$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/789e9384-70d6-372e-a9af-010d12dad22b.roa File: 789e9384-70d6-372e-a9af-010d12dad22b.roa (raw, json) Hash identifier: q2qZc5OzGigzLl+BjoiSxRR1V1MWZQuiCXvsuqbHG7A= Subject key identifier: A0:30:0C:B0:34:1A:20:0F:8D:75:F8:B9:35:3F:AB:96:96:1B:33:0F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E1EB6398BCEB17115C3C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/789e9384-70d6-372e-a9af-010d12dad22b.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1e:b6:39:8b:ce:b1:71:15:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=09fe5b53-7db6-46b8-bcfb-f2aaf4b21209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:06:03:09:60:0e:b2:cd:39:96:7d:93:65: b1:c4:16:c0:5c:3f:06:b2:bc:01:65:1b:35:ce:5d: 39:d6:36:26:60:51:d2:24:26:75:77:14:8a:18:57: e4:77:5e:90:30:7a:db:62:ac:f3:1c:54:f5:00:89: 8e:91:bd:40:51:42:2b:7e:ea:5d:2f:3e:06:41:49: 1b:dc:17:4f:74:b8:96:28:fb:bd:a2:04:04:9e:8a: 30:97:45:c6:3e:0c:50:03:07:05:e3:3f:59:dd:9e: 5c:0e:2d:3a:22:be:20:e3:05:7c:31:6a:5a:79:26: ac:0e:e9:c6:b7:c6:30:4c:22:b0:be:b6:82:dd:a2: f1:ec:af:5a:87:08:79:1f:c5:9f:15:e4:e2:b1:6f: 92:3f:08:60:f2:8e:8d:04:33:c4:da:0f:ac:cd:61: ef:e8:4c:25:91:ec:21:6d:f1:e9:6b:3a:4a:14:86: 67:db:9e:ec:55:33:2c:f6:c8:df:25:60:28:b5:6a: 32:d4:47:a6:d5:ce:e9:58:38:95:c4:85:eb:8e:ee: 3a:37:33:06:e7:89:83:51:e2:6b:2d:79:7d:7d:f6: 8d:ba:9e:cb:21:0a:13:00:3a:5e:c0:04:1a:89:43: d4:e4:bf:f0:25:04:e5:e6:83:6e:56:dd:44:55:6b: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:30:0C:B0:34:1A:20:0F:8D:75:F8:B9:35:3F:AB:96:96:1B:33:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/789e9384-70d6-372e-a9af-010d12dad22b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1c:3f:40:44:26:08:46:3f:e3:b2:68:cd:d0:6a:4c:51:37: 17:ca:f1:65:41:3c:c5:7a:35:18:3c:28:44:de:c3:6c:3b:14: 2a:1b:44:de:f7:73:06:f6:50:49:67:42:a1:70:3d:74:dc:3f: 91:e7:93:7a:84:74:d0:46:13:43:e2:b4:f2:4d:d0:86:9a:ee: d4:65:e4:e1:17:58:d0:e1:d6:1c:ef:71:36:3b:3b:16:3d:9f: 8d:f5:13:45:b7:9e:96:6f:e2:18:86:1b:93:42:34:c2:34:70: 6a:11:41:6d:42:ce:00:72:2a:af:60:bb:f8:9a:4a:6c:14:6b: d1:71:50:27:45:fa:4b:60:96:22:f3:82:46:07:6d:07:98:8b: 84:fd:f3:f9:ac:89:71:2a:f2:ca:b4:5c:34:11:ed:c8:ab:e1: 11:ae:c1:c2:f8:03:cb:2d:b7:ab:a8:8d:37:1e:ef:9f:9d:5d: 3e:77:0e:07:24:76:b6:2b:52:3d:c0:e5:13:54:1f:ea:be:b8: 5e:74:63:d5:56:48:9b:ca:b0:0b:d0:7a:26:ad:20:fa:c3:ea: cb:5f:99:25:59:eb:93:aa:d5:56:c4:cc:1d:1b:ea:f7:a2:4f: d6:a9:ee:d0:64:35:4b:91:9d:b2:83:d7:80:49:98:e4:5a:8b: ca:85:eb:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXh62OYvOsXEVw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk MDlmZTViNTMtN2RiNi00NmI4LWJjZmItZjJhYWY0YjIxMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+sGAwlgDrLNOZZ9k2WxxBbAXD8GsrwBZRs1 zl051jYmYFHSJCZ1dxSKGFfkd16QMHrbYqzzHFT1AImOkb1AUUIrfupdLz4GQUkb 3BdPdLiWKPu9ogQEnoowl0XGPgxQAwcF4z9Z3Z5cDi06Ir4g4wV8MWpaeSasDunG t8YwTCKwvraC3aLx7K9ahwh5H8WfFeTisW+SPwhg8o6NBDPE2g+szWHv6Ewlkewh bfHpazpKFIZn257sVTMs9sjfJWAotWoy1Eem1c7pWDiVxIXrju46NzMG54mDUeJr LXl9ffaNup7LIQoTADpewAQaiUPU5L/wJQTl5oNuVt1EVWsFpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAwDLA0GiAPjXX4uTU/q5aWGzMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzg5ZTkzODQtNzBkNi0z NzJlLWE5YWYtMDEwZDEyZGFkMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEcP0BEJghGP+OyaM3QakxRNxfK8WVBPMV6NRg8KETew2w7FCobRN73 cwb2UElnQqFwPXTcP5Hnk3qEdNBGE0PitPJN0Iaa7tRl5OEXWNDh1hzvcTY7OxY9 n431E0W3npZv4hiGG5NCNMI0cGoRQW1CzgByKq9gu/iaSmwUa9FxUCdF+ktgliLz gkYHbQeYi4T98/msiXEq8sq0XDQR7cir4RGuwcL4A8stt6uojTce75+dXT53Dgck drYrUj3A5RNUH+q+uF50Y9VWSJvKsAvQeiatIPrD6stfmSVZ65Oq1VbEzB0b6vei T9ap7tBkNUuRnbKD14BJmORai8qF6x0= -----END CERTIFICATE-----Generated at Wed May 8 23:45:24 2024 by rpki-client on console-fra.rpki-client.org