$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bfe765f0-a24a-30b6-a43c-9c1d2f810e66.roa File: bfe765f0-a24a-30b6-a43c-9c1d2f810e66.roa (raw, json) Hash identifier: 7NYeEzoiPRz95qgrkwsBdI8af2D8vNiEiRuBONqJH2A= Subject key identifier: 55:23:C8:93:27:78:DB:C2:8B:41:15:10:8A:F5:2A:8B:CE:B8:39:F8 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E1FB8CA6526F5ED339370 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bfe765f0-a24a-30b6-a43c-9c1d2f810e66.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1f:b8:ca:65:26:f5:ed:33:93:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=65b89b5a-f925-400c-bd7c-6643b539331d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:0b:98:87:f8:90:0b:72:e2:23:59:1c:be: fb:09:a7:e1:ed:ae:c6:f6:37:a1:b2:0b:b5:85:c2: 9f:ba:93:1d:4f:f6:dc:eb:e2:9e:10:ba:f4:c8:c6: 9a:a5:bd:3a:11:4c:70:1d:fd:77:b4:b6:98:64:d4: 5f:c3:d9:71:3d:35:65:73:c4:06:03:12:95:b4:ea: 38:2e:d0:c4:b4:86:bd:da:62:55:99:d6:de:73:8c: 6d:df:2d:bf:84:58:bb:ea:e4:6c:c8:c1:8e:bf:17: 82:25:61:3c:14:09:4b:3c:18:00:6c:fc:9b:75:e8: 41:e8:8b:94:1b:7c:4f:7c:e2:58:b8:4a:03:93:b0: 83:f5:80:9f:6c:e0:2f:4c:8b:4f:1b:a3:f3:73:7b: 43:75:36:e7:f7:41:fe:90:c1:17:52:4e:63:e1:ad: a4:39:f1:42:07:f8:3f:6d:e6:29:14:a0:84:d0:63: c7:45:b3:b2:a9:f1:96:bd:16:34:89:3a:07:ea:1f: c3:cb:86:e0:7d:21:fc:76:ec:d8:bf:70:d4:b2:c3: 3a:be:b5:59:09:77:be:f1:86:9f:b2:7f:fd:b7:f1: 0d:03:d8:20:ba:fe:69:b1:bc:08:3a:b3:34:d1:7d: ac:c3:3d:77:48:32:78:4e:8e:a1:dd:2d:25:cd:99: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:23:C8:93:27:78:DB:C2:8B:41:15:10:8A:F5:2A:8B:CE:B8:39:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bfe765f0-a24a-30b6-a43c-9c1d2f810e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:90:98:8d:90:ba:d6:cb:a2:7d:cb:a6:04:2e:49:bb:07:f1: 4f:90:ee:d2:a3:6e:bd:d6:08:99:ab:27:4c:36:a4:8d:1e:93: 6d:2c:aa:54:32:e3:e4:9b:b1:df:68:ea:b9:10:e9:88:c7:95: aa:c4:9c:e7:9f:8b:f8:85:35:60:1d:45:d1:8d:a8:5f:69:af: e2:95:7d:d0:00:94:50:6b:b1:80:c4:ab:40:20:9b:20:18:3e: 35:e0:9a:a7:c4:b8:61:78:1f:4d:8f:e8:5c:01:78:0b:5e:c7: 5c:18:dd:3f:b7:d5:96:8d:ba:9a:32:b5:01:ce:e8:8d:76:50: 43:38:f8:24:63:33:8c:32:13:65:7a:fb:a0:00:06:a6:68:e9: 5a:8d:e9:97:16:7a:ae:d4:4c:1e:52:d8:54:63:cd:84:e0:d6: ba:56:06:a5:a1:f5:8a:6e:10:43:cf:4e:01:d6:dc:44:45:d3: 79:58:ba:03:16:1f:dc:96:f6:e2:e8:88:6f:cc:1c:05:8e:1d: 40:f6:c1:c5:46:0e:46:57:23:8c:ed:3a:2c:02:3f:75:52:7a: 51:82:59:c0:0d:7f:26:73:73:3e:6f:68:0b:9c:15:33:b8:cb: 35:eb:14:a2:c3:6e:33:98:78:67:f4:d1:87:12:dd:2a:ca:c5: 99:39:57:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXh+4ymUm9e0zk3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk NjViODliNWEtZjkyNS00MDBjLWJkN2MtNjY0M2I1MzkzMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgALmIf4kAty4iNZHL77Cafh7a7G9jehsgu1 hcKfupMdT/bc6+KeELr0yMaapb06EUxwHf13tLaYZNRfw9lxPTVlc8QGAxKVtOo4 LtDEtIa92mJVmdbec4xt3y2/hFi76uRsyMGOvxeCJWE8FAlLPBgAbPybdehB6IuU G3xPfOJYuEoDk7CD9YCfbOAvTItPG6Pzc3tDdTbn90H+kMEXUk5j4a2kOfFCB/g/ beYpFKCE0GPHRbOyqfGWvRY0iToH6h/Dy4bgfSH8duzYv3DUssM6vrVZCXe+8Yaf sn/9t/ENA9gguv5psbwIOrM00X2swz13SDJ4To6h3S0lzZlAhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUjyJMneNvCi0EVEIr1KovOuDn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYmZlNzY1ZjAtYTI0YS0z MGI2LWE0M2MtOWMxZDJmODEwZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqQmI2QutbLon3LpgQuSbsH8U+Q7tKjbr3WCJmrJ0w2pI0ek20sqlQy 4+Sbsd9o6rkQ6YjHlarEnOefi/iFNWAdRdGNqF9pr+KVfdAAlFBrsYDEq0AgmyAY PjXgmqfEuGF4H02P6FwBeAtex1wY3T+31ZaNupoytQHO6I12UEM4+CRjM4wyE2V6 +6AABqZo6VqN6ZcWeq7UTB5S2FRjzYTg1rpWBqWh9YpuEEPPTgHW3ERF03lYugMW H9yW9uLoiG/MHAWOHUD2wcVGDkZXI4ztOiwCP3VSelGCWcANfyZzcz5vaAucFTO4 yzXrFKLDbjOYeGf00YcS3SrKxZk5V4w= -----END CERTIFICATE-----Generated at Wed May 8 15:12:57 2024 by rpki-client on console-ams.rpki-client.org