$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7949d224-337e-3f72-9d6d-1106f7aef806.roa File: 7949d224-337e-3f72-9d6d-1106f7aef806.roa (raw, json) Hash identifier: RA+o2Eb8CkUH+1TUdQhexWevKFGOYzK83xd/0L/UiS8= Subject key identifier: 21:97:4E:33:3F:3F:3A:CE:55:72:3C:5E:B7:1E:1A:19:02:4D:02:E6 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845B7B379B18A8DC03E84A4F678 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7949d224-337e-3f72-9d6d-1106f7aef806.roa Signing time: Tue 30 Apr 2024 13:00:34 +0000 ROA not before: Tue 30 Apr 2024 13:00:34 +0000 ROA not after: Mon 29 Jul 2024 13:00:34 +0000 asID: 19905 IP address blocks: 199.91.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b7:b3:79:b1:8a:8d:c0:3e:84:a4:f6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 30 13:00:34 2024 GMT Not After : Jul 29 13:00:34 2024 GMT Subject: CN=095fdfbf-257a-4116-b584-2e2ca0207edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a2:d4:d2:ac:6c:01:92:34:0d:c1:26:17:c6: 3d:16:0f:04:34:16:10:b6:5c:d8:54:ea:b9:47:3e: e4:21:0a:72:a7:13:f7:48:43:41:0d:a8:cc:3b:a0: c1:50:7e:39:82:8f:5e:4d:5d:a9:dc:fb:c0:d7:48: 43:3e:89:5c:25:65:ee:9a:f0:c1:f4:47:cb:bf:4d: cf:99:81:55:e0:a8:45:50:47:7a:cf:ee:37:c5:6a: 17:fd:d2:b4:56:56:48:9c:69:72:be:a9:c7:b2:89: 97:65:03:ed:15:bb:f9:7b:6f:5d:6a:6d:d2:61:53: cf:58:85:31:71:b2:ac:b2:24:a2:63:72:19:f3:c3: 6b:df:ff:f8:58:8c:c1:aa:11:ea:e1:08:09:2f:2d: ee:4f:a8:a8:2f:d4:37:05:07:9c:47:85:60:b7:7f: 7f:5c:59:96:6c:8d:e8:25:5d:3b:b4:33:10:f6:79: c1:75:fa:9e:25:71:f7:fb:91:f1:6a:a5:f2:39:53: 91:4e:40:da:fa:7e:b7:be:de:3d:b1:15:8c:cb:71: a4:70:94:d0:6f:68:a2:e8:fc:5f:12:e8:97:a2:a7: 21:09:c8:ae:49:5b:59:0a:1c:a6:25:50:dd:c8:e6: bb:6e:eb:18:8e:c5:96:34:ca:38:39:75:5c:51:ca: 03:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:97:4E:33:3F:3F:3A:CE:55:72:3C:5E:B7:1E:1A:19:02:4D:02:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7949d224-337e-3f72-9d6d-1106f7aef806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6c:ed:d2:2e:c4:2a:6a:ce:a5:5b:bd:97:d0:73:f0:32:5e: db:cc:a2:cf:ff:2f:7e:66:47:2d:2e:df:3c:d5:0e:ba:77:73: 44:3a:67:f7:f7:c7:d1:40:1e:9d:3b:34:fb:aa:0c:bf:78:39: e4:22:3e:8b:2d:8f:f0:55:e4:7b:f5:b9:e5:cb:55:45:5a:30: b8:bd:0a:4f:1f:b1:bd:e7:8b:f7:c8:6f:6a:33:e6:d5:1d:36: 04:9c:54:77:31:37:14:a4:b4:0f:04:77:b1:49:33:ee:2c:4b: c8:c1:f6:98:6b:eb:67:0d:61:c6:a8:f8:07:2e:bf:d8:45:f8: 5e:16:74:b0:1e:89:89:01:b1:0c:a1:f1:ec:a3:21:22:a6:00: 3e:06:d3:eb:c3:53:82:7c:a0:53:d9:fe:95:61:aa:a7:a2:3d: f2:1a:e8:5c:a7:2b:5d:ac:db:a5:21:e6:a8:d5:92:cc:dc:dd: 1b:f0:e8:f8:ff:ed:a0:94:b4:07:12:28:fd:44:8a:22:8d:d8: 3e:de:8a:14:42:7a:e7:ce:67:ef:0d:1a:30:36:03:df:37:5f: 1d:3d:98:55:30:c6:69:bf:fd:f1:b8:c2:54:83:4c:53:e5:81: 80:52:70:2d:bb:ec:cc:c4:91:72:31:f6:f2:ca:59:08:b4:b2: 4c:fc:17:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3s3mxio3APoSk9ngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk MDk1ZmRmYmYtMjU3YS00MTE2LWI1ODQtMmUyY2EwMjA3ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qLU0qxsAZI0DcEmF8Y9Fg8ENBYQtlzYVOq5 Rz7kIQpypxP3SENBDajMO6DBUH45go9eTV2p3PvA10hDPolcJWXumvDB9EfLv03P mYFV4KhFUEd6z+43xWoX/dK0VlZInGlyvqnHsomXZQPtFbv5e29dam3SYVPPWIUx cbKssiSiY3IZ88Nr3//4WIzBqhHq4QgJLy3uT6ioL9Q3BQecR4Vgt39/XFmWbI3o JV07tDMQ9nnBdfqeJXH3+5HxaqXyOVORTkDa+n63vt49sRWMy3GkcJTQb2ii6Pxf EuiXoqchCciuSVtZChymJVDdyOa7busYjsWWNMo4OXVcUcoDjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGXTjM/PzrOVXI8XrceGhkCTQLmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzk0OWQyMjQtMzM3ZS0z ZjcyLTlkNmQtMTEwNmY3YWVmODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAts7dIuxCpqzqVbvZfQc/AyXtvMos//L35mRy0u3zzVDrp3c0Q6Z/f3 x9FAHp07NPuqDL94OeQiPostj/BV5Hv1ueXLVUVaMLi9Ck8fsb3ni/fIb2oz5tUd NgScVHcxNxSktA8Ed7FJM+4sS8jB9phr62cNYcao+Acuv9hF+F4WdLAeiYkBsQyh 8eyjISKmAD4G0+vDU4J8oFPZ/pVhqqeiPfIa6FynK12s26Uh5qjVkszc3Rvw6Pj/ 7aCUtAcSKP1EiiKN2D7eihRCeufOZ+8NGjA2A983Xx09mFUwxmm//fG4wlSDTFPl gYBScC277MzEkXIx9vLKWQi0skz8F9M= -----END CERTIFICATE-----Generated at Thu May 2 22:30:03 2024 by rpki-client on console-ams.rpki-client.org