$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c78fdc72-dfd2-3f66-b144-a18f85410236.roa File: c78fdc72-dfd2-3f66-b144-a18f85410236.roa (raw, json) Hash identifier: OsWncmhdgkDoW57FfZATa69HNtTfS8bRzIT1Llsh9GI= Subject key identifier: 6C:17:4C:74:BE:B4:21:BF:B2:0A:14:EA:FF:85:EC:FA:D4:23:03:75 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E1EE222106BED6FD1D440 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c78fdc72-dfd2-3f66-b144-a18f85410236.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 149.96.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:1e:e2:22:10:6b:ed:6f:d1:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=ab18cb9a-f2e1-4a83-9630-699a366e4d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:56:a8:69:fb:dc:0c:9c:a5:7e:d0:53:16:93: f8:64:5a:cd:ba:cb:c7:4f:b8:5e:a6:11:94:11:a7: 2a:5d:f5:d7:7a:14:dc:07:9a:d7:d2:8d:03:cb:65: 25:ca:36:cb:c5:04:de:51:f9:fd:ce:8f:46:d7:2e: 4a:f7:25:39:f9:04:a9:b2:39:fa:4c:ff:3a:97:a6: b4:ab:40:e8:db:e0:ed:6f:7a:dd:d0:37:3b:ea:32: 61:e3:27:2d:85:34:2c:32:d6:ba:33:cc:80:64:78: f0:91:8f:e8:6b:8d:c2:e9:82:f1:02:77:4d:d2:1b: 05:02:b2:4e:54:54:16:4e:cd:a1:6f:76:ba:c7:5a: f5:65:e9:d9:e6:e9:ba:6f:e2:b8:13:59:aa:8b:d6: b1:29:0c:61:8a:1f:23:92:06:59:df:6c:bc:df:87: 1a:c6:cb:70:d9:1a:26:68:0e:f5:d2:43:a9:b1:11: d9:46:f2:fd:38:21:ac:af:e5:98:d0:02:e4:67:1f: f5:e5:fd:72:d3:00:12:3b:b2:d2:64:ee:81:b2:46: 9d:f4:b4:8f:06:30:36:ce:65:58:94:d0:de:55:f7: 5a:99:44:a2:80:a5:71:56:f8:bc:6b:92:5b:e5:97: a5:df:4d:4d:12:2d:d7:46:54:49:27:3a:98:8d:55: bc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:17:4C:74:BE:B4:21:BF:B2:0A:14:EA:FF:85:EC:FA:D4:23:03:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c78fdc72-dfd2-3f66-b144-a18f85410236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:29:45:fc:65:f3:47:8e:39:dd:82:bf:86:33:30:f4:2a:00: b4:86:a6:a6:0d:d4:c4:c5:7f:be:3f:94:3c:2c:02:d5:6e:c6: bb:49:be:f1:e9:f8:52:9d:fe:0f:30:40:25:ef:d9:47:77:bc: df:e8:f5:f9:5d:fb:9c:ea:01:5c:20:7b:ec:6c:a5:08:08:11: 9c:10:30:89:38:4b:2b:4a:ec:20:26:2d:3c:2a:bb:c9:b9:20: be:66:bd:20:8b:ae:ff:7c:e2:53:ba:26:6a:07:23:2a:67:f3: 6c:d5:1d:b3:09:02:14:e0:29:37:78:14:0b:d9:ee:e2:12:1b: 9d:fc:be:3b:10:c3:33:6d:34:40:8d:8d:e3:f8:e8:d8:cc:6c: 0b:7d:3f:74:a5:07:44:0a:28:db:66:96:30:28:69:ff:66:c5: c4:56:ee:b9:f1:5a:8f:dc:94:e2:2c:a6:4b:73:fe:71:66:d1: 26:18:53:87:17:27:89:2d:c1:f7:6c:87:d1:74:0a:27:34:1f: a5:15:64:ee:c5:36:e1:b9:2a:e0:84:1f:54:6c:8f:b3:83:45: 73:94:34:02:8c:e7:f5:8e:01:de:ce:a1:e3:8a:f7:2f:b8:47: 56:e6:c8:17:7a:1d:0f:6c:3d:19:da:7d:1f:6c:22:80:cd:88: a0:7f:37:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXh7iIhBr7W/R1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk YWIxOGNiOWEtZjJlMS00YTgzLTk2MzAtNjk5YTM2NmU0ZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFaoafvcDJylftBTFpP4ZFrNusvHT7hephGU EacqXfXXehTcB5rX0o0Dy2UlyjbLxQTeUfn9zo9G1y5K9yU5+QSpsjn6TP86l6a0 q0Do2+Dtb3rd0Dc76jJh4ycthTQsMta6M8yAZHjwkY/oa43C6YLxAndN0hsFArJO VFQWTs2hb3a6x1r1ZenZ5um6b+K4E1mqi9axKQxhih8jkgZZ32y834caxstw2Rom aA710kOpsRHZRvL9OCGsr+WY0ALkZx/15f1y0wASO7LSZO6Bskad9LSPBjA2zmVY lNDeVfdamUSigKVxVvi8a5Jb5Zel301NEi3XRlRJJzqYjVW8rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwXTHS+tCG/sgoU6v+F7PrUIwN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYzc4ZmRjNzItZGZkMi0z ZjY2LWIxNDQtYTE4Zjg1NDEwMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEpRfxl80eOOd2Cv4YzMPQqALSGpqYN1MTFf74/lDwsAtVuxrtJvvHp +FKd/g8wQCXv2Ud3vN/o9fld+5zqAVwge+xspQgIEZwQMIk4SytK7CAmLTwqu8m5 IL5mvSCLrv984lO6JmoHIypn82zVHbMJAhTgKTd4FAvZ7uISG538vjsQwzNtNECN jeP46NjMbAt9P3SlB0QKKNtmljAoaf9mxcRW7rnxWo/clOIspktz/nFm0SYYU4cX J4ktwfdsh9F0Cic0H6UVZO7FNuG5KuCEH1Rsj7ODRXOUNAKM5/WOAd7OoeOK9y+4 R1bmyBd6HQ9sPRnafR9sIoDNiKB/N2A= -----END CERTIFICATE-----Generated at Wed May 8 02:19:35 2024 by rpki-client on console-ams.rpki-client.org