$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa File: 906e2291-613d-339e-8038-3e70422ca33a.roa (raw, json) Hash identifier: +oNgBPzrHAO+K9dQdzVu4ItMWhag+9GOgxwjD7AstEs= Subject key identifier: 75:BA:AB:C2:DE:7B:05:71:DE:9E:10:A5:73:C7:E0:A9:0A:42:C8:DA Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E227052CF7C41CA8C56C0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:22:70:52:cf:7c:41:ca:8c:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=63b53e4a-589e-47d0-ba1d-c2a7d649df87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:d0:13:39:f6:8a:b0:1e:00:52:f8:f3:45: 57:a2:3b:f6:c9:b8:b4:f5:57:63:0a:9a:69:da:4e: a8:b2:a4:22:15:3e:63:8a:04:e2:a9:2c:0a:93:ba: 5f:8e:f5:40:ce:05:2d:81:11:fc:08:12:ab:29:3b: e9:89:7c:26:86:d2:6b:52:18:58:a1:09:43:44:20: 32:a3:eb:9a:f4:ed:4e:5c:b0:47:51:10:79:8d:9d: 12:85:06:f2:86:f6:54:97:75:19:a3:fb:9a:d9:e0: a8:e4:2c:d4:6d:a9:ca:70:3e:eb:2a:59:ef:f3:20: db:97:b4:87:8a:64:ce:32:ad:5e:fb:5c:a5:06:69: b0:50:af:68:13:4e:34:fe:25:25:09:cc:fa:39:29: bb:c7:9d:cf:34:ec:09:3e:65:2d:73:9f:62:0d:2d: 9f:b4:3e:dd:b1:29:dd:a3:d8:51:c6:83:01:f7:d8: ea:67:a7:68:49:d3:28:e7:fd:a8:e3:16:19:d4:a5: fc:db:67:a2:f2:5d:f4:2c:3a:15:d5:9d:ac:6e:06: d8:76:12:1d:58:09:3c:fe:26:03:f8:09:cf:b4:85: e3:05:88:c0:fe:71:a8:2d:b9:22:a6:da:32:fc:80: 9e:5f:6e:56:cf:94:b5:21:1f:f4:39:06:3e:61:56: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BA:AB:C2:DE:7B:05:71:DE:9E:10:A5:73:C7:E0:A9:0A:42:C8:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/906e2291-613d-339e-8038-3e70422ca33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:93:02:f2:fb:b0:b3:97:c7:a0:4c:92:0b:5b:e7:e0:e4:79: ba:25:aa:6d:b4:0a:73:df:41:c0:a7:7b:b7:7c:49:2c:c7:99: 75:9a:21:84:b5:c1:8a:22:b6:5e:82:6d:a0:9d:a2:a5:54:97: 87:96:76:59:53:15:2f:77:07:57:74:f3:86:2c:69:c6:8f:c6: 1e:fd:46:65:67:de:62:47:6b:a4:65:8a:92:cb:36:07:86:b9: 4c:90:66:e4:05:89:ac:8c:1d:bb:9c:00:f0:7b:29:ad:5e:43: 57:3c:b6:62:dc:c4:f5:de:b7:91:11:8b:6d:0d:cf:ee:18:aa: 61:51:3e:c7:35:25:fe:0e:2c:de:82:18:93:31:68:76:ca:9d: 25:bd:60:ba:78:48:7c:56:fe:d8:9e:90:81:3c:48:4d:19:33: 0d:47:92:04:53:23:d4:2d:24:04:78:27:6d:52:3a:16:f4:20: 1c:f3:f3:83:c7:ae:90:0e:de:1c:34:23:89:1d:57:eb:21:e8: a2:36:d9:36:4f:94:4c:e7:42:e5:6a:54:25:f1:0c:8b:93:66: b4:42:a0:f8:87:2c:04:61:6a:fc:58:c7:b0:35:2b:a6:54:b4: e8:06:16:20:f3:12:e8:25:b3:4c:21:8d:0a:e9:b2:14:36:74: 54:23:57:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiJwUs98QcqMVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk NjNiNTNlNGEtNTg5ZS00N2QwLWJhMWQtYzJhN2Q2NDlkZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKbQEzn2irAeAFL480VXojv2ybi09VdjCppp 2k6osqQiFT5jigTiqSwKk7pfjvVAzgUtgRH8CBKrKTvpiXwmhtJrUhhYoQlDRCAy o+ua9O1OXLBHURB5jZ0ShQbyhvZUl3UZo/ua2eCo5CzUbanKcD7rKlnv8yDbl7SH imTOMq1e+1ylBmmwUK9oE040/iUlCcz6OSm7x53PNOwJPmUtc59iDS2ftD7dsSnd o9hRxoMB99jqZ6doSdMo5/2o4xYZ1KX822ei8l30LDoV1Z2sbgbYdhIdWAk8/iYD +AnPtIXjBYjA/nGoLbkiptoy/ICeX25Wz5S1IR/0OQY+YVZ3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW6q8LeewVx3p4QpXPH4KkKQsjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTA2ZTIyOTEtNjEzZC0z MzllLTgwMzgtM2U3MDQyMmNhMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOTAvL7sLOXx6BMkgtb5+Dkebolqm20CnPfQcCne7d8SSzHmXWaIYS1 wYoitl6CbaCdoqVUl4eWdllTFS93B1d084YsacaPxh79RmVn3mJHa6RlipLLNgeG uUyQZuQFiayMHbucAPB7Ka1eQ1c8tmLcxPXet5ERi20Nz+4YqmFRPsc1Jf4OLN6C GJMxaHbKnSW9YLp4SHxW/tiekIE8SE0ZMw1HkgRTI9QtJAR4J21SOhb0IBzz84PH rpAO3hw0I4kdV+sh6KI22TZPlEznQuVqVCXxDIuTZrRCoPiHLARhavxYx7A1K6ZU tOgGFiDzEugls0whjQrpshQ2dFQjV3w= -----END CERTIFICATE-----Generated at Wed May 8 02:00:10 2024 by rpki-client on console-fra.rpki-client.org