$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa File: 5f78b53d-576a-3370-855a-e2e24d4b4480.roa (raw, json) Hash identifier: 87vCmJjasZcE+XQap8aP1Sl89TvyRPu4ul8UMMlNQqo= Subject key identifier: 22:30:29:3B:B5:BE:DE:DC:D6:86:3C:22:69:FD:CB:C7:0A:72:4F:9C Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858473294D4CBBF50B1647A074980 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa Signing time: Fri 13 Sep 2024 06:10:15 +0000 ROA not before: Fri 13 Sep 2024 06:10:15 +0000 ROA not after: Thu 12 Dec 2024 07:10:15 +0000 asID: 16839 IP address blocks: 149.96.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:32:94:d4:cb:bf:50:b1:64:7a:07:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 13 06:10:15 2024 GMT Not After : Dec 12 07:10:15 2024 GMT Subject: CN=3ad3878a-d935-4cc2-8231-e0191b694470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:38:73:32:05:a2:e2:3a:d7:22:5d:89:2b: 96:56:54:40:02:1c:3a:7b:84:e0:5a:19:1f:fa:55: 13:32:24:44:60:a4:34:03:b1:1d:a7:08:6d:e4:5c: 16:0e:d9:d7:c7:65:f4:6e:71:6a:bb:13:bc:d2:28: fa:32:23:13:c7:b5:b3:01:8e:4e:34:ea:c9:c9:32: 39:99:19:c4:74:14:df:d0:d9:b6:c2:bb:2a:39:af: c3:37:6d:17:bc:d7:af:91:b3:38:08:2b:b5:cb:46: 96:8c:1c:f1:aa:93:f0:b9:2d:ef:ed:4f:58:68:31: e5:59:25:d7:4b:ff:91:d9:64:a7:78:46:f5:fa:fd: 6c:52:64:b0:1e:13:07:ed:57:b1:50:e9:f0:f0:d2: f3:40:f1:f2:46:11:bc:5c:0f:11:db:cb:7d:a9:58: 4a:59:a0:7b:85:c5:b0:82:3e:5a:0a:35:22:04:a9: 1f:4e:9e:16:8f:76:df:7f:6f:eb:99:5f:05:e4:35: a7:fc:cb:dc:3f:a3:da:f7:09:7d:ee:9b:a0:d9:71: eb:e6:5d:7a:37:77:cc:44:16:c0:24:d0:21:f5:e6: 4f:3a:a5:a2:e4:b0:62:af:47:f2:dd:d4:aa:3f:bd: 21:3d:a4:7b:27:65:8f:f6:65:50:35:be:15:46:47: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:30:29:3B:B5:BE:DE:DC:D6:86:3C:22:69:FD:CB:C7:0A:72:4F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5f78b53d-576a-3370-855a-e2e24d4b4480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a9:f1:5f:d9:c9:66:b5:ae:55:4a:7f:b4:fb:e4:db:52:f8: 92:e2:92:72:76:25:15:2c:93:c9:1e:3d:51:12:d9:86:75:70: de:6f:72:4c:a1:9a:33:5e:1c:37:73:43:7d:2c:2b:5a:fd:f6: 7d:3b:c2:f6:ca:65:0f:8c:9a:69:b7:f9:34:37:7f:e7:88:a6: c4:bc:7b:f7:fc:bd:66:84:88:2a:04:7d:85:2d:82:50:e4:c9: 37:09:99:b1:d1:84:1a:e4:70:c3:ab:91:63:29:30:a1:1a:ae: 90:72:1d:ed:88:fb:05:c5:ee:b6:70:9b:f8:fe:e0:28:57:03: f6:52:e1:6c:5a:02:12:bf:73:2d:07:57:1b:be:9e:6b:88:ea: 29:37:88:dd:67:cd:60:28:cc:53:ad:fc:4b:59:58:d7:83:d1: 0a:11:82:7a:ec:5e:31:2d:1d:c1:87:d8:ab:9e:92:09:dd:a2: e9:d4:9c:a0:d5:25:bf:ca:ef:c5:70:89:46:40:6d:a1:6e:b9: 40:30:52:c4:7f:40:2c:f8:85:e6:3a:1b:a4:ca:d0:ad:76:0d: 3b:9d:8f:1b:bd:8b:9a:cc:6a:45:62:2f:37:a8:8c:46:28:f1: a8:b0:c9:45:5c:ab:9a:4e:73:3d:55:ae:04:be:40:1b:29:62: f0:66:85:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcylNTLv1CxZHoHSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkxMzA2MTAxNVoXDTI0MTIxMjA3MTAxNVowLzEtMCsGA1UEAxMk M2FkMzg3OGEtZDkzNS00Y2MyLTgyMzEtZTAxOTFiNjk0NDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpo4czIFouI61yJdiSuWVlRAAhw6e4TgWhkf +lUTMiREYKQ0A7Edpwht5FwWDtnXx2X0bnFquxO80ij6MiMTx7WzAY5ONOrJyTI5 mRnEdBTf0Nm2wrsqOa/DN20XvNevkbM4CCu1y0aWjBzxqpPwuS3v7U9YaDHlWSXX S/+R2WSneEb1+v1sUmSwHhMH7VexUOnw8NLzQPHyRhG8XA8R28t9qVhKWaB7hcWw gj5aCjUiBKkfTp4Wj3bff2/rmV8F5DWn/MvcP6Pa9wl97pug2XHr5l16N3fMRBbA JNAh9eZPOqWi5LBir0fy3dSqP70hPaR7J2WP9mVQNb4VRkcVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIwKTu1vt7c1oY8Imn9y8cKck+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNWY3OGI1M2QtNTc2YS0z MzcwLTg1NWEtZTJlMjRkNGI0NDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2p8V/ZyWa1rlVKf7T75NtS+JLiknJ2JRUsk8kePVES2YZ1cN5vckyh mjNeHDdzQ30sK1r99n07wvbKZQ+Mmmm3+TQ3f+eIpsS8e/f8vWaEiCoEfYUtglDk yTcJmbHRhBrkcMOrkWMpMKEarpByHe2I+wXF7rZwm/j+4ChXA/ZS4WxaAhK/cy0H Vxu+nmuI6ik3iN1nzWAozFOt/EtZWNeD0QoRgnrsXjEtHcGH2KuekgndounUnKDV Jb/K78VwiUZAbaFuuUAwUsR/QCz4heY6G6TK0K12DTudjxu9i5rMakViLzeojEYo 8aiwyUVcq5pOcz1VrgS+QBspYvBmhbM= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:50 2024 by rpki-client on console-ams.rpki-client.org