$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dc5c3ae-c8e5-36d4-be1b-dce51da50845.roa File: 4dc5c3ae-c8e5-36d4-be1b-dce51da50845.roa (raw, json) Hash identifier: ZH8G8+xhQOMZfisk6TFBJ8J16poAkBM6W4dpWXBo/4s= Subject key identifier: C3:C1:A8:58:0E:E1:A1:20:BF:A1:CA:CB:CD:51:8D:4A:C5:45:A9:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333069BD9F1E8FA372A3C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dc5c3ae-c8e5-36d4-be1b-dce51da50845.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 98.22.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:06:9b:d9:f1:e8:fa:37:2a:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=b6197f1a-7fc6-4603-97c7-5b4859a7b3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:2c:99:63:a2:a4:2b:fc:a8:e7:1a:69:59: 32:d4:51:a0:83:a9:82:05:9d:30:3e:fa:96:47:ef: 28:51:35:11:c5:b3:34:e3:6b:e5:03:f9:90:c1:2b: b5:ab:06:39:f9:91:e7:26:83:69:79:56:30:42:10: 27:1b:3d:f1:03:b8:02:61:13:c7:0b:03:bf:5e:70: 6f:fe:c1:a0:56:bf:51:8a:60:3a:69:d7:35:34:20: 7d:cf:33:a1:0c:76:4d:2e:02:9f:c9:d3:27:37:fd: 50:b4:49:ed:cd:e2:fc:bf:1a:fa:65:0f:e1:14:f3: 26:82:b9:21:6b:d6:13:10:48:33:8b:5c:55:40:85: c8:04:2b:48:95:81:67:cd:be:d2:d2:fb:4a:a4:49: da:08:cf:a3:a6:22:9c:f1:a6:33:ee:46:30:38:7f: 07:c5:88:7c:41:80:56:72:8f:33:3b:28:1f:27:47: 88:f6:d1:64:98:5c:5a:52:41:83:96:a0:ad:a9:43: 45:a6:77:d1:3f:7c:eb:86:e7:67:72:f4:c7:70:6a: d5:6b:50:d1:a9:bb:c2:55:51:35:16:64:2a:0e:7d: 68:72:b5:a1:f4:f8:72:0e:d0:d9:a7:fa:2f:fa:f4: 41:42:03:cd:dd:4f:0a:33:6e:db:8f:98:6c:29:5f: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C1:A8:58:0E:E1:A1:20:BF:A1:CA:CB:CD:51:8D:4A:C5:45:A9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dc5c3ae-c8e5-36d4-be1b-dce51da50845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d9:7d:c5:3e:c2:4f:b1:e5:1a:f0:11:38:7c:3e:e9:01:5a: 37:e4:80:69:68:dd:94:35:e8:02:63:a3:84:18:27:59:97:39: f8:96:b6:15:2c:c2:62:11:19:30:dd:2f:a0:6e:5a:3b:3c:51: 03:2e:e3:28:e4:0f:da:8a:2c:db:85:66:00:4f:d2:ad:86:f7: 7b:c7:40:34:61:36:f9:19:ee:3f:2a:66:9e:54:32:e0:9a:fd: b0:a2:fe:d3:9a:ce:2f:ac:f3:54:b0:8d:a5:f9:c8:b3:1d:a6: 53:cb:78:63:3b:83:dd:96:f7:2f:93:c3:ee:28:5d:71:81:16: cf:05:bd:f4:4d:b0:7b:65:e3:46:df:78:dd:31:8b:1b:e3:83: 78:39:0b:83:68:fa:cb:71:e2:41:b9:c9:89:3c:cd:84:e0:b9: eb:db:3c:0c:a3:2c:da:b1:3c:cb:42:53:73:00:61:35:b3:d9: 16:bd:1a:82:3b:a8:fe:35:78:55:64:15:8a:e7:1e:82:e1:86: cc:6a:88:80:32:3e:2c:e2:e1:ac:2f:d9:81:f1:99:6a:e6:fa: 4f:da:67:21:ae:32:76:77:55:0c:8e:94:15:bd:d9:ab:14:48: bf:e9:72:30:77:b2:26:aa:8c:6a:72:26:83:50:0c:fb:87:b8: 65:f9:b8:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMwab2fHo+jcqPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk YjYxOTdmMWEtN2ZjNi00NjAzLTk3YzctNWI0ODU5YTdiM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPosmWOipCv8qOcaaVky1FGgg6mCBZ0wPvqW R+8oUTURxbM042vlA/mQwSu1qwY5+ZHnJoNpeVYwQhAnGz3xA7gCYRPHCwO/XnBv /sGgVr9RimA6adc1NCB9zzOhDHZNLgKfydMnN/1QtEntzeL8vxr6ZQ/hFPMmgrkh a9YTEEgzi1xVQIXIBCtIlYFnzb7S0vtKpEnaCM+jpiKc8aYz7kYwOH8HxYh8QYBW co8zOygfJ0eI9tFkmFxaUkGDlqCtqUNFpnfRP3zrhudncvTHcGrVa1DRqbvCVVE1 FmQqDn1ocrWh9PhyDtDZp/ov+vRBQgPN3U8KM27bj5hsKV8hAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPBqFgO4aEgv6HKy81RjUrFRamJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRjNWMzYWUtYzhlNS0z NmQ0LWJlMWItZGNlNTFkYTUwODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLZfcU+wk+x5RrwETh8PukBWjfkgGlo3ZQ16AJjo4QYJ1mXOfiWthUs wmIRGTDdL6BuWjs8UQMu4yjkD9qKLNuFZgBP0q2G93vHQDRhNvkZ7j8qZp5UMuCa /bCi/tOazi+s81SwjaX5yLMdplPLeGM7g92W9y+Tw+4oXXGBFs8FvfRNsHtl40bf eN0xixvjg3g5C4No+stx4kG5yYk8zYTguevbPAyjLNqxPMtCU3MAYTWz2Ra9GoI7 qP41eFVkFYrnHoLhhsxqiIAyPizi4awv2YHxmWrm+k/aZyGuMnZ3VQyOlBW92asU SL/pcjB3siaqjGpyJoNQDPuHuGX5uPI= -----END CERTIFICATE-----Generated at Thu May 23 01:44:13 2024 by rpki-client on console-fra.rpki-client.org