$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/972228d3-0952-376f-be12-f3d22a8da62b.roa File: 972228d3-0952-376f-be12-f3d22a8da62b.roa (raw, json) Hash identifier: 0VNFj+kyaqegEOjbErFE21WIv3t6QM/v/tHcrOLW950= Subject key identifier: F0:2B:56:B3:AA:DC:A4:42:AB:DC:57:23:C1:EF:ED:0C:D7:B7:41:38 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E21D3A406421E0FB99AB0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/972228d3-0952-376f-be12-f3d22a8da62b.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:21:d3:a4:06:42:1e:0f:b9:9a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=f6498f00-7c8d-4820-bebb-3983d83f1cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:68:98:0c:96:1e:95:32:96:1e:de:3d:59: 46:e9:40:8d:62:14:b2:a9:54:c5:05:34:5e:9d:7c: 22:5c:fe:68:a5:b1:22:5d:20:be:57:45:6e:ea:34: 13:23:e4:75:c1:e3:ca:3f:a8:8d:16:56:01:fb:9f: ef:bd:bf:0e:83:cb:6f:fa:56:d3:d4:8f:a4:ac:11: 31:34:eb:c5:61:3c:a8:33:0b:94:62:7d:32:ab:28: c3:9e:43:f1:56:25:ef:91:f8:fe:28:12:8d:ad:4b: 1f:f6:d7:4b:97:bb:54:9e:a1:05:cb:2a:d7:4e:84: f0:c2:b9:f0:97:a0:96:25:51:6e:35:07:f6:d0:d7: 06:50:f2:9d:cd:3f:a4:24:f5:ff:af:de:85:fd:2b: 51:40:43:40:aa:e6:8f:9d:9f:43:5a:f7:bf:89:8e: 98:ec:29:79:77:94:a8:41:d2:4e:e2:fd:4f:cd:b0: 04:3b:29:76:0a:d1:34:14:0b:7c:c3:05:35:dd:4f: 85:76:fe:65:96:8f:fc:18:fd:94:01:1f:31:2e:56: 35:73:86:70:c5:8e:e7:af:a6:46:1e:1d:af:7e:8f: d2:4b:f8:de:d4:31:93:e3:ae:47:fa:3e:22:dd:5b: 67:f3:f6:d5:81:d3:90:a8:f8:81:c4:a7:d1:2c:d1: 88:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2B:56:B3:AA:DC:A4:42:AB:DC:57:23:C1:EF:ED:0C:D7:B7:41:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/972228d3-0952-376f-be12-f3d22a8da62b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cd:bf:ca:7e:3a:89:1d:3f:d9:8d:14:29:85:d9:be:48:33: 5a:9c:73:82:c0:15:c6:82:ad:43:36:c1:cb:9e:bc:b9:af:28: bf:b0:c9:1e:a3:b4:a6:5f:9b:37:41:60:29:f4:5f:c7:c1:3e: fd:f0:ca:8d:78:05:1a:ba:63:08:c4:e4:65:4f:ba:bf:8f:29: 1d:50:30:9c:32:83:ea:6d:bd:5c:0d:4d:88:2c:03:71:f1:b6: 3e:24:2d:b7:bd:d8:86:c5:b5:2f:11:40:43:ed:56:0a:69:34: 92:9e:8b:d8:b7:28:23:14:c9:76:f7:c2:23:75:71:46:e4:43: b7:1b:fa:d4:e0:f7:7b:96:4a:17:d7:7f:40:c7:fb:1d:c8:c5: 66:cb:d6:b5:72:66:12:19:62:64:1d:14:69:d6:16:77:6f:67: cf:bd:6f:c8:36:36:2a:97:38:fe:82:21:a1:bf:25:ca:18:a8: 96:23:a9:6e:3c:03:96:ce:97:1d:20:a9:4e:65:7d:18:b2:d7: e0:7b:95:18:27:40:82:81:1a:07:96:e4:58:a1:60:9d:25:4e: 9e:c6:c8:78:21:15:5f:b6:23:04:84:30:2d:19:b0:65:53:82: 5b:87:fd:47:e5:15:21:77:c2:48:69:2b:ce:74:ae:82:a8:39: e1:79:b1:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiHTpAZCHg+5mrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk ZjY0OThmMDAtN2M4ZC00ODIwLWJlYmItMzk4M2Q4M2YxY2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX1omAyWHpUylh7ePVlG6UCNYhSyqVTFBTRe nXwiXP5opbEiXSC+V0Vu6jQTI+R1wePKP6iNFlYB+5/vvb8Og8tv+lbT1I+krBEx NOvFYTyoMwuUYn0yqyjDnkPxViXvkfj+KBKNrUsf9tdLl7tUnqEFyyrXToTwwrnw l6CWJVFuNQf20NcGUPKdzT+kJPX/r96F/StRQENAquaPnZ9DWve/iY6Y7Cl5d5So QdJO4v1PzbAEOyl2CtE0FAt8wwU13U+Fdv5llo/8GP2UAR8xLlY1c4ZwxY7nr6ZG Hh2vfo/SS/je1DGT465H+j4i3Vtn8/bVgdOQqPiBxKfRLNGI0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPArVrOq3KRCq9xXI8Hv7QzXt0E4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvOTcyMjI4ZDMtMDk1Mi0z NzZmLWJlMTItZjNkMjJhOGRhNjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLNv8p+OokdP9mNFCmF2b5IM1qcc4LAFcaCrUM2wcuevLmvKL+wyR6j tKZfmzdBYCn0X8fBPv3wyo14BRq6YwjE5GVPur+PKR1QMJwyg+ptvVwNTYgsA3Hx tj4kLbe92IbFtS8RQEPtVgppNJKei9i3KCMUyXb3wiN1cUbkQ7cb+tTg93uWShfX f0DH+x3IxWbL1rVyZhIZYmQdFGnWFndvZ8+9b8g2NiqXOP6CIaG/JcoYqJYjqW48 A5bOlx0gqU5lfRiy1+B7lRgnQIKBGgeW5FihYJ0lTp7GyHghFV+2IwSEMC0ZsGVT gluH/UflFSF3wkhpK850roKoOeF5sUg= -----END CERTIFICATE-----Generated at Wed May 8 22:48:49 2024 by rpki-client on console-ams.rpki-client.org