$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd46934c-37f3-3103-889a-e5bc9213c314.roa File: dd46934c-37f3-3103-889a-e5bc9213c314.roa (raw, json) Hash identifier: DhPaIziYR2LEFGn8s6fSpmQszmZy26WPY4AsT6+oEAI= Subject key identifier: FF:7D:71:81:98:7A:CC:2D:F2:F0:2B:B8:B1:B6:D4:FC:8A:02:0B:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584553330410C7F53EA51EB18280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd46934c-37f3-3103-889a-e5bc9213c314.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 98.21.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:04:10:c7:f5:3e:a5:1e:b1:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=5fbbacf5-50ba-4b2d-b598-aeb8ad55c5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:c2:49:85:f6:99:21:2e:02:aa:1f:0e:3e: 41:eb:b1:33:9f:b0:1a:47:07:84:71:40:96:15:f5: 18:82:ed:b6:60:bc:25:3f:82:31:02:dc:7b:5c:19: 72:f6:dd:de:63:9e:17:93:7e:a5:c1:a0:fe:c4:f0: 6a:25:39:20:df:57:be:d6:7c:52:d4:ef:d3:53:03: 02:9e:9a:aa:32:78:95:83:fa:97:2b:58:36:0a:c0: 8e:9c:95:9d:ee:c6:17:1d:1f:41:a8:f6:99:c1:fd: 98:6c:32:6e:18:db:44:18:f6:d6:ff:e2:b9:3c:ac: 20:81:ee:07:89:ff:70:0e:b7:53:ed:73:26:99:fa: f1:b1:6c:56:23:38:65:35:21:4f:ee:bf:9b:58:08: c3:a0:cd:50:c2:9f:a9:a8:da:68:73:af:70:2b:66: 42:12:8c:c7:a6:20:16:a8:a7:56:a8:62:6c:80:a2: c9:e0:73:a5:9a:80:bd:64:b3:d7:2a:10:8c:b0:c6: 7d:85:f8:57:0a:9a:b0:ed:ee:a4:1a:f5:1a:af:aa: 1f:8a:9f:86:85:8d:a4:ab:20:71:ed:50:6b:cc:76: 8a:fb:62:fc:73:b6:ac:ac:c3:a2:c6:1a:6a:44:b2: 5d:d8:35:8f:31:13:c8:f2:aa:5a:d7:a1:3a:da:3e: a7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7D:71:81:98:7A:CC:2D:F2:F0:2B:B8:B1:B6:D4:FC:8A:02:0B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd46934c-37f3-3103-889a-e5bc9213c314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c2:8d:ee:10:a9:73:41:c2:71:e2:5d:37:59:51:95:c8:df: e7:d5:a4:ff:97:03:9f:9a:49:42:5a:1c:74:2a:72:1c:2a:ab: 61:01:66:85:95:e5:81:ae:87:da:19:b2:1b:88:5a:60:c5:42: 03:8e:45:65:59:30:be:f2:c5:35:ba:a4:d5:2d:48:1c:7c:d8: 2f:1e:63:8b:e5:ec:b1:ba:89:76:a4:f2:c1:7d:3d:ed:a2:b0: f5:8b:a3:f9:9b:c5:91:7f:36:65:f3:a2:76:77:a4:8d:e9:14: 3b:89:1d:20:4f:1b:72:d2:ea:4c:51:16:eb:44:4b:39:b1:e8: 4d:b2:95:e7:6c:f9:fd:ac:46:98:c9:31:60:4e:7f:79:d7:10: 06:c9:07:5e:ac:30:06:06:62:35:f2:d1:96:07:85:86:e4:db: c7:5c:e0:e5:2c:61:f0:85:bd:11:1a:2c:e0:df:f9:be:ca:42: de:40:09:6a:78:79:a9:4c:37:c8:8c:eb:17:fc:96:1c:72:68: 59:70:7d:c9:bb:89:e8:a2:7c:23:92:4a:cf:8b:fc:13:e4:19: 7f:73:28:88:c3:04:a4:63:3c:66:6c:6f:26:d2:fb:f8:1c:88: 1a:fb:3f:3b:a3:47:43:48:32:1a:55:6a:f0:25:28:ca:96:cf: 4b:78:67:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMwQQx/U+pR6xgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NWZiYmFjZjUtNTBiYS00YjJkLWI1OTgtYWViOGFkNTVjNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGvCSYX2mSEuAqofDj5B67Ezn7AaRweEcUCW FfUYgu22YLwlP4IxAtx7XBly9t3eY54Xk36lwaD+xPBqJTkg31e+1nxS1O/TUwMC npqqMniVg/qXK1g2CsCOnJWd7sYXHR9BqPaZwf2YbDJuGNtEGPbW/+K5PKwgge4H if9wDrdT7XMmmfrxsWxWIzhlNSFP7r+bWAjDoM1Qwp+pqNpoc69wK2ZCEozHpiAW qKdWqGJsgKLJ4HOlmoC9ZLPXKhCMsMZ9hfhXCpqw7e6kGvUar6ofip+GhY2kqyBx 7VBrzHaK+2L8c7asrMOixhpqRLJd2DWPMRPI8qpa16E62j6n6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP99cYGYeswt8vAruLG21PyKAgs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGQ0NjkzNGMtMzdmMy0z MTAzLTg4OWEtZTViYzkyMTNjMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPCje4QqXNBwnHiXTdZUZXI3+fVpP+XA5+aSUJaHHQqchwqq2EBZoWV 5YGuh9oZshuIWmDFQgOORWVZML7yxTW6pNUtSBx82C8eY4vl7LG6iXak8sF9Pe2i sPWLo/mbxZF/NmXzonZ3pI3pFDuJHSBPG3LS6kxRFutESzmx6E2yleds+f2sRpjJ MWBOf3nXEAbJB16sMAYGYjXy0ZYHhYbk28dc4OUsYfCFvREaLODf+b7KQt5ACWp4 ealMN8iM6xf8lhxyaFlwfcm7ieiifCOSSs+L/BPkGX9zKIjDBKRjPGZsbybS+/gc iBr7PzujR0NIMhpVavAlKMqWz0t4Z5c= -----END CERTIFICATE-----Generated at Sat May 18 01:54:42 2024 by rpki-client on console-ams.rpki-client.org