$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6b71d542-b06d-321c-876e-970f10c838a9.roa File: 6b71d542-b06d-321c-876e-970f10c838a9.roa (raw, json) Hash identifier: vsNKPJ6G7mJ3/IA5KHrYtl6rK0+lqNZ56BNqsPEdtLE= Subject key identifier: 82:19:1C:2F:20:37:58:07:6E:63:75:DC:07:26:3C:37:75:DF:C1:ED Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E1EA2B21EA90974269E00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6b71d542-b06d-321c-876e-970f10c838a9.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1e:a2:b2:1e:a9:09:74:26:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=7a0e9ec6-765e-4f44-8182-1a524ee36a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:9f:98:1d:ba:a7:e7:59:87:c7:86:67:c0: 69:96:23:ca:d8:41:89:ea:e9:10:7a:03:4d:99:1f: 08:31:65:60:f2:73:2a:28:0c:c4:ed:5f:ba:f6:24: 9b:9a:d9:29:eb:b6:32:d7:cc:c2:71:02:5d:b1:84: 80:7d:f4:5d:dc:96:84:57:d9:da:72:44:f0:d7:41: f3:ac:cc:86:d7:01:c0:f6:59:08:5f:e2:9c:a8:c8: 3b:a4:70:1f:9e:55:60:67:d7:87:69:f4:4e:78:17: 9d:76:a6:68:31:2b:c8:43:75:f8:bb:38:a6:29:88: 46:b4:27:58:f1:41:e0:e0:c4:6f:c8:e6:42:aa:24: 7c:9c:8c:b6:80:46:9e:66:30:aa:e7:94:af:67:b4: a9:8c:3d:f4:9a:7b:26:8b:b6:6f:3a:49:77:f5:5c: 2a:35:a2:f5:47:6b:7d:2a:5e:ac:a4:c1:27:cf:3f: 60:e2:33:31:fa:1b:26:a7:7f:60:66:4a:9b:33:dc: e6:b6:e4:08:ef:09:73:ea:5f:4a:56:5a:ba:0c:0c: 38:30:e6:c8:52:de:bf:e4:eb:f3:b3:17:8d:06:e8: 2b:10:e1:fe:84:2e:e5:a4:4d:48:ea:aa:b3:1f:07: 5c:70:eb:a8:57:3e:8b:90:74:f5:83:26:af:88:ad: da:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:19:1C:2F:20:37:58:07:6E:63:75:DC:07:26:3C:37:75:DF:C1:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/6b71d542-b06d-321c-876e-970f10c838a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:09:6b:e7:f6:17:ee:04:00:c9:bf:0f:f2:74:f5:39:41:cc: 64:2d:9a:21:75:42:76:34:97:71:34:e8:7a:f1:b3:c5:c6:40: d0:f7:92:6f:f0:9b:34:40:e5:97:cc:75:9a:5c:b5:42:75:3f: fe:af:13:5f:0a:69:cd:ed:05:77:60:fd:9a:a2:2b:f5:0c:90: 39:1f:8b:38:06:5b:e5:bc:df:e4:c0:59:a7:24:df:ee:d9:f2: 5e:8d:48:6f:ab:9e:c7:04:af:7a:59:b1:cd:d2:90:a7:d9:0c: 3e:4f:23:e7:01:b7:e4:b5:be:c3:9c:e6:98:06:90:c9:53:c0: 80:cf:7e:26:38:f0:66:2d:0c:b7:cc:2a:7e:73:7c:fa:26:4a: 83:2c:b5:05:73:30:16:ad:3c:fe:26:de:9e:92:dc:7e:a3:c8: 41:2c:66:99:aa:b7:9d:1c:7c:0b:fc:b9:cd:a8:f3:a0:05:c3: b5:f4:06:be:1a:81:36:d2:f1:e3:b7:5c:20:6f:10:fa:e4:fd: 70:f7:77:2e:5d:9b:f8:78:cd:d0:de:35:86:36:a9:71:31:a7: 6a:dd:f4:5a:ae:9e:cf:3f:b0:5e:6b:45:ca:48:ae:eb:19:20: 59:37:76:f3:9a:6b:85:c1:d6:55:3a:70:f3:7b:3e:a5:61:38: 97:0d:ac:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXh6ish6pCXQmngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk N2EwZTllYzYtNzY1ZS00ZjQ0LTgxODItMWE1MjRlZTM2YTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwafmB26p+dZh8eGZ8BpliPK2EGJ6ukQegNN mR8IMWVg8nMqKAzE7V+69iSbmtkp67Yy18zCcQJdsYSAffRd3JaEV9nackTw10Hz rMyG1wHA9lkIX+KcqMg7pHAfnlVgZ9eHafROeBeddqZoMSvIQ3X4uzimKYhGtCdY 8UHg4MRvyOZCqiR8nIy2gEaeZjCq55SvZ7SpjD30mnsmi7ZvOkl39VwqNaL1R2t9 Kl6spMEnzz9g4jMx+hsmp39gZkqbM9zmtuQI7wlz6l9KVlq6DAw4MObIUt6/5Ovz sxeNBugrEOH+hC7lpE1I6qqzHwdccOuoVz6LkHT1gyaviK3aQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIZHC8gN1gHbmN13AcmPDd138HtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNmI3MWQ1NDItYjA2ZC0z MjFjLTg3NmUtOTcwZjEwYzgzOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMJa+f2F+4EAMm/D/J09TlBzGQtmiF1QnY0l3E06Hrxs8XGQND3km/w mzRA5ZfMdZpctUJ1P/6vE18Kac3tBXdg/ZqiK/UMkDkfizgGW+W83+TAWack3+7Z 8l6NSG+rnscEr3pZsc3SkKfZDD5PI+cBt+S1vsOc5pgGkMlTwIDPfiY48GYtDLfM Kn5zfPomSoMstQVzMBatPP4m3p6S3H6jyEEsZpmqt50cfAv8uc2o86AFw7X0Br4a gTbS8eO3XCBvEPrk/XD3dy5dm/h4zdDeNYY2qXExp2rd9Fquns8/sF5rRcpIrusZ IFk3dvOaa4XB1lU6cPN7PqVhOJcNrFI= -----END CERTIFICATE-----Generated at Wed May 8 22:48:49 2024 by rpki-client on console-ams.rpki-client.org