$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa File: 4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa (raw, json) Hash identifier: CMFZgVCrRTI3R2vdCHDbZf2t4EiRZ/qAw8v2Ul38PFk= Subject key identifier: 97:9C:FA:A7:2B:E6:35:7E:E5:5B:91:F3:91:18:92:04:78:2B:FF:F8 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E21AFE24EC47C71DD9900 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:21:af:e2:4e:c4:7c:71:dd:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=f508e0a8-4161-4dcf-9ad5-173af48da07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:ec:bc:b7:47:35:66:05:fc:af:cc:d0:35: bc:fb:6e:2e:5a:7d:46:60:fa:6d:42:cb:f9:11:13: 0a:c6:17:fd:73:cb:06:06:63:de:2e:ae:ff:30:1b: b0:96:a1:89:8d:d3:4a:ca:e2:fd:c7:ac:94:9c:45: 07:f8:11:13:f0:a4:e1:d3:6e:b6:09:0c:81:47:68: 64:17:c4:ec:4f:b5:1f:70:91:1a:3a:4e:bf:37:ef: ab:30:73:a8:09:d5:d6:fe:37:f8:70:ff:34:2d:e8: 2e:be:74:ed:67:06:51:c0:7c:4d:32:b9:fb:cf:04: 2c:c2:8e:a2:ed:e0:5b:b7:29:c5:af:d1:cd:7b:b5: 40:46:61:c5:51:dc:3b:f4:a9:a5:fb:a3:59:5a:77: a3:aa:6f:4d:25:c0:54:f5:2d:bd:c9:f1:1b:01:66: 5a:95:13:d8:5f:a3:f9:b2:05:d7:27:74:64:90:d3: 87:50:ab:f7:73:7f:d4:07:09:a4:01:17:4d:8b:6a: 4e:d7:cc:71:f4:64:df:07:50:e1:31:25:aa:d7:18: b5:9f:b4:a3:63:c9:0e:2f:c2:66:bf:1d:3c:14:15: bb:17:bf:93:1c:aa:6f:9d:75:6d:34:92:17:df:c1: a4:b9:2c:c6:c2:c9:a6:cb:a3:71:0f:71:5e:d6:67: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9C:FA:A7:2B:E6:35:7E:E5:5B:91:F3:91:18:92:04:78:2B:FF:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4a60ab49-41c8-3152-8f3d-f61eacfc307c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:44:e3:f7:23:ed:7c:4f:da:c4:a8:78:91:2e:e3:6b:3b:3f: ff:0a:8f:d9:66:44:06:51:f3:72:54:54:6a:a0:20:0f:57:1d: 8c:5c:91:f4:0c:7a:7d:fc:c1:a9:f4:95:85:17:02:c5:1d:91: 51:08:ed:91:9a:20:8a:00:fa:a1:1c:47:37:4f:eb:43:03:1e: 29:90:00:c6:0e:30:94:17:78:bb:58:45:b3:80:b6:68:d5:42: 08:b9:b8:c1:76:59:23:d3:1d:15:6a:16:c3:3a:89:5f:8d:b3: 86:db:b4:f2:8f:49:ed:46:bc:d9:5e:59:f3:9c:a6:bf:40:78: 2b:d0:6b:7f:17:af:41:27:b8:4f:41:7e:e8:15:b2:75:27:d2: 72:7b:3d:cb:16:90:0b:75:71:08:4a:a8:24:de:69:bb:a1:fc: 15:77:5b:ea:86:30:f4:14:94:1d:de:d4:b9:e5:cb:2c:be:35: d8:1c:dc:89:8b:a3:82:6f:1a:e0:bc:31:18:5d:39:b5:f8:09: 0d:12:01:9c:2d:07:9c:89:30:e8:b0:10:a9:34:0c:21:48:a4: 60:2a:af:00:9e:78:d2:52:15:ae:b7:80:e2:2c:17:61:41:45: 27:4b:9e:1c:6e:f6:b7:9f:9b:b6:78:7f:7a:2f:d7:c6:19:8b: f5:3a:23:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiGv4k7EfHHdmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk ZjUwOGUwYTgtNDE2MS00ZGNmLTlhZDUtMTczYWY0OGRhMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpvsvLdHNWYF/K/M0DW8+24uWn1GYPptQsv5 ERMKxhf9c8sGBmPeLq7/MBuwlqGJjdNKyuL9x6yUnEUH+BET8KTh0262CQyBR2hk F8TsT7UfcJEaOk6/N++rMHOoCdXW/jf4cP80LeguvnTtZwZRwHxNMrn7zwQswo6i 7eBbtynFr9HNe7VARmHFUdw79Kml+6NZWnejqm9NJcBU9S29yfEbAWZalRPYX6P5 sgXXJ3RkkNOHUKv3c3/UBwmkARdNi2pO18xx9GTfB1DhMSWq1xi1n7SjY8kOL8Jm vx08FBW7F7+THKpvnXVtNJIX38GkuSzGwsmmy6NxD3Fe1mcCxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJec+qcr5jV+5VuR85EYkgR4K//4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNGE2MGFiNDktNDFjOC0z MTUyLThmM2QtZjYxZWFjZmMzMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWAOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZE4/cj7XxP2sSoeJEu42s7P/8Kj9lmRAZR83JUVGqgIA9XHYxckfQM en38wan0lYUXAsUdkVEI7ZGaIIoA+qEcRzdP60MDHimQAMYOMJQXeLtYRbOAtmjV Qgi5uMF2WSPTHRVqFsM6iV+Ns4bbtPKPSe1GvNleWfOcpr9AeCvQa38Xr0EnuE9B fugVsnUn0nJ7PcsWkAt1cQhKqCTeabuh/BV3W+qGMPQUlB3e1Lnlyyy+Ndgc3ImL o4JvGuC8MRhdObX4CQ0SAZwtB5yJMOiwEKk0DCFIpGAqrwCeeNJSFa63gOIsF2FB RSdLnhxu9refm7Z4f3ov18YZi/U6IzQ= -----END CERTIFICATE-----Generated at Thu May 9 01:28:28 2024 by rpki-client on console-fra.rpki-client.org