$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa File: 2a4a1f38-23a1-3489-ac54-76169819c152.roa (raw, json) Hash identifier: gKFzZtXqqlCsvOJtEY6Fmxy2DI4Gb0JPxjLCcDChNRE= Subject key identifier: 7F:40:17:6D:AF:96:5F:D6:73:31:71:14:0C:68:5A:9A:CF:92:73:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6BFE04477FFB1C5BD66600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 98.23.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6b:fe:04:47:7f:fb:1c:5b:d6:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=297ef75c-1621-4d4c-bf41-38ced2a84532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:b1:09:10:4d:c5:f6:76:8c:c9:e1:67:aa: 50:e5:81:4c:ff:89:7b:40:42:de:7c:f4:46:dd:06: 3a:16:aa:a5:1e:b2:97:11:44:f4:85:bc:bb:d4:a3: cb:f8:9f:78:70:39:19:34:8b:d5:7f:6c:e8:40:10: 74:59:46:03:ad:29:fc:f0:dc:98:28:b0:b8:ff:22: 13:71:e3:b3:ae:e9:6c:4e:6d:28:92:b0:0d:25:a6: c6:49:94:c2:88:59:8e:a9:59:c3:c5:a4:81:be:04: 9a:7b:42:01:36:6c:66:f9:64:41:72:a3:2e:93:15: 28:c0:97:da:39:ae:4a:90:37:7d:2e:4e:ab:c6:31: 3d:e8:8f:1b:c3:18:10:70:6f:92:0b:77:77:5b:40: c8:25:36:7c:41:8d:5b:dd:34:82:b4:0f:83:39:fc: 4b:4f:7b:d4:96:1e:0f:8d:ea:e1:c6:2f:4e:4b:b6: 47:c6:64:a8:8a:07:0f:2b:71:b9:85:f3:55:82:65: 45:51:d8:fa:83:39:3f:22:e4:23:38:92:45:07:4a: b0:b4:7e:54:70:97:0d:b3:a5:aa:ce:7f:15:e5:95: 81:53:e9:9f:49:43:12:ef:8f:e6:1e:b0:be:46:74: 7a:71:ef:df:97:0e:b6:6c:60:24:f6:60:a1:6e:b0: 77:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:40:17:6D:AF:96:5F:D6:73:31:71:14:0C:68:5A:9A:CF:92:73:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c6:06:53:6c:1d:d7:15:52:f1:6b:6b:a3:d2:7b:e8:ea:81: 60:c0:c9:6d:12:6e:40:94:bd:04:f6:01:d5:a4:05:c9:ba:82: a6:73:66:b0:6d:6c:62:08:e0:23:55:0d:4a:ed:94:3d:b5:10: 4d:3a:d8:ca:fc:f0:c8:46:d6:70:8e:00:49:51:65:2f:84:12: 1f:c9:89:a3:74:32:a1:44:e5:4f:f2:08:5d:3e:cc:86:38:b7: 99:1a:8d:25:ff:1a:16:8a:04:c0:6e:1a:a6:bf:73:aa:f1:02: 4b:c7:83:9a:bf:c3:3f:6c:e0:bc:ac:b2:e1:42:0b:ed:d9:ac: e6:70:a6:b8:0d:5c:7d:4f:ad:3f:67:b3:98:12:20:bb:1d:80: 2e:65:81:58:e3:28:2e:d7:8c:b7:e5:be:ef:40:03:6e:1c:65: b9:43:a8:49:7d:8f:49:cf:e0:80:0f:98:3e:0c:4f:67:3a:c1: a5:02:d9:54:5a:2e:0f:09:9b:2c:2e:4d:65:cc:c4:bc:0e:2b: 71:89:3f:4e:2f:35:c3:d1:12:57:7f:eb:4b:6c:da:98:da:6c: d9:41:41:e9:87:ed:2f:65:db:47:8d:2c:5b:2a:6e:df:40:65: d7:19:4f:2f:61:d7:7e:81:33:0f:55:3f:4c:66:6d:b1:d0:95: 4e:21:2f:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEera/4ER3/7HFvWZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk Mjk3ZWY3NWMtMTYyMS00ZDRjLWJmNDEtMzhjZWQyYTg0NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliOxCRBNxfZ2jMnhZ6pQ5YFM/4l7QELefPRG 3QY6FqqlHrKXEUT0hby71KPL+J94cDkZNIvVf2zoQBB0WUYDrSn88NyYKLC4/yIT ceOzrulsTm0okrANJabGSZTCiFmOqVnDxaSBvgSae0IBNmxm+WRBcqMukxUowJfa Oa5KkDd9Lk6rxjE96I8bwxgQcG+SC3d3W0DIJTZ8QY1b3TSCtA+DOfxLT3vUlh4P jerhxi9OS7ZHxmSoigcPK3G5hfNVgmVFUdj6gzk/IuQjOJJFB0qwtH5UcJcNs6Wq zn8V5ZWBU+mfSUMS74/mHrC+RnR6ce/flw62bGAk9mChbrB3zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9AF22vll/WczFxFAxoWprPknMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0YTFmMzgtMjNhMS0z NDg5LWFjNTQtNzYxNjk4MTljMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHGBlNsHdcVUvFra6PSe+jqgWDAyW0SbkCUvQT2AdWkBcm6gqZzZrBt bGII4CNVDUrtlD21EE062Mr88MhG1nCOAElRZS+EEh/JiaN0MqFE5U/yCF0+zIY4 t5kajSX/GhaKBMBuGqa/c6rxAkvHg5q/wz9s4LyssuFCC+3ZrOZwprgNXH1PrT9n s5gSILsdgC5lgVjjKC7XjLflvu9AA24cZblDqEl9j0nP4IAPmD4MT2c6waUC2VRa Lg8JmywuTWXMxLwOK3GJP04vNcPREld/60ts2pjabNlBQemH7S9l20eNLFsqbt9A ZdcZTy9h136BMw9VP0xmbbHQlU4hLyk= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:54 2024 by rpki-client on console-fra.rpki-client.org