$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa File: 72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa (raw, json) Hash identifier: VseiQsttQZXAgj1tZTsX6im4FTDTGetMfdHWUBR73kk= Subject key identifier: 2E:4B:B7:AB:5F:D2:DB:A9:64:2C:B2:78:BF:64:C3:58:21:60:9F:11 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584732891EFEF9677FC19497FC00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa Signing time: Fri 13 Sep 2024 05:46:39 +0000 ROA not before: Fri 13 Sep 2024 05:46:39 +0000 ROA not after: Thu 12 Dec 2024 06:46:39 +0000 asID: 16839 IP address blocks: 149.96.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:32:89:1e:fe:f9:67:7f:c1:94:97:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 13 05:46:39 2024 GMT Not After : Dec 12 06:46:39 2024 GMT Subject: CN=9950ff7f-8425-4d41-9ad7-4b3414b1bd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:da:43:77:21:24:86:27:cc:7c:60:ea:04: bf:67:f5:61:28:70:d8:38:8f:ba:2b:76:88:ea:bd: 17:3a:d2:32:91:23:92:b7:51:a7:7b:4a:7e:c1:3a: 6e:ef:23:f1:e4:bf:d9:7e:1d:1c:ba:7d:b7:0c:74: 3a:07:07:44:48:94:85:1b:c8:62:73:4c:15:b9:3c: 06:15:f8:2d:62:b0:fd:5f:e0:fa:2e:61:c5:2f:8c: 7e:f6:43:25:51:8c:ce:26:04:9c:f7:80:36:df:48: 04:dc:ad:ea:02:0f:df:4e:82:3e:f3:48:d1:26:69: 87:27:b6:73:23:0a:6d:c3:4a:56:bf:48:06:aa:50: b7:7c:a1:80:95:eb:3b:3a:32:46:5e:4a:e9:ad:20: 32:ec:a1:1a:f7:45:47:98:b1:f6:6b:fc:68:d3:d3: 3d:1c:44:c1:17:62:26:37:37:44:59:9d:52:18:5a: e5:c5:4f:6a:bb:ab:54:ca:10:1c:6a:22:54:14:fc: 08:55:04:15:c9:22:a9:bb:18:c7:d7:39:71:78:5e: 42:0d:af:6f:77:19:e1:fc:54:1d:75:64:b4:dd:b7: 3f:8c:b4:75:54:41:5e:f9:71:f1:73:41:4b:f6:cb: 78:4d:7b:a7:4c:4b:f2:b0:02:01:ef:65:33:bf:d4: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4B:B7:AB:5F:D2:DB:A9:64:2C:B2:78:BF:64:C3:58:21:60:9F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72d3976b-e6ee-3f2a-b7bd-5d115a912de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:f6:c4:cc:fb:e9:85:6f:be:30:8b:9a:8d:d5:15:98:e4:37: 9c:67:7e:b8:01:02:70:32:c8:cf:17:c5:f4:84:5c:a4:de:5b: ed:24:e4:ed:66:5c:3c:92:03:55:f3:6b:1b:ff:d6:b6:8c:90: c6:a2:8e:e9:22:bb:38:37:15:50:68:33:b8:10:73:55:43:8e: d9:8f:c5:60:a8:b7:54:5d:c2:40:68:9b:67:f1:29:e1:9e:82: ac:17:a6:79:29:cd:e8:f5:fc:5e:e3:3d:a0:27:9a:81:83:96: 33:c7:a5:a5:d5:be:6f:c3:4a:8a:3f:8c:06:d7:03:59:a7:84: f6:b9:ad:90:12:bf:e2:5c:8b:f3:e8:b9:87:5f:e0:8f:a0:f7: 9f:e3:07:db:8c:1d:35:6a:d2:c7:d4:df:9a:2f:a1:5f:65:0a: d2:e4:b2:aa:7e:89:50:ca:d7:75:6e:1e:79:c0:91:27:ab:44: 0e:16:4a:e7:f4:b6:91:f8:93:03:4e:89:62:cd:a4:86:66:ed: 58:fc:82:4b:be:9c:b8:81:31:b6:fd:ce:39:c1:18:d1:2d:9d: 0c:31:88:23:e1:d4:a3:32:36:87:9a:3c:bb:f0:7b:ae:56:89: a9:82:f7:e5:ff:b1:30:c1:3a:28:5d:a0:f5:eb:bd:e1:02:e7: c7:d0:bd:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcyiR7++Wd/wZSX/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkxMzA1NDYzOVoXDTI0MTIxMjA2NDYzOVowLzEtMCsGA1UEAxMk OTk1MGZmN2YtODQyNS00ZDQxLTlhZDctNGIzNDE0YjFiZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLLaQ3chJIYnzHxg6gS/Z/VhKHDYOI+6K3aI 6r0XOtIykSOSt1Gne0p+wTpu7yPx5L/Zfh0cun23DHQ6BwdESJSFG8hic0wVuTwG FfgtYrD9X+D6LmHFL4x+9kMlUYzOJgSc94A230gE3K3qAg/fToI+80jRJmmHJ7Zz Iwptw0pWv0gGqlC3fKGAles7OjJGXkrprSAy7KEa90VHmLH2a/xo09M9HETBF2Im NzdEWZ1SGFrlxU9qu6tUyhAcaiJUFPwIVQQVySKpuxjH1zlxeF5CDa9vdxnh/FQd dWS03bc/jLR1VEFe+XHxc0FL9st4TXunTEvysAIB72Uzv9RumwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5Lt6tf0tupZCyyeL9kw1ghYJ8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzJkMzk3NmItZTZlZS0z ZjJhLWI3YmQtNWQxMTVhOTEyZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKr2xMz76YVvvjCLmo3VFZjkN5xnfrgBAnAyyM8XxfSEXKTeW+0k5O1m XDySA1Xzaxv/1raMkMaijukiuzg3FVBoM7gQc1VDjtmPxWCot1RdwkBom2fxKeGe gqwXpnkpzej1/F7jPaAnmoGDljPHpaXVvm/DSoo/jAbXA1mnhPa5rZASv+Jci/Po uYdf4I+g95/jB9uMHTVq0sfU35ovoV9lCtLksqp+iVDK13VuHnnAkSerRA4WSuf0 tpH4kwNOiWLNpIZm7Vj8gku+nLiBMbb9zjnBGNEtnQwxiCPh1KMyNoeaPLvwe65W iamC9+X/sTDBOihdoPXrveEC58fQvaI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:50 2024 by rpki-client on console-ams.rpki-client.org