$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa File: 8095b80c-f559-3348-96e7-8524fb77cdb9.roa (raw, json) Hash identifier: xmJtD/tBW8tnnRiwXVF3HHcUih0FHSRglQWWiNs+Yv8= Subject key identifier: 08:9B:25:F8:52:46:5D:83:77:24:F8:AA:FB:39:BA:C8:4D:EA:83:1F Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E1F19690A8EACB8CECCF0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1f:19:69:0a:8e:ac:b8:ce:cc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=34c13aba-d0df-4d5c-a115-f8c474a2ab1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:08:68:99:e8:23:df:7e:c2:f4:5a:79:99: 5d:e5:9b:6c:78:6e:7b:00:de:87:34:ec:80:f8:0d: 7b:5d:7e:0c:00:95:85:08:1d:0f:91:99:7e:14:43: eb:90:51:7e:dd:8e:bc:c9:01:55:e3:b8:f6:31:2e: 2c:3b:ce:81:e2:be:1a:a8:39:6a:1a:26:11:22:eb: b3:f0:f7:d5:89:87:5c:fe:83:7a:ee:c6:fc:e5:71: d6:f6:13:d7:c3:d3:35:96:18:e2:85:b1:e4:2c:7d: 86:75:c7:22:a6:9a:33:65:b8:25:ae:f1:90:7f:c9: 63:06:36:d3:5d:52:eb:f7:69:d5:67:8d:3c:97:f0: e0:ad:36:de:8c:30:83:c5:ce:4e:aa:fc:93:4b:40: 02:71:4d:31:c9:d6:50:da:04:1a:b7:26:19:41:65: a0:04:65:32:4e:68:d8:3e:aa:7e:60:4e:74:f8:dd: 76:de:cc:93:5d:d1:a1:04:9c:f4:23:39:eb:9e:64: 82:f8:57:0b:c3:3c:9a:6b:27:70:d4:1b:66:7f:07: 3b:ba:29:66:14:52:cd:a7:30:98:06:bf:4b:5b:99: 57:b0:87:c0:81:53:b6:b6:46:d8:bb:b0:c2:bd:c9: 47:34:63:b3:ec:b1:d3:3d:10:1a:eb:5e:80:33:ca: 01:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9B:25:F8:52:46:5D:83:77:24:F8:AA:FB:39:BA:C8:4D:EA:83:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/8095b80c-f559-3348-96e7-8524fb77cdb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:98:9f:2b:54:96:a0:21:52:95:60:d2:3d:b9:88:f7:b8:a9: fc:9d:3b:d7:5b:bc:6a:9a:c4:ad:1f:70:92:fd:85:ba:56:91: b0:76:81:f9:62:31:01:a3:a9:d5:34:0d:19:be:ea:09:33:be: cc:48:04:46:97:e2:ef:fb:74:f1:f2:d7:ab:18:ab:a0:04:cc: e6:68:ee:e2:3a:59:dc:6f:a9:8d:4d:f8:a3:6f:44:4b:18:7f: 5f:73:a6:a8:fc:e0:62:0e:23:b4:fa:ad:33:66:31:ae:54:73: 73:10:d2:fe:36:83:83:79:b8:90:2c:54:6e:b6:b4:49:01:ea: b1:f6:06:5d:b6:9c:5d:ff:88:5c:5c:7b:36:38:14:3f:46:f5: 3a:61:87:82:46:15:4b:a6:27:c2:f2:d4:9d:50:2a:23:3f:1a: 61:7a:91:4b:42:b4:c7:08:9f:6e:60:b3:de:8c:b7:13:3d:d1: 64:81:b4:f4:d1:e6:2f:d6:88:03:24:e6:d4:84:cc:b6:df:e5: e3:64:9e:6c:e8:79:27:95:28:6b:51:f4:78:61:78:54:72:2a: de:dd:62:e6:0c:8e:ca:7c:37:dd:cd:e8:47:d2:13:11:b1:c4: 4f:0c:c4:5f:11:dd:ad:6f:bc:75:d7:2c:10:cd:87:fb:dd:fc: 50:43:1c:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXh8ZaQqOrLjOzPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk MzRjMTNhYmEtZDBkZi00ZDVjLWExMTUtZjhjNDc0YTJhYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb8IaJnoI99+wvRaeZld5ZtseG57AN6HNOyA +A17XX4MAJWFCB0PkZl+FEPrkFF+3Y68yQFV47j2MS4sO86B4r4aqDlqGiYRIuuz 8PfViYdc/oN67sb85XHW9hPXw9M1lhjihbHkLH2GdccippozZbglrvGQf8ljBjbT XVLr92nVZ408l/DgrTbejDCDxc5OqvyTS0ACcU0xydZQ2gQatyYZQWWgBGUyTmjY Pqp+YE50+N123syTXdGhBJz0IznrnmSC+FcLwzyaaydw1Btmfwc7uilmFFLNpzCY Br9LW5lXsIfAgVO2tkbYu7DCvclHNGOz7LHTPRAa616AM8oBkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAibJfhSRl2DdyT4qvs5ushN6oMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvODA5NWI4MGMtZjU1OS0z MzQ4LTk2ZTctODUyNGZiNzdjZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByYnytUlqAhUpVg0j25iPe4qfydO9dbvGqaxK0fcJL9hbpWkbB2gfli MQGjqdU0DRm+6gkzvsxIBEaX4u/7dPHy16sYq6AEzOZo7uI6WdxvqY1N+KNvREsY f19zpqj84GIOI7T6rTNmMa5Uc3MQ0v42g4N5uJAsVG62tEkB6rH2Bl22nF3/iFxc ezY4FD9G9Tphh4JGFUumJ8Ly1J1QKiM/GmF6kUtCtMcIn25gs96MtxM90WSBtPTR 5i/WiAMk5tSEzLbf5eNknmzoeSeVKGtR9HhheFRyKt7dYuYMjsp8N93N6EfSExGx xE8MxF8R3a1vvHXXLBDNh/vd/FBDHCg= -----END CERTIFICATE-----Generated at Wed May 8 21:06:09 2024 by rpki-client on console-fra.rpki-client.org