$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa File: 0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa (raw, json) Hash identifier: 5qnGc8+iXWT2XOaSlVn4RRXWZwUTOY1mBdLNgP1oVhc= Subject key identifier: 0B:89:22:6C:E6:80:C1:0A:D2:7E:C9:EA:A3:99:75:75:5C:7B:74:06 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847E0950183DDE380A878878690 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 7029 IP address blocks: 98.22.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:95:01:83:dd:e3:80:a8:78:87:86:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=33e36b17-a497-4565-be7e-9d3385f4627d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:af:31:21:95:47:28:5c:af:29:6a:68:71: 44:d4:8e:c2:19:62:f5:1e:48:65:1a:9d:79:38:3f: ac:02:ee:5a:86:b2:fe:81:b5:85:24:a0:4c:b7:a8: cf:45:6e:69:2d:ff:18:1d:46:d9:9d:d6:74:1b:e3: f1:bf:bf:cd:dd:5b:cb:9b:e0:1f:25:d4:46:69:1e: 66:c5:72:37:2c:98:88:91:92:58:82:08:b7:ca:cc: fa:cd:ae:63:a5:57:c8:98:42:4c:bd:2b:8c:47:34: a2:08:7f:c0:54:f5:82:7c:21:9b:9a:f1:f3:a9:a6: a8:15:80:14:c9:db:4e:27:17:45:af:81:14:04:63: 11:d8:ef:09:06:81:2f:56:b5:ef:4a:e7:21:01:0c: 21:4f:e8:27:fc:3a:b1:97:a9:e1:26:4d:48:3d:ef: 73:45:34:fb:2d:b3:09:96:f6:98:65:7b:d2:c8:be: 1c:5a:53:b1:e2:39:39:f2:5a:ac:9d:9b:4a:3f:b2: 6f:4a:49:30:f0:33:a0:94:43:f9:41:1b:c5:d9:a0: 16:b5:75:cc:81:87:f2:80:18:3c:13:b3:04:8b:b8: 98:ef:80:7f:82:19:8e:6b:4f:19:82:bc:74:08:0a: 6d:e7:9f:79:b3:d6:86:87:e1:bc:ff:1b:fb:cd:77: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:89:22:6C:E6:80:C1:0A:D2:7E:C9:EA:A3:99:75:75:5C:7B:74:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:bc:8d:56:f7:4a:8a:82:2c:19:51:b0:20:6f:35:f6:dd:d6: e5:b1:ac:1e:89:03:9e:6c:3f:96:13:da:b6:77:8a:c3:65:ef: 74:dc:29:7c:e3:5c:dd:7b:84:e8:92:5c:7c:15:e6:7c:bc:94: 0f:3a:0f:1c:a5:d0:81:54:f0:8b:bc:d0:70:27:c0:a4:b5:a7: 91:0f:c5:08:b7:cd:35:51:a5:89:23:5a:76:2e:45:8d:b7:d7: 03:6a:dd:80:1d:3a:1c:fc:d9:bf:82:f8:68:a5:51:b2:0c:79: 59:ff:b8:84:9f:fa:4f:07:9d:05:25:d3:72:c7:37:f6:64:68: 13:fa:ab:e0:95:cf:07:ec:ce:1a:89:28:aa:65:7d:0f:5c:fb: 25:b5:73:eb:ab:0f:9b:2e:6f:a3:94:f3:28:59:c2:98:b2:1b: 91:92:84:6d:9e:2d:d5:70:52:56:fb:34:c3:66:d1:2e:f2:ca: 73:1d:ce:18:2c:d6:f0:0b:e1:63:9e:49:d0:07:88:ca:30:35: 81:b3:77:77:5f:59:65:07:e7:4f:02:52:b8:6e:79:6f:ba:55: b3:03:42:3c:a6:c3:49:ad:35:82:d4:47:cd:da:be:10:27:16: b3:c8:43:e5:ac:15:22:6b:3b:0a:59:0a:0e:8d:01:f8:73:be: 78:9a:59:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglQGD3eOAqHiHhpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk MzNlMzZiMTctYTQ5Ny00NTY1LWJlN2UtOWQzMzg1ZjQ2MjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG+vMSGVRyhcrylqaHFE1I7CGWL1HkhlGp15 OD+sAu5ahrL+gbWFJKBMt6jPRW5pLf8YHUbZndZ0G+Pxv7/N3VvLm+AfJdRGaR5m xXI3LJiIkZJYggi3ysz6za5jpVfImEJMvSuMRzSiCH/AVPWCfCGbmvHzqaaoFYAU ydtOJxdFr4EUBGMR2O8JBoEvVrXvSuchAQwhT+gn/Dqxl6nhJk1IPe9zRTT7LbMJ lvaYZXvSyL4cWlOx4jk58lqsnZtKP7JvSkkw8DOglEP5QRvF2aAWtXXMgYfygBg8 E7MEi7iY74B/ghmOa08Zgrx0CApt5595s9aGh+G8/xv7zXfZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuJImzmgMEK0n7J6qOZdXVce3QGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQ5MDMzYWQtN2ZiNS0z YjIwLTg2MTQtOGYyNGFkYzY5YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB68jVb3SoqCLBlRsCBvNfbd1uWxrB6JA55sP5YT2rZ3isNl73TcKXzj XN17hOiSXHwV5ny8lA86Dxyl0IFU8Iu80HAnwKS1p5EPxQi3zTVRpYkjWnYuRY23 1wNq3YAdOhz82b+C+GilUbIMeVn/uISf+k8HnQUl03LHN/ZkaBP6q+CVzwfszhqJ KKplfQ9c+yW1c+urD5sub6OU8yhZwpiyG5GShG2eLdVwUlb7NMNm0S7yynMdzhgs 1vAL4WOeSdAHiMowNYGzd3dfWWUH508CUrhueW+6VbMDQjymw0mtNYLUR83avhAn FrPIQ+WsFSJrOwpZCg6NAfhzvniaWcE= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:21 2024 by rpki-client on console-ams.rpki-client.org