$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa File: 542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa (raw, json) Hash identifier: IaiAWhS9qpzkUiUxS9kicqfEmmUc8MRCS5GEJafMSNA= Subject key identifier: B1:E6:A5:7D:BE:23:29:3E:72:88:1F:90:83:D2:C5:43:19:7E:DF:57 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285847328125CF3E184C8A28F91600 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa Signing time: Fri 13 Sep 2024 05:30:35 +0000 ROA not before: Fri 13 Sep 2024 05:30:35 +0000 ROA not after: Thu 12 Dec 2024 06:30:35 +0000 asID: 16839 IP address blocks: 149.96.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:32:81:25:cf:3e:18:4c:8a:28:f9:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 13 05:30:35 2024 GMT Not After : Dec 12 06:30:35 2024 GMT Subject: CN=5eec9a9c-03c8-4724-bf24-5c0ba1120c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:7f:03:be:be:6e:4d:1a:27:87:af:42:da: 6a:6b:56:62:c1:20:a7:72:a6:3d:b4:ee:02:6c:15: a1:15:be:bb:8c:c5:9f:eb:1a:ea:62:26:ee:db:ed: 0a:66:c3:d2:48:5c:38:fd:d8:0c:8b:a5:9e:0d:81: a2:7d:d5:2a:75:36:75:df:2e:fd:80:fe:87:0a:3f: 23:10:e9:4f:f6:49:b9:b6:b3:b6:36:51:d3:f1:61: 0c:8a:bd:a8:62:18:48:76:42:7f:64:74:ca:28:60: 8a:a8:04:91:17:de:e9:e2:72:51:8e:79:60:8f:d8: c4:7e:45:37:dc:75:f3:2a:a4:c5:02:e2:fd:20:81: 42:4b:76:c6:17:d8:db:e3:9c:ff:62:30:7c:d6:63: 86:c1:8c:f4:3e:91:15:61:be:51:12:89:0a:a4:1d: 64:2b:58:ed:ce:03:25:e4:97:07:ad:c0:59:a7:79: d0:20:18:c3:a6:98:80:27:71:00:f2:84:33:3f:06: 75:28:48:15:6d:eb:ac:12:58:5e:ed:f9:01:91:65: 39:5a:ec:df:be:e1:91:25:8e:53:c1:77:0c:79:a6: fd:c4:72:8f:4f:b6:15:12:0f:09:d6:b5:af:14:62: 83:95:00:ea:18:fd:72:af:67:32:ca:80:03:45:d2: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E6:A5:7D:BE:23:29:3E:72:88:1F:90:83:D2:C5:43:19:7E:DF:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/542b46b5-cadf-34d8-b7e4-0ce8f63d197e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:67:22:71:77:ac:88:3c:3d:15:2b:93:30:ce:51:e1:6f:5f: ea:4e:3b:e1:22:4b:5b:8f:9f:e0:cd:28:71:7c:c6:10:fd:80: da:b2:ce:77:8e:3e:2a:50:e6:44:fc:c0:ac:8a:ce:5c:ff:42: 91:c7:4d:1e:09:46:2b:d5:ac:f2:7a:51:db:31:4a:f8:d2:3f: 0a:b7:c7:04:0b:7a:80:6f:eb:ac:0c:28:3c:ef:14:ab:39:d2: 59:8c:52:bd:53:8f:04:05:c3:2f:af:df:0d:c2:7f:9a:47:c2: ca:8e:78:29:c4:e1:13:87:b8:44:bc:c3:0c:44:23:59:4c:a0: 21:ea:cc:15:0b:1f:7a:89:56:ac:c2:ae:fb:ed:f9:35:53:cf: 2b:d8:3f:cf:f1:2b:03:ba:0a:69:09:f8:fe:c9:35:3f:c8:f8: 22:4e:f0:71:d3:b3:10:02:b4:86:fb:ba:19:ca:51:22:c4:a0: 27:26:a3:cc:47:1c:49:cd:ab:2c:f5:84:62:37:55:98:85:65: 29:43:e7:2d:5d:3a:72:a1:a2:68:c9:80:43:0e:9f:cd:41:ed: 8d:45:39:02:58:2a:39:df:3f:a4:c1:74:d4:12:81:d7:06:59: c2:5a:10:8b:ea:a1:12:ce:18:83:33:18:c7:ba:d4:3c:ed:9b: 39:17:56:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcygSXPPhhMiij5FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkxMzA1MzAzNVoXDTI0MTIxMjA2MzAzNVowLzEtMCsGA1UEAxMk NWVlYzlhOWMtMDNjOC00NzI0LWJmMjQtNWMwYmExMTIwYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop1/A76+bk0aJ4evQtpqa1ZiwSCncqY9tO4C bBWhFb67jMWf6xrqYibu2+0KZsPSSFw4/dgMi6WeDYGifdUqdTZ13y79gP6HCj8j EOlP9km5trO2NlHT8WEMir2oYhhIdkJ/ZHTKKGCKqASRF97p4nJRjnlgj9jEfkU3 3HXzKqTFAuL9IIFCS3bGF9jb45z/YjB81mOGwYz0PpEVYb5REokKpB1kK1jtzgMl 5JcHrcBZp3nQIBjDppiAJ3EA8oQzPwZ1KEgVbeusElhe7fkBkWU5WuzfvuGRJY5T wXcMeab9xHKPT7YVEg8J1rWvFGKDlQDqGP1yr2cyyoADRdJqOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHmpX2+Iyk+cogfkIPSxUMZft9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNTQyYjQ2YjUtY2FkZi0z NGQ4LWI3ZTQtMGNlOGY2M2QxOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlnInF3rIg8PRUrkzDOUeFvX+pOO+EiS1uPn+DNKHF8xhD9gNqyzneO PipQ5kT8wKyKzlz/QpHHTR4JRivVrPJ6UdsxSvjSPwq3xwQLeoBv66wMKDzvFKs5 0lmMUr1TjwQFwy+v3w3Cf5pHwsqOeCnE4ROHuES8wwxEI1lMoCHqzBULH3qJVqzC rvvt+TVTzyvYP8/xKwO6CmkJ+P7JNT/I+CJO8HHTsxACtIb7uhnKUSLEoCcmo8xH HEnNqyz1hGI3VZiFZSlD5y1dOnKhomjJgEMOn81B7Y1FOQJYKjnfP6TBdNQSgdcG WcJaEIvqoRLOGIMzGMe61DztmzkXVuU= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:50 2024 by rpki-client on console-ams.rpki-client.org