$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3712109e-bade-30b0-aace-080c999fd3e4.roa File: 3712109e-bade-30b0-aace-080c999fd3e4.roa (raw, json) Hash identifier: 95yj6h1NUNVX2JVlSMeLqvmtaAq23o+b511QoYuLEgg= Subject key identifier: 39:B8:28:36:BB:44:0D:28:0F:CE:13:7C:62:EB:CA:CB:1F:FD:3E:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553330166CAC332401DE030C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3712109e-bade-30b0-aace-080c999fd3e4.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 98.18.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:01:66:ca:c3:32:40:1d:e0:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=d3c2c60e-1bf2-4d27-baf6-0e4a4633448c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:25:b4:43:8f:9c:34:fd:71:c3:bd:a9:3d:83: e4:f3:c8:16:84:1c:15:6d:6d:c9:80:48:1b:72:01: 57:a8:0b:19:5a:8d:e7:be:75:5e:d6:37:cf:82:f2: 94:90:88:dc:a3:f2:70:8b:26:df:8f:13:57:d7:61: 7b:56:e6:c7:e7:15:d3:59:93:61:b4:76:3e:4d:ae: ae:b7:a8:1d:df:8c:f9:02:d0:70:6f:e5:b1:49:fd: 5f:31:c2:c6:8c:34:f9:d4:74:e7:42:83:52:58:d4: de:de:03:36:15:4d:4c:03:66:f8:1d:40:3a:34:c4: 57:ef:62:34:6c:e5:6c:14:e9:a1:bf:7a:5e:aa:d1: bf:81:8f:c6:24:5e:56:ec:53:cc:80:a7:77:4e:e3: ba:d2:0d:72:68:b9:17:b7:fe:a8:9a:42:8a:c8:52: b5:28:19:6a:fb:28:46:62:61:1b:75:8b:31:89:2b: ac:13:13:7f:d8:40:41:ed:0f:7b:2b:11:f5:b6:34: ff:a4:5f:a8:89:7e:6e:85:2e:21:4c:04:be:f4:4e: 99:bf:8c:c6:d2:58:be:7f:78:e9:6f:9b:91:36:f3: b5:33:e6:c4:63:af:81:39:ca:60:29:2d:c5:5c:03: 3f:dc:66:a3:a1:33:77:2b:42:c4:42:05:8a:9b:d6: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B8:28:36:BB:44:0D:28:0F:CE:13:7C:62:EB:CA:CB:1F:FD:3E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3712109e-bade-30b0-aace-080c999fd3e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e1:53:e5:28:47:dd:84:cc:bb:de:48:e3:88:ce:9d:3e:78: eb:2d:92:f3:6d:bf:14:2e:dc:f6:fb:c5:0a:95:d6:2f:75:e9: d3:e9:d4:8d:a4:2d:33:0a:e9:14:c6:1d:7d:6d:89:cc:f2:af: 14:26:f9:6b:4c:22:f8:ec:8d:79:72:f1:56:f5:cd:40:55:89: 6f:9e:0f:c4:57:26:27:84:84:08:71:e0:6b:e6:c8:7c:1c:22: 0d:0b:98:e5:ef:7e:c9:6a:b1:43:9d:34:b4:c1:7c:7f:be:06: 31:f0:a0:8d:e4:0a:60:81:06:d6:79:3a:62:0a:b6:c1:a4:3d: b4:c9:5d:06:84:86:fe:02:ff:25:70:18:32:fd:b4:b8:e7:82: f1:1d:cc:55:c8:95:39:af:35:9b:5f:c1:1f:f1:47:8a:76:36: 80:33:50:f7:8f:a1:a8:ca:32:77:c2:fb:43:f1:13:97:f3:ae: 8a:c6:0e:77:ad:a3:3a:60:de:95:a9:6c:dd:94:84:15:d9:04: 7b:81:94:5f:86:71:c0:cb:55:16:31:a2:b8:85:da:42:b2:60: d1:d0:c2:42:d8:e7:02:e5:fe:b2:21:d0:8f:95:6e:e4:5c:54: db:ef:56:cf:e3:a6:64:12:9d:e5:41:88:ce:1d:c1:aa:03:dd: 81:d9:c5:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMwFmysMyQB3gMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZDNjMmM2MGUtMWJmMi00ZDI3LWJhZjYtMGU0YTQ2MzM0NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyW0Q4+cNP1xw72pPYPk88gWhBwVbW3JgEgb cgFXqAsZWo3nvnVe1jfPgvKUkIjco/JwiybfjxNX12F7VubH5xXTWZNhtHY+Ta6u t6gd34z5AtBwb+WxSf1fMcLGjDT51HTnQoNSWNTe3gM2FU1MA2b4HUA6NMRX72I0 bOVsFOmhv3peqtG/gY/GJF5W7FPMgKd3TuO60g1yaLkXt/6omkKKyFK1KBlq+yhG YmEbdYsxiSusExN/2EBB7Q97KxH1tjT/pF+oiX5uhS4hTAS+9E6Zv4zG0li+f3jp b5uRNvO1M+bEY6+BOcpgKS3FXAM/3GajoTN3K0LEQgWKm9bvZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm4KDa7RA0oD84TfGLryssf/T7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcxMjEwOWUtYmFkZS0z MGIwLWFhY2UtMDgwYzk5OWZkM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACThU+UoR92EzLveSOOIzp0+eOstkvNtvxQu3Pb7xQqV1i916dPp1I2k LTMK6RTGHX1ticzyrxQm+WtMIvjsjXly8Vb1zUBViW+eD8RXJieEhAhx4GvmyHwc Ig0LmOXvfslqsUOdNLTBfH++BjHwoI3kCmCBBtZ5OmIKtsGkPbTJXQaEhv4C/yVw GDL9tLjngvEdzFXIlTmvNZtfwR/xR4p2NoAzUPePoajKMnfC+0PxE5fzrorGDnet ozpg3pWpbN2UhBXZBHuBlF+GccDLVRYxoriF2kKyYNHQwkLY5wLl/rIh0I+VbuRc VNvvVs/jpmQSneVBiM4dwaoD3YHZxdg= -----END CERTIFICATE-----Generated at Thu May 23 13:44:56 2024 by rpki-client on console-fra.rpki-client.org