$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa File: e820c2de-4153-3772-8779-b9ed95316688.roa (raw, json) Hash identifier: ZfsJne1PkgQC61rIYbu6EFli64vYHjZ5fqyMqe+3mFY= Subject key identifier: 12:56:F8:3F:89:40:C5:4A:26:72:AB:76:68:00:F9:49:D9:DA:C5:D2 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285845A15E20630B56BD80A42EA280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa Signing time: Mon 22 Apr 2024 13:00:33 +0000 ROA not before: Mon 22 Apr 2024 13:00:33 +0000 ROA not after: Sun 21 Jul 2024 13:00:33 +0000 asID: 16839 IP address blocks: 199.91.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:5e:20:63:0b:56:bd:80:a4:2e:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 22 13:00:33 2024 GMT Not After : Jul 21 13:00:33 2024 GMT Subject: CN=8db923f9-eea1-4c69-b135-0041c426b0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:98:30:7a:75:86:cc:57:7c:ba:9d:1b:42: be:8f:b9:d2:4a:89:a4:cc:c6:3b:9c:56:21:be:72: 16:dd:d0:5a:f5:48:13:52:64:ec:3d:34:f6:0c:28: 50:26:f2:77:8b:dd:36:4e:32:ad:30:ba:d3:0e:1c: e9:76:6c:52:4e:f4:f2:ec:e2:66:27:9f:db:6d:43: d9:39:36:64:fd:aa:e6:a1:87:e3:e9:5e:40:c2:28: 56:71:b6:a9:b3:1e:9f:10:77:f1:95:2a:1b:8f:f0: f9:90:ea:ce:10:d2:ab:6f:6d:b3:4f:3b:3a:bd:c2: 3b:b6:1b:f7:3f:45:26:24:f7:e7:9d:51:4f:53:19: 42:80:51:61:9c:5a:f7:6a:9c:d6:1d:21:f9:a5:40: 19:1a:b1:3d:31:2d:57:c2:b4:44:8d:1b:bc:4e:de: 92:15:05:46:24:b4:75:92:4c:8a:e5:7a:70:f7:cd: c6:66:a4:04:40:70:a7:dc:ea:db:96:1c:d5:40:a2: 82:8c:d8:00:19:7a:06:af:47:fc:f0:e2:03:23:49: d3:a3:de:5a:61:5f:42:5f:a8:f8:b6:e3:ad:d5:ce: d3:16:2b:50:3d:ee:4c:90:33:b7:9b:c0:12:7f:1f: b4:76:4b:dd:0f:88:bd:f2:90:de:01:0a:c8:e2:5e: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:56:F8:3F:89:40:C5:4A:26:72:AB:76:68:00:F9:49:D9:DA:C5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:f0:7d:fd:05:e2:aa:49:d7:91:b1:1f:34:6a:e9:0d:f4:9e: b8:1a:39:e3:8d:34:41:9c:52:a7:90:fd:93:6b:32:f2:65:f4: 22:72:35:17:f6:1c:48:85:91:f8:ae:3a:35:05:03:f5:23:8b: f2:49:a4:e9:da:7f:bb:80:5e:ba:f7:58:5b:79:9f:ed:06:91: 50:0a:8e:15:aa:1a:51:9d:0e:4a:6d:20:98:fc:42:4b:39:46: 41:17:4b:9b:df:15:d9:1b:bb:cf:d2:dc:94:2c:36:3f:5d:fc: 64:34:00:25:b6:03:53:f7:0b:8f:ec:a5:bf:4d:49:ed:8a:3e: f5:e5:51:8c:5e:bf:f4:18:1c:b5:78:2f:88:0a:df:ba:6b:d6: 85:81:27:f4:73:f1:95:a6:24:da:14:ee:25:17:1d:bb:46:7f: 70:fb:c7:d6:32:0b:0d:f5:b3:30:83:54:6c:ed:12:c0:ff:7e: 56:ec:c8:1a:d3:38:a1:5c:1d:19:e0:7d:ce:6e:46:48:48:e8: 90:b9:19:0b:fe:ce:71:33:af:11:ef:ef:c1:86:62:6b:1b:1d: eb:17:d9:e5:44:ca:aa:a9:11:7e:76:07:a6:49:79:2b:cd:12: be:94:6e:a3:87:27:e8:16:a7:3a:cc:36:2f:39:cd:2e:02:0e: a9:44:e4:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiBjC1a9gKQuooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk OGRiOTIzZjktZWVhMS00YzY5LWIxMzUtMDA0MWM0MjZiMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1aYMHp1hsxXfLqdG0K+j7nSSomkzMY7nFYh vnIW3dBa9UgTUmTsPTT2DChQJvJ3i902TjKtMLrTDhzpdmxSTvTy7OJmJ5/bbUPZ OTZk/armoYfj6V5AwihWcbapsx6fEHfxlSobj/D5kOrOENKrb22zTzs6vcI7thv3 P0UmJPfnnVFPUxlCgFFhnFr3apzWHSH5pUAZGrE9MS1XwrREjRu8Tt6SFQVGJLR1 kkyK5Xpw983GZqQEQHCn3OrblhzVQKKCjNgAGXoGr0f88OIDI0nTo95aYV9CX6j4 tuOt1c7TFitQPe5MkDO3m8ASfx+0dkvdD4i98pDeAQrI4l4kJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJW+D+JQMVKJnKrdmgA+UnZ2sXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZTgyMGMyZGUtNDE1My0z NzcyLTg3NzktYjllZDk1MzE2Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDwff0F4qpJ15GxHzRq6Q30nrgaOeONNEGcUqeQ/ZNrMvJl9CJyNRf2 HEiFkfiuOjUFA/Uji/JJpOnaf7uAXrr3WFt5n+0GkVAKjhWqGlGdDkptIJj8Qks5 RkEXS5vfFdkbu8/S3JQsNj9d/GQ0ACW2A1P3C4/spb9NSe2KPvXlUYxev/QYHLV4 L4gK37pr1oWBJ/Rz8ZWmJNoU7iUXHbtGf3D7x9YyCw31szCDVGztEsD/flbsyBrT OKFcHRngfc5uRkhI6JC5GQv+znEzrxHv78GGYmsbHesX2eVEyqqpEX52B6ZJeSvN Er6UbqOHJ+gWpzrMNi85zS4CDqlE5DE= -----END CERTIFICATE-----Generated at Wed May 8 15:12:57 2024 by rpki-client on console-ams.rpki-client.org