$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21f1634b-7fcb-3c73-bf19-1b3d4e835a1c.roa File: 21f1634b-7fcb-3c73-bf19-1b3d4e835a1c.roa (raw, json) Hash identifier: huB18D6gBZ6KGy7FWQ3SfB2j2gqFpSsPkPIORH4vI/4= Subject key identifier: 61:58:29:13:9A:B4:DE:A5:52:D4:A3:1B:D3:7C:23:4F:F6:99:AC:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533304BA77BB04CD02CDA780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21f1634b-7fcb-3c73-bf19-1b3d4e835a1c.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 98.21.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:04:ba:77:bb:04:cd:02:cd:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=e8e76a9b-2423-4e5d-97cc-c506235709ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:4b:7a:34:63:cf:d7:29:ba:f5:27:a5:be: d6:b3:b6:64:9f:2e:fb:c5:b4:ae:83:ab:71:be:42: e2:15:54:b6:3a:4a:05:de:33:e5:b5:c6:cd:16:d0: 99:fb:5a:c7:58:ec:14:32:22:21:df:f2:41:97:16: 47:7b:28:a3:cc:82:47:6a:db:70:21:f3:62:09:0c: 9b:0b:2e:c0:7a:55:42:77:3b:82:38:c9:98:7e:54: 9f:9e:c7:b7:73:52:50:34:eb:f6:f6:5b:0a:53:94: 8a:66:c8:26:e3:69:54:34:46:00:38:07:4d:60:a3: e6:9e:46:39:45:9a:a3:d2:26:c2:65:b9:6f:85:75: b0:48:b9:ba:3d:b9:eb:82:df:c5:7f:1a:fb:0b:86: dc:82:8a:96:b4:b8:65:f8:3e:91:5f:41:f2:f3:27: cb:d5:2f:9a:28:1d:61:97:75:56:f5:d3:ee:ff:79: 11:39:53:cd:68:1b:ce:ba:00:6c:14:f2:35:31:d0: b4:fd:a9:d0:ed:1f:ab:cf:9f:bd:de:94:5e:02:cc: 44:22:ff:49:06:bd:38:04:cb:e6:2d:06:40:35:2a: 3c:fd:6b:9f:97:b5:eb:23:c5:75:5a:1d:a8:35:25: fa:8c:49:e2:bf:45:1e:ba:2d:0b:f7:c8:16:ad:61: fc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:58:29:13:9A:B4:DE:A5:52:D4:A3:1B:D3:7C:23:4F:F6:99:AC:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21f1634b-7fcb-3c73-bf19-1b3d4e835a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e6:66:d3:5d:8f:84:1c:0b:95:f5:46:68:61:a1:6e:b5:db: 88:a8:7f:28:82:90:aa:f9:07:3f:a5:35:88:98:58:bc:94:ee: 2a:cf:99:4e:15:db:78:af:57:3d:b1:0e:0a:4d:12:27:b2:88: b8:7c:07:00:17:83:bb:b5:18:9c:56:1d:15:85:20:18:71:cf: e0:28:23:dd:96:4d:5e:db:a9:56:8e:3f:ac:0c:22:58:7e:8b: 71:5d:6e:65:19:ff:41:96:21:65:70:9b:1b:42:3d:91:f9:47: 79:8d:7c:f7:e4:11:1b:d0:35:c5:2e:55:38:2f:a7:76:be:8e: 87:ce:ab:fd:35:fc:9c:c0:41:f1:dc:16:49:31:11:56:a2:c1: ce:69:07:4e:ed:a8:2a:ab:2c:fc:87:43:63:fb:29:3a:8f:f7: a9:78:e5:af:86:d3:c0:ad:5c:f7:8d:8c:9e:59:67:9e:46:fb: c4:05:71:76:b2:03:4b:fd:fe:06:dd:51:40:2e:e7:83:2a:5d: 6d:b1:5c:6c:45:1e:52:2b:77:f2:cc:4b:50:11:79:d2:33:ad: 32:a5:ed:11:c9:f3:e9:a1:69:c8:78:91:d2:de:76:c1:ed:92: 78:20:5b:e4:45:4a:5e:d9:79:76:ce:2c:0a:f6:77:9e:7b:9d: ee:df:26:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMwS6d7sEzQLNp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZThlNzZhOWItMjQyMy00ZTVkLTk3Y2MtYzUwNjIzNTcwOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOBLejRjz9cpuvUnpb7Ws7Zkny77xbSug6tx vkLiFVS2OkoF3jPltcbNFtCZ+1rHWOwUMiIh3/JBlxZHeyijzIJHattwIfNiCQyb Cy7AelVCdzuCOMmYflSfnse3c1JQNOv29lsKU5SKZsgm42lUNEYAOAdNYKPmnkY5 RZqj0ibCZblvhXWwSLm6Pbnrgt/Ffxr7C4bcgoqWtLhl+D6RX0Hy8yfL1S+aKB1h l3VW9dPu/3kROVPNaBvOugBsFPI1MdC0/anQ7R+rz5+93pReAsxEIv9JBr04BMvm LQZANSo8/Wufl7XrI8V1Wh2oNSX6jEniv0Ueui0L98gWrWH8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFYKROatN6lUtSjG9N8I0/2mazrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjFmMTYzNGItN2ZjYi0z YzczLWJmMTktMWIzZDRlODM1YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALmZtNdj4QcC5X1RmhhoW6124iofyiCkKr5Bz+lNYiYWLyU7irPmU4V 23ivVz2xDgpNEieyiLh8BwAXg7u1GJxWHRWFIBhxz+AoI92WTV7bqVaOP6wMIlh+ i3FdbmUZ/0GWIWVwmxtCPZH5R3mNfPfkERvQNcUuVTgvp3a+jofOq/01/JzAQfHc FkkxEVaiwc5pB07tqCqrLPyHQ2P7KTqP96l45a+G08CtXPeNjJ5ZZ55G+8QFcXay A0v9/gbdUUAu54MqXW2xXGxFHlIrd/LMS1ARedIzrTKl7RHJ8+mhach4kdLedsHt knggW+RFSl7ZeXbOLAr2d557ne7fJrk= -----END CERTIFICATE-----Generated at Thu May 23 01:44:10 2024 by rpki-client on console-fra.rpki-client.org