtwl+4= -----END CERTIFICATE-----Generated at Wed May 8 22:48:49 2024 by rpki-client on console-ams.rpki-client.org