$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa File: f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa (raw, json) Hash identifier: e4GfL2GMSoQbCuZO0ghv6LXPYtvPdLUaT2G9qn5hyMQ= Subject key identifier: 3F:28:E5:32:40:3A:FF:7A:AB:A1:06:B9:52:89:1B:A1:80:8A:B2:BA Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285847600BA122F103BAE3F82B8280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 16839 IP address blocks: 149.96.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:a1:22:f1:03:ba:e3:f8:2b:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=2be6fe16-76e2-4095-b420-2d9261e27932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c9:97:ad:32:3c:0e:3c:ce:4e:45:98:cb:2b: 2c:3c:df:d2:10:bd:1a:1f:34:c5:6d:8a:a3:50:4e: 1b:88:48:51:18:49:13:09:82:f9:eb:e4:ef:8e:29: be:a0:c9:ef:28:82:5b:65:4e:9f:8b:67:ab:4c:23: 69:44:64:50:ad:2e:3f:98:b8:40:42:3f:1b:79:ef: 2a:01:a5:d5:5a:31:06:e1:5f:3b:b6:1d:6b:2a:2e: 2f:f3:99:be:70:46:2d:06:a7:30:42:9b:7b:d6:08: d9:b6:9f:96:53:af:8f:8e:6c:53:65:d5:9e:ce:1b: eb:15:70:de:16:9b:5d:0d:20:ae:b0:ce:eb:5f:81: 10:d1:a0:37:ba:46:94:97:6f:b9:bd:d8:f1:e0:c3: 81:8a:a5:74:f8:26:28:b3:89:4e:e5:5b:ad:87:04: fa:aa:9c:eb:b1:d6:e6:d7:3e:3c:07:a5:49:6d:0b: 72:19:6e:7c:85:5e:23:70:85:92:d5:56:cf:e6:08: 56:ba:60:c6:34:31:b4:30:cd:49:17:24:00:16:14: cf:c8:62:3f:92:88:aa:14:29:61:04:dd:59:cd:26: c6:aa:b8:47:cb:16:a1:40:a1:8c:79:3f:27:f7:9d: ac:fd:5a:89:e4:11:13:0c:8b:7c:9a:92:d8:9b:88: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:28:E5:32:40:3A:FF:7A:AB:A1:06:B9:52:89:1B:A1:80:8A:B2:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f85a6795-b1f9-3929-b2fb-ae363cdff2ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fe:57:da:dd:04:d4:7e:e5:22:cd:ee:86:71:4a:39:c6:5a: d9:a6:60:5d:dc:bd:05:d6:db:69:36:a7:73:ee:26:db:ca:1b: 29:0e:9f:74:1d:b1:4a:b0:c2:a4:43:66:b2:c7:71:5a:90:1f: 30:64:f8:12:6f:8f:6e:e4:92:82:e9:ab:d9:2a:d7:2e:dd:00: 0f:33:b2:e7:6b:c6:08:18:d7:dc:e8:e4:9f:df:50:c5:a5:a0: b9:aa:3e:44:b1:25:3b:4b:9d:e4:1f:c8:74:c9:b1:40:a5:b8: 5c:e1:11:13:b4:d9:bb:d1:d4:9b:14:58:c6:cf:01:a5:ca:e9: 48:89:15:01:e7:22:c1:56:5e:f1:b6:6d:14:ce:f7:27:3c:ad: a5:64:a9:e6:20:fe:8e:3f:44:d5:c0:17:1c:d7:9e:81:98:3b: 45:29:96:3c:95:4b:a5:dd:ba:65:98:d5:56:3c:ca:b5:27:6c: 39:b2:2b:d2:25:8c:0d:36:18:66:26:89:51:32:47:c2:6c:61: 11:dd:7e:c6:b7:0f:8c:74:2d:b4:33:7c:7c:29:75:c8:d7:1f: cb:8c:a9:0d:51:64:3a:15:a3:d8:cf:f8:a6:56:ca:0c:16:0b: 51:f8:0e:02:04:ab:e9:a1:fe:d2:6d:10:de:ae:40:f9:46:17: b0:24:1f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6Ei8QO64/grgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MmJlNmZlMTYtNzZlMi00MDk1LWI0MjAtMmQ5MjYxZTI3OTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsmXrTI8DjzOTkWYyyssPN/SEL0aHzTFbYqj UE4biEhRGEkTCYL56+Tvjim+oMnvKIJbZU6fi2erTCNpRGRQrS4/mLhAQj8bee8q AaXVWjEG4V87th1rKi4v85m+cEYtBqcwQpt71gjZtp+WU6+PjmxTZdWezhvrFXDe FptdDSCusM7rX4EQ0aA3ukaUl2+5vdjx4MOBiqV0+CYos4lO5VuthwT6qpzrsdbm 1z48B6VJbQtyGW58hV4jcIWS1VbP5ghWumDGNDG0MM1JFyQAFhTPyGI/koiqFClh BN1ZzSbGqrhHyxahQKGMeT8n952s/VqJ5BETDIt8mpLYm4iSvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8o5TJAOv96q6EGuVKJG6GAirK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjg1YTY3OTUtYjFmOS0z OTI5LWIyZmItYWUzNjNjZGZmMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH+V9rdBNR+5SLN7oZxSjnGWtmmYF3cvQXW22k2p3PuJtvKGykOn3Qd sUqwwqRDZrLHcVqQHzBk+BJvj27kkoLpq9kq1y7dAA8zsudrxggY19zo5J/fUMWl oLmqPkSxJTtLneQfyHTJsUCluFzhERO02bvR1JsUWMbPAaXK6UiJFQHnIsFWXvG2 bRTO9yc8raVkqeYg/o4/RNXAFxzXnoGYO0UpljyVS6XdumWY1VY8yrUnbDmyK9Il jA02GGYmiVEyR8JsYRHdfsa3D4x0LbQzfHwpdcjXH8uMqQ1RZDoVo9jP+KZWygwW C1H4DgIEq+mh/tJtEN6uQPlGF7AkH2s= -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:51 2024 by rpki-client on console-ams.rpki-client.org