$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa File: f4185a63-316f-3d91-b674-52ffad72f800.roa (raw, json) Hash identifier: AYB9Z0SriDm+45xVDr1ANd5mro+O2d5//DDYjfIe4dU= Subject key identifier: 79:32:7B:A1:77:AA:C6:1B:24:2E:E7:F4:FA:06:18:4D:CA:DE:9E:C4 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858473287DCB0FCFACF4A6AE18FC0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa Signing time: Fri 13 Sep 2024 05:44:07 +0000 ROA not before: Fri 13 Sep 2024 05:44:07 +0000 ROA not after: Thu 12 Dec 2024 06:44:07 +0000 asID: 16839 IP address blocks: 149.96.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:32:87:dc:b0:fc:fa:cf:4a:6a:e1:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 13 05:44:07 2024 GMT Not After : Dec 12 06:44:07 2024 GMT Subject: CN=72389b80-c7cc-4e86-860a-32c1b6247153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:fa:4d:8d:cc:bd:b0:fb:a5:0f:c2:c4:12: e0:a9:97:78:d6:dc:8f:3b:64:83:f8:79:0b:de:18: 97:05:92:8d:50:0e:56:67:df:19:6b:d7:44:98:cb: a5:94:b4:ad:47:04:f4:1c:6a:f5:ca:2d:b2:ba:4f: 08:2f:61:e1:51:7d:1a:98:1d:f0:2f:19:50:7c:d1: 1f:dc:20:f9:32:9e:f4:bb:ad:76:c5:df:f5:68:2e: 03:0a:03:4e:78:34:46:2f:03:a2:59:2b:04:98:0a: 7c:e9:1c:9d:42:be:e5:c8:e0:5b:38:c6:6c:bf:4a: 5b:e0:f2:d5:6e:2f:4b:78:ff:97:9b:c2:90:e6:69: 8a:56:48:3c:ec:dd:67:e7:1b:91:c8:7d:64:4e:d1: 45:fb:cb:9c:7e:db:f4:73:c8:68:9a:85:40:44:32: 6b:b5:15:05:61:3a:8d:be:20:c9:d9:a1:ee:68:f7: b7:fa:03:30:77:22:c1:5b:57:01:43:73:72:8c:72: aa:9c:f7:2e:3c:fc:e7:b2:e8:f2:6e:23:17:14:c4: 79:fa:93:65:3d:eb:f1:ac:6d:7e:54:4d:3f:c9:46: 0f:93:70:ab:e3:6b:e1:0c:13:dd:44:3b:9a:ab:c5: a5:92:d0:ca:d6:5f:bc:0c:b6:e1:5c:f3:66:c3:79: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:32:7B:A1:77:AA:C6:1B:24:2E:E7:F4:FA:06:18:4D:CA:DE:9E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f4185a63-316f-3d91-b674-52ffad72f800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:6d:ee:86:1e:32:1e:42:3e:36:e5:6d:c4:b2:2a:4b:cc:8e: e3:2f:e0:87:d2:f1:2a:6f:e7:6f:10:3a:f3:5c:c2:f5:14:43: 71:78:42:07:c7:70:16:c4:4a:a6:0d:0a:a2:53:5b:35:2f:4f: a3:da:22:e8:08:4d:05:d3:e1:e3:28:72:86:16:db:e7:90:bb: 92:bf:48:19:4e:a1:52:5f:9b:e9:4c:39:6d:59:1d:73:b1:7c: 88:70:05:20:3d:af:99:ab:4e:6b:cc:60:c9:85:25:81:12:b2: 23:31:46:c7:a7:e2:74:ae:86:3a:20:a9:c5:f2:af:d8:21:91: 23:48:e7:6f:b3:6a:42:2b:e8:76:33:64:54:ca:4c:1d:37:f5: b1:d9:b8:23:b1:d2:76:da:c4:21:9b:ee:12:cb:ef:61:24:44: 03:33:0a:15:12:ed:fa:cf:f9:74:f7:24:4e:c5:6e:16:a9:c3: 49:f1:b5:af:39:57:17:ab:15:57:ce:64:31:be:45:5d:8a:ee: 67:c7:38:7f:88:7c:bc:72:09:fb:24:66:ed:b8:b1:28:66:bd: 0c:a7:4b:96:06:e5:8e:d4:63:c8:6b:9b:bf:73:bb:a4:50:7a: 5c:08:fd:0f:cb:d6:d4:e0:d6:74:99:62:23:e4:36:ea:f9:58: 33:6d:a3:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcyh9yw/PrPSmrhj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkxMzA1NDQwN1oXDTI0MTIxMjA2NDQwN1owLzEtMCsGA1UEAxMk NzIzODliODAtYzdjYy00ZTg2LTg2MGEtMzJjMWI2MjQ3MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi236TY3MvbD7pQ/CxBLgqZd41tyPO2SD+HkL 3hiXBZKNUA5WZ98Za9dEmMullLStRwT0HGr1yi2yuk8IL2HhUX0amB3wLxlQfNEf 3CD5Mp70u612xd/1aC4DCgNOeDRGLwOiWSsEmAp86RydQr7lyOBbOMZsv0pb4PLV bi9LeP+Xm8KQ5mmKVkg87N1n5xuRyH1kTtFF+8ucftv0c8homoVARDJrtRUFYTqN viDJ2aHuaPe3+gMwdyLBW1cBQ3NyjHKqnPcuPPznsujybiMXFMR5+pNlPevxrG1+ VE0/yUYPk3Cr42vhDBPdRDuaq8WlktDK1l+8DLbhXPNmw3nDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkye6F3qsYbJC7n9PoGGE3K3p7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjQxODVhNjMtMzE2Zi0z ZDkxLWI2NzQtNTJmZmFkNzJmODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5t7oYeMh5CPjblbcSyKkvMjuMv4IfS8Spv528QOvNcwvUUQ3F4QgfH cBbESqYNCqJTWzUvT6PaIugITQXT4eMocoYW2+eQu5K/SBlOoVJfm+lMOW1ZHXOx fIhwBSA9r5mrTmvMYMmFJYESsiMxRsen4nSuhjogqcXyr9ghkSNI52+zakIr6HYz ZFTKTB039bHZuCOx0nbaxCGb7hLL72EkRAMzChUS7frP+XT3JE7Fbhapw0nxta85 VxerFVfOZDG+RV2K7mfHOH+IfLxyCfskZu24sShmvQynS5YG5Y7UY8hrm79zu6RQ elwI/Q/L1tTg1nSZYiPkNur5WDNto/E= -----END CERTIFICATE-----Generated at Fri Nov 22 04:23:07 2024 by rpki-client on console-fra.rpki-client.org