$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9518e633-5724-3214-b266-4c6475dfdc3e.roa File: 9518e633-5724-3214-b266-4c6475dfdc3e.roa (raw, json) Hash identifier: qONDVn6Tz1tZjjCgeBXIeYBJd+xnuEf24fvNRq2kzy0= Subject key identifier: 87:CD:64:89:6E:52:6A:12:AF:17:31:44:7A:69:DE:D4:2B:FD:6B:62 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285847600BA077157FE7B9C4C31080 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9518e633-5724-3214-b266-4c6475dfdc3e.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 16839 IP address blocks: 149.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:a0:77:15:7f:e7:b9:c4:c3:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=0994eb6d-e99c-480c-976b-77804f8c4887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:7e:4c:80:fe:e8:30:8d:e8:34:11:77:39: 60:ff:f9:c1:16:4b:4e:9f:57:b5:28:67:c5:ae:33: 3f:7b:6c:25:c6:e3:e4:6c:32:a8:81:f1:a5:41:95: cc:07:ab:1b:15:28:fe:86:08:cf:99:41:2a:0a:d4: e2:f8:9d:e6:cd:ba:09:58:1c:ae:82:26:a8:73:27: 14:00:02:88:ad:b4:18:c0:38:64:e8:9f:02:5e:2d: b9:54:88:18:09:3d:ab:f5:2d:73:82:af:93:e6:45: 8d:a9:9d:69:bf:3e:d4:11:bc:97:9c:e1:d8:a1:73: 47:87:a1:3d:7a:06:79:91:32:84:84:90:72:28:69: 1e:48:d4:b9:c4:01:67:5e:ee:c8:24:21:30:4a:86: 35:0a:35:b7:b8:ae:73:27:c3:8d:1c:1e:65:0e:f1: 49:8f:32:68:f8:b3:be:ad:06:59:69:e0:ad:31:c1: 69:c0:c7:c9:fe:24:98:1f:d8:a7:ef:8d:ee:d2:dc: 83:ee:b0:eb:00:9c:e5:37:6a:c4:25:43:95:99:4a: f5:51:96:14:f6:df:1a:58:41:82:1d:9e:d1:fd:f8: de:f1:26:b9:ff:ca:1e:08:26:be:e5:a1:0f:10:a5: 2a:84:dd:ab:69:d8:b4:d6:36:1d:bf:3d:22:e4:81: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:64:89:6E:52:6A:12:AF:17:31:44:7A:69:DE:D4:2B:FD:6B:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9518e633-5724-3214-b266-4c6475dfdc3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3c:12:82:f7:83:1c:88:56:f3:61:8c:2f:89:bb:94:0d:ed: 73:cc:b0:a3:6e:f7:2d:d2:cd:94:20:37:11:82:ce:2d:b1:4f: e3:89:91:e3:1b:dc:d9:6d:d8:e3:ab:73:e9:ab:2d:35:ce:15: 33:2d:27:64:e9:d0:4c:63:5e:35:d7:67:01:fc:e1:7d:0b:9e: 59:f8:80:e0:95:93:9b:ef:9f:6a:87:5c:9f:db:e9:19:d3:ce: 0b:9f:c1:4f:2a:1f:0f:5b:7d:2b:2d:7d:a3:9e:5a:ea:ee:da: e0:d2:25:78:ff:5e:2f:1c:ad:26:d4:53:b5:fe:2c:b7:d2:ec: 3c:52:dd:92:01:15:5e:b7:af:7b:f3:7d:26:0f:1b:cf:5a:4d: bf:60:31:19:11:00:30:5e:02:3f:50:ae:06:1b:a6:ce:ae:5f: 8b:94:e3:9b:81:a9:1b:a4:bf:67:01:34:29:c8:e0:00:26:99: 89:f5:25:30:50:47:5d:45:95:f9:70:70:ac:e8:4e:08:8a:48: ed:6c:72:69:db:13:c2:c4:60:d2:01:80:fd:e7:af:64:8c:54: 56:e0:cd:0a:85:1e:3e:ad:f5:52:b4:cf:fd:75:bd:42:88:d6: 27:38:ff:c1:0a:d3:03:d6:45:58:68:4e:c6:c7:05:4a:89:32: 20:c4:bb:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6B3FX/nucTDEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MDk5NGViNmQtZTk5Yy00ODBjLTk3NmItNzc4MDRmOGM0ODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6V+TID+6DCN6DQRdzlg//nBFktOn1e1KGfF rjM/e2wlxuPkbDKogfGlQZXMB6sbFSj+hgjPmUEqCtTi+J3mzboJWByugiaocycU AAKIrbQYwDhk6J8CXi25VIgYCT2r9S1zgq+T5kWNqZ1pvz7UEbyXnOHYoXNHh6E9 egZ5kTKEhJByKGkeSNS5xAFnXu7IJCEwSoY1CjW3uK5zJ8ONHB5lDvFJjzJo+LO+ rQZZaeCtMcFpwMfJ/iSYH9in743u0tyD7rDrAJzlN2rEJUOVmUr1UZYU9t8aWEGC HZ7R/fje8Sa5/8oeCCa+5aEPEKUqhN2radi01jYdvz0i5IFowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfNZIluUmoSrxcxRHpp3tQr/WtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTUxOGU2MzMtNTcyNC0z MjE0LWIyNjYtNGM2NDc1ZGZkYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB08EoL3gxyIVvNhjC+Ju5QN7XPMsKNu9y3SzZQgNxGCzi2xT+OJkeMb 3Nlt2OOrc+mrLTXOFTMtJ2Tp0ExjXjXXZwH84X0Lnln4gOCVk5vvn2qHXJ/b6RnT zgufwU8qHw9bfSstfaOeWuru2uDSJXj/Xi8crSbUU7X+LLfS7DxS3ZIBFV63r3vz fSYPG89aTb9gMRkRADBeAj9QrgYbps6uX4uU45uBqRukv2cBNCnI4AAmmYn1JTBQ R11FlflwcKzoTgiKSO1scmnbE8LEYNIBgP3nr2SMVFbgzQqFHj6t9VK0z/11vUKI 1ic4/8EK0wPWRVhoTsbHBUqJMiDEu9I= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:50 2024 by rpki-client on console-ams.rpki-client.org