$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13f8b48d-987f-3c57-85f8-3033b23c241a.roa File: 13f8b48d-987f-3c57-85f8-3033b23c241a.roa (raw, json) Hash identifier: vN+KpTQkNIoeuNS/YgKHYWmFtUmEGmlJz4YSwnhYnqw= Subject key identifier: 38:35:DA:85:C8:63:B6:ED:6D:98:FB:7A:58:EA:9D:BC:C7:04:0C:63 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15532E8B298A4ECD0BA7980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13f8b48d-987f-3c57-85f8-3033b23c241a.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 98.16.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:32:e8:b2:98:a4:ec:d0:ba:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=511864aa-dd74-40bd-b97e-5a9753518372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:8f:88:a1:de:77:55:b5:4e:45:58:52:65: 19:f0:a1:45:e7:e8:e9:d8:77:3b:de:18:c9:dc:af: 5d:b8:5f:87:ab:75:5a:cb:1a:c3:1b:1c:cb:d3:87: 69:67:f3:9c:e9:d2:b1:7d:95:87:15:4c:e2:e1:b5: 5b:c5:a9:28:be:aa:f7:60:b6:5a:d6:84:ac:7e:cb: 99:76:07:0b:3e:35:93:2f:69:7a:74:3c:35:5b:b0: f0:74:35:6a:7a:7b:cf:97:a3:be:4b:5e:75:2b:3a: 49:e5:01:cd:e6:b5:32:c4:3a:b7:80:86:6d:91:f6: 42:d1:a7:f2:28:0a:4b:19:cf:d3:41:7d:1b:35:4c: 43:74:07:09:ef:c6:9b:43:54:9f:1a:21:2e:34:47: ff:f1:49:7a:0e:62:56:80:07:e5:f7:71:7f:eb:c7: 8a:67:c5:5d:89:72:e6:7d:55:3c:57:1f:54:52:bc: 58:35:80:4b:c5:5e:89:ca:fd:df:f6:ba:66:bd:2c: 22:9e:14:e8:47:e1:88:7a:ab:89:e0:a9:86:50:17: e4:6b:93:9b:9a:6e:fe:be:ac:5d:04:0a:81:db:f8: ac:0e:06:11:91:86:39:46:98:4b:e6:f1:51:30:3f: f3:3c:f4:7f:c5:db:9a:f6:c4:36:b9:a1:3d:a7:db: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:35:DA:85:C8:63:B6:ED:6D:98:FB:7A:58:EA:9D:BC:C7:04:0C:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13f8b48d-987f-3c57-85f8-3033b23c241a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ee:50:7a:45:b1:6c:63:e2:ad:f2:78:3c:9d:c6:31:92:22: 23:a0:f2:ee:b4:48:e6:65:bc:b2:2b:f4:f4:69:60:94:78:ac: 33:03:fc:65:4b:00:30:66:ba:02:69:c4:c9:fb:e2:45:a1:92: 6b:6e:90:57:88:db:5e:c7:bc:dd:2d:f7:55:ec:05:88:99:6b: 48:a4:bc:01:b2:6c:2f:2a:5e:cd:de:02:c9:5a:3f:4f:2a:cb: 87:fe:f9:72:24:4d:ed:4f:dc:7b:36:dc:26:f8:a9:63:26:e9: 03:28:ff:fb:aa:90:94:31:6f:a3:a7:c9:1b:86:7e:52:70:93: c6:be:4a:93:ae:d4:46:4e:c1:df:fa:15:5b:79:98:c4:50:06: c9:c1:96:8b:30:92:bb:38:a8:c3:c9:8b:e6:f4:d3:5d:ba:ee: a8:b9:1a:37:f4:f7:1c:bd:4b:38:e7:c6:6f:3d:4f:50:08:ee: fd:df:13:6b:d2:58:d4:ef:29:a4:3b:e0:57:4d:e8:69:38:fa: a4:35:b6:58:2b:4b:2e:d9:b7:97:31:37:ca:30:13:61:fd:20: ac:0b:ee:4a:f1:47:e7:0a:9c:5c:f4:7a:dd:40:fe:a2:6f:48: 0c:dc:97:ac:58:f4:30:ad:52:6a:04:8a:3c:48:3d:7a:5c:71: e1:e2:98:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTLospik7NC6eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NTExODY0YWEtZGQ3NC00MGJkLWI5N2UtNWE5NzUzNTE4MzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUiPiKHed1W1TkVYUmUZ8KFF5+jp2Hc73hjJ 3K9duF+Hq3VayxrDGxzL04dpZ/Oc6dKxfZWHFUzi4bVbxakovqr3YLZa1oSsfsuZ dgcLPjWTL2l6dDw1W7DwdDVqenvPl6O+S151KzpJ5QHN5rUyxDq3gIZtkfZC0afy KApLGc/TQX0bNUxDdAcJ78abQ1SfGiEuNEf/8Ul6DmJWgAfl93F/68eKZ8VdiXLm fVU8Vx9UUrxYNYBLxV6Jyv3f9rpmvSwinhToR+GIequJ4KmGUBfka5Obmm7+vqxd BAqB2/isDgYRkYY5RphL5vFRMD/zPPR/xdua9sQ2uaE9p9sWBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg12oXIY7btbZj7eljqnbzHBAxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTNmOGI0OGQtOTg3Zi0z YzU3LTg1ZjgtMzAzM2IyM2MyNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILuUHpFsWxj4q3yeDydxjGSIiOg8u60SOZlvLIr9PRpYJR4rDMD/GVL ADBmugJpxMn74kWhkmtukFeI217HvN0t91XsBYiZa0ikvAGybC8qXs3eAslaP08q y4f++XIkTe1P3Hs23Cb4qWMm6QMo//uqkJQxb6OnyRuGflJwk8a+SpOu1EZOwd/6 FVt5mMRQBsnBloswkrs4qMPJi+b001267qi5Gjf09xy9Szjnxm89T1AI7v3fE2vS WNTvKaQ74FdN6Gk4+qQ1tlgrSy7Zt5cxN8owE2H9IKwL7krxR+cKnFz0et1A/qJv SAzcl6xY9DCtUmoEijxIPXpcceHimIs= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:50 2024 by rpki-client on console-fra.rpki-client.org