$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa File: c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa (raw, json) Hash identifier: S9K/U8lPC+ijDDv4y2hL54w6ar3ScYgALZ494LnhHDk= Subject key identifier: BB:C5:E5:B4:F2:D8:71:FB:3F:0A:2A:4C:0D:7E:8C:3D:92:EB:E9:6D Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584732829C8631DDBC82D3872000 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa Signing time: Fri 13 Sep 2024 05:33:32 +0000 ROA not before: Fri 13 Sep 2024 05:33:32 +0000 ROA not after: Thu 12 Dec 2024 06:33:32 +0000 asID: 16839 IP address blocks: 149.96.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:32:82:9c:86:31:dd:bc:82:d3:87:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 13 05:33:32 2024 GMT Not After : Dec 12 06:33:32 2024 GMT Subject: CN=b9af9a5c-c5a6-4ec2-b720-84bcd52da228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:36:cf:62:68:1d:e8:7b:c0:bb:76:a5:52: db:2d:57:17:1f:6b:bb:c8:90:0c:7c:41:b9:5e:86: 45:a9:b2:41:15:2e:da:0a:5b:2c:86:6a:10:3e:04: 00:79:c1:c8:9d:ea:25:6d:ca:b7:51:fa:f3:2d:43: 2d:b9:6f:ad:eb:f5:d1:5b:81:44:91:f1:ec:91:af: e0:65:92:21:5d:43:69:2f:ab:6a:1e:25:f7:82:05: 39:b6:4d:6f:b7:06:57:39:61:8a:bb:8a:00:b8:50: d1:21:cd:cc:ec:c0:00:e3:a0:02:d9:5d:ae:6f:89: 0a:46:dc:6c:c5:78:45:b6:20:76:37:ba:32:61:42: 4c:c3:d0:dd:09:03:62:e0:ee:bc:28:14:f1:c8:b1: a5:22:00:fb:22:ef:22:11:a8:ea:bc:2e:6c:5b:90: e2:e5:97:b4:06:ee:16:62:8a:a4:1f:e0:48:e1:03: 83:ea:6a:3d:84:17:d4:db:86:82:17:91:e7:5b:54: de:ef:90:02:42:11:93:5c:0b:5e:0a:75:7d:84:67: 57:ac:ad:bd:c7:f8:e3:90:64:3a:61:eb:51:c2:de: 76:a7:53:1f:ac:cc:58:52:6b:5f:60:88:cd:98:60: 1e:16:d5:9b:d0:f9:44:4c:99:44:ad:7b:5b:f3:9c: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C5:E5:B4:F2:D8:71:FB:3F:0A:2A:4C:0D:7E:8C:3D:92:EB:E9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c1da2e71-dfa6-3d09-bc17-93a0a7e73306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:25:85:d8:22:ed:45:18:0c:78:ca:40:24:1f:e2:2e:96:1f: 24:9d:b1:86:63:79:cb:19:26:49:3d:f2:66:7e:35:6f:14:c6: d2:22:09:5b:1e:62:39:62:f0:7c:cb:0a:49:8a:a0:03:d1:d1: 26:c1:47:62:73:38:54:ff:b7:71:b6:5f:69:fa:c8:c2:41:be: 9c:0c:0b:cb:7c:ce:15:ac:25:d9:71:2c:05:88:38:8f:e4:c7: 0e:8d:27:74:f3:3d:70:9a:c8:33:16:58:fe:99:08:d7:06:82: be:b1:3b:fb:15:e7:bd:1d:30:d1:77:c6:e3:ae:57:aa:5b:67: 6c:40:5e:53:e2:0a:26:cf:a5:1f:b5:66:d8:3f:d3:f6:00:a2: b0:8e:d5:b1:bb:9d:fe:14:da:c7:6d:d5:f7:f6:fe:22:77:d7: 22:34:5e:98:c8:37:50:e6:45:63:ab:a6:5d:2e:f3:aa:d6:1b: 35:bb:14:2d:a3:af:30:3d:4f:27:fc:2c:33:51:7e:5b:e6:b0: 58:01:a5:85:d3:ff:c3:63:4e:24:10:83:39:23:bf:53:2d:3f: 91:53:31:1b:81:ef:02:4c:85:1e:da:74:1f:6f:35:08:96:b3: 0d:c5:1d:6f:43:35:a0:5c:34:d3:d8:92:4e:d7:60:96:93:7b: 5a:8c:da:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcygpyGMd28gtOHIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkxMzA1MzMzMloXDTI0MTIxMjA2MzMzMlowLzEtMCsGA1UEAxMk YjlhZjlhNWMtYzVhNi00ZWMyLWI3MjAtODRiY2Q1MmRhMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEg2z2JoHeh7wLt2pVLbLVcXH2u7yJAMfEG5 XoZFqbJBFS7aClsshmoQPgQAecHIneolbcq3UfrzLUMtuW+t6/XRW4FEkfHska/g ZZIhXUNpL6tqHiX3ggU5tk1vtwZXOWGKu4oAuFDRIc3M7MAA46AC2V2ub4kKRtxs xXhFtiB2N7oyYUJMw9DdCQNi4O68KBTxyLGlIgD7Iu8iEajqvC5sW5Di5Ze0Bu4W YoqkH+BI4QOD6mo9hBfU24aCF5HnW1Te75ACQhGTXAteCnV9hGdXrK29x/jjkGQ6 YetRwt52p1MfrMxYUmtfYIjNmGAeFtWb0PlETJlErXtb85yX6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvF5bTy2HH7PwoqTA1+jD2S6+ltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzFkYTJlNzEtZGZhNi0z ZDA5LWJjMTctOTNhMGE3ZTczMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFolhdgi7UUYDHjKQCQf4i6WHySdsYZjecsZJkk98mZ+NW8UxtIiCVse Yjli8HzLCkmKoAPR0SbBR2JzOFT/t3G2X2n6yMJBvpwMC8t8zhWsJdlxLAWIOI/k xw6NJ3TzPXCayDMWWP6ZCNcGgr6xO/sV570dMNF3xuOuV6pbZ2xAXlPiCibPpR+1 Ztg/0/YAorCO1bG7nf4U2sdt1ff2/iJ31yI0XpjIN1DmRWOrpl0u86rWGzW7FC2j rzA9Tyf8LDNRflvmsFgBpYXT/8NjTiQQgzkjv1MtP5FTMRuB7wJMhR7adB9vNQiW sw3FHW9DNaBcNNPYkk7XYJaTe1qM2nk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:50 2024 by rpki-client on console-ams.rpki-client.org