$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa File: 78a77a9f-d1ee-3657-8456-265177e16059.roa (raw, json) Hash identifier: t+Ao53IXEfe/RC47RRtc4s3KM5NnTDpJnPtooyI18Bk= Subject key identifier: A2:33:76:6A:D6:68:14:61:D5:A5:E7:72:0C:4A:17:25:60:72:3C:6A Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E216DC5E6D2EA789D4580 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:21:6d:c5:e6:d2:ea:78:9d:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=70f5860d-3835-4bcc-bfa7-75f13c8b515f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:81:b9:f3:d0:16:a1:04:22:91:03:1b:bb: 25:e0:e9:57:a6:98:71:60:5f:07:8f:76:3c:ee:a0: 83:f2:97:48:f0:cf:2d:b5:67:ad:ba:c1:c1:26:0f: a2:e1:e9:73:b0:e0:5a:e9:a7:94:94:ed:57:4e:80: 1c:52:c6:ac:c3:51:18:08:72:3e:df:5c:9e:80:fd: bd:ee:76:e7:4d:60:8a:eb:88:f5:5a:cf:0b:b6:1c: fe:49:38:ff:46:ad:3d:2c:76:38:0f:93:43:36:42: 86:c7:9a:c3:b9:41:58:f1:74:19:c9:c3:60:1f:3e: b4:88:82:d8:a2:44:d6:52:8a:cf:98:a8:d5:07:1a: ed:fa:d2:3a:b7:89:d5:b3:5a:38:b0:f3:da:15:ea: 53:a2:2f:d8:d8:99:e3:f4:ce:71:b1:8f:9a:83:5c: 30:e3:8e:f3:99:56:f0:c6:ab:32:c7:05:d7:7b:2a: e1:3b:0f:a4:ce:80:39:8f:02:a4:a4:88:0d:3e:df: e4:7a:83:d1:43:9a:b7:8a:84:c4:ff:e8:43:b0:ee: 5d:6a:fe:0a:6b:03:c5:fa:d8:07:10:ee:bb:29:59: 7e:74:a8:f4:b6:be:fc:ad:89:1b:99:a8:86:dd:fa: db:7e:86:2e:e1:17:83:9e:a2:2f:8c:62:10:0e:fa: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:33:76:6A:D6:68:14:61:D5:A5:E7:72:0C:4A:17:25:60:72:3C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/78a77a9f-d1ee-3657-8456-265177e16059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:8b:fe:fd:32:fa:64:ed:6b:47:b3:49:aa:40:c5:65:36:2d: 34:0b:68:e5:26:96:3d:b6:32:cc:d5:93:d7:ce:d3:86:c4:25: 05:17:e6:79:39:c1:56:9d:01:1d:d9:14:83:66:dd:d7:e8:ff: 12:bc:01:18:76:7d:82:3c:f7:f2:d8:4e:4b:07:03:dc:8c:3f: 7f:a9:6f:d8:e3:c1:0c:d4:e4:10:4a:44:e2:0c:7f:5d:5b:3a: a1:a8:b3:44:e7:56:d6:b9:5b:d9:bf:9a:f7:3d:fe:8c:0c:bd: 5a:a5:da:17:89:aa:d4:b1:e8:a8:10:61:7a:2f:43:87:39:da: 1f:9c:1e:69:d1:8d:b4:44:86:65:b4:c6:dc:24:6a:2c:de:39: 45:12:56:b9:9b:41:36:4d:5d:97:9f:95:fa:f3:77:9f:13:48: ef:61:fc:3d:58:91:23:5f:19:f3:4c:1f:47:ba:31:d1:97:f1: 41:51:a9:e5:d9:f4:d8:4a:df:8b:36:56:15:be:1d:5d:98:5f: 6e:61:e3:91:76:46:e7:46:ed:5c:09:a1:6c:b0:1b:dd:c3:71: 21:ab:39:e8:25:f8:d5:c1:9f:62:48:cc:6e:ee:e7:b6:61:3d: c5:6c:d8:11:04:96:66:09:a3:58:e4:17:fe:4c:1d:ea:79:1a: 55:fa:6e:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiFtxebS6nidRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk NzBmNTg2MGQtMzgzNS00YmNjLWJmYTctNzVmMTNjOGI1MTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3WBufPQFqEEIpEDG7sl4OlXpphxYF8Hj3Y8 7qCD8pdI8M8ttWetusHBJg+i4elzsOBa6aeUlO1XToAcUsasw1EYCHI+31yegP29 7nbnTWCK64j1Ws8Lthz+STj/Rq09LHY4D5NDNkKGx5rDuUFY8XQZycNgHz60iILY okTWUorPmKjVBxrt+tI6t4nVs1o4sPPaFepToi/Y2Jnj9M5xsY+ag1ww447zmVbw xqsyxwXXeyrhOw+kzoA5jwKkpIgNPt/keoPRQ5q3ioTE/+hDsO5dav4KawPF+tgH EO67KVl+dKj0tr78rYkbmaiG3frbfoYu4ReDnqIvjGIQDvpYhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIzdmrWaBRh1aXncgxKFyVgcjxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzhhNzdhOWYtZDFlZS0z NjU3LTg0NTYtMjY1MTc3ZTE2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWADMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGL/v0y+mTta0ezSapAxWU2LTQLaOUmlj22MszVk9fO04bEJQUX5nk5 wVadAR3ZFINm3dfo/xK8ARh2fYI89/LYTksHA9yMP3+pb9jjwQzU5BBKROIMf11b OqGos0TnVta5W9m/mvc9/owMvVql2heJqtSx6KgQYXovQ4c52h+cHmnRjbREhmW0 xtwkaizeOUUSVrmbQTZNXZeflfrzd58TSO9h/D1YkSNfGfNMH0e6MdGX8UFRqeXZ 9NhK34s2VhW+HV2YX25h45F2RudG7VwJoWywG93DcSGrOegl+NXBn2JIzG7u57Zh PcVs2BEElmYJo1jkF/5MHep5GlX6bn4= -----END CERTIFICATE-----Generated at Wed May 8 22:48:49 2024 by rpki-client on console-ams.rpki-client.org