$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a9f6d09-dc1d-3a6a-bf43-26b38613af0a.roa File: 2a9f6d09-dc1d-3a6a-bf43-26b38613af0a.roa (raw, json) Hash identifier: qhiQX/yR5XsK/R42i22KjZ1lV8p6GDuKrVLyDDJDbwE= Subject key identifier: D5:27:87:B8:85:74:F4:CE:9E:90:ED:23:BE:F8:CD:28:B9:6E:59:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6BFB6D4A44B03B7AB7F980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a9f6d09-dc1d-3a6a-bf43-26b38613af0a.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 98.20.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6b:fb:6d:4a:44:b0:3b:7a:b7:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=c294e23d-2730-4e23-a5d1-98f62ba03851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c9:ca:cb:61:8c:a4:92:9b:17:07:05:cb:8b: 5c:0d:9c:78:fd:ca:aa:5b:9b:e5:d0:52:ad:b9:3e: 08:0b:c2:a5:04:26:55:9b:37:3f:02:fa:a9:5b:de: 0d:8d:e5:31:b1:00:c5:c4:43:0f:81:2d:5e:ca:e5: 39:f0:96:a5:0e:4b:d9:d7:16:f9:5e:98:3f:e7:32: dd:8d:d9:7c:6a:f2:1c:0d:86:c9:d8:e9:2d:d2:94: 14:7b:33:6e:f6:be:39:1f:f5:c2:c2:09:48:27:9f: 7f:58:c3:ae:3b:f4:53:22:ae:e3:70:9e:06:55:73: 73:dc:be:f1:c0:33:77:cb:2f:f5:07:f5:3c:1b:0c: b8:75:38:e1:ae:74:9f:d3:b5:57:0c:ca:51:67:a5: f7:9c:99:03:6c:8b:18:0e:cc:6f:ed:49:a1:bd:9d: 76:40:ef:da:5d:db:a2:c3:3c:3d:04:49:97:10:65: af:ef:cd:33:3c:88:16:7d:22:47:7d:0b:fc:82:ba: 95:60:a6:2c:06:48:84:f9:17:b3:40:d0:62:cd:63: c3:03:fb:59:63:00:86:38:64:7b:2e:6f:c4:2c:39: ae:8e:67:1c:ff:79:34:6b:be:e9:21:6b:d2:58:f7: c6:95:dd:4a:23:d5:ad:a9:04:52:2b:6c:b7:2a:21: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:27:87:B8:85:74:F4:CE:9E:90:ED:23:BE:F8:CD:28:B9:6E:59:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a9f6d09-dc1d-3a6a-bf43-26b38613af0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a8:92:3d:99:56:99:de:f2:cc:5b:a3:b2:a9:51:ba:0b:c3: 81:1d:2a:04:0c:07:8c:c3:bd:d7:49:d4:30:82:52:5b:fb:14: 43:cb:2d:3b:00:80:f5:15:34:fb:39:b7:a7:67:a4:16:bf:e1: a2:65:ef:82:44:ad:12:0c:e6:76:f6:50:ae:76:f0:a0:71:cd: dc:31:5e:b7:80:a7:24:d9:2b:fa:05:d6:76:4c:33:35:83:f3: 39:81:09:8f:65:7d:38:9f:4c:79:0b:3c:8a:2c:7b:0d:54:80: 35:3c:23:27:81:33:f3:53:6f:37:43:74:5c:5c:bf:89:db:8d: 81:2e:b5:86:61:c3:b4:c9:6e:7a:b3:ef:d0:1d:30:17:5e:b8: c5:22:51:76:7f:c0:c7:9a:39:63:62:6a:95:83:7d:a8:e0:b0: 92:9d:ea:11:55:ea:37:e8:60:41:38:9f:20:fe:14:3d:be:8f: a9:35:cc:b8:a1:ae:c1:ac:20:54:4d:09:fe:f7:31:f9:ff:74: 69:74:be:04:63:2a:72:b7:37:1d:a6:49:02:2a:2e:7e:cc:d3: d1:7b:4e:60:48:2c:6d:4e:3f:80:2a:c7:02:fb:1f:f2:0e:60: 3b:e5:d9:33:0e:ec:66:26:12:2b:ec:b2:60:41:16:35:81:d9: 38:89:16:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEera/ttSkSwO3q3+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk YzI5NGUyM2QtMjczMC00ZTIzLWE1ZDEtOThmNjJiYTAzODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcnKy2GMpJKbFwcFy4tcDZx4/cqqW5vl0FKt uT4IC8KlBCZVmzc/AvqpW94NjeUxsQDFxEMPgS1eyuU58JalDkvZ1xb5Xpg/5zLd jdl8avIcDYbJ2Okt0pQUezNu9r45H/XCwglIJ59/WMOuO/RTIq7jcJ4GVXNz3L7x wDN3yy/1B/U8Gwy4dTjhrnSf07VXDMpRZ6X3nJkDbIsYDsxv7UmhvZ12QO/aXdui wzw9BEmXEGWv780zPIgWfSJHfQv8grqVYKYsBkiE+RezQNBizWPDA/tZYwCGOGR7 Lm/ELDmujmcc/3k0a77pIWvSWPfGld1KI9WtqQRSK2y3KiHYnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUnh7iFdPTOnpDtI774zSi5blmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE5ZjZkMDktZGMxZC0z YTZhLWJmNDMtMjZiMzg2MTNhZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhQdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaokj2ZVpne8sxbo7KpUboLw4EdKgQMB4zDvddJ1DCCUlv7FEPLLTsA gPUVNPs5t6dnpBa/4aJl74JErRIM5nb2UK528KBxzdwxXreApyTZK/oF1nZMMzWD 8zmBCY9lfTifTHkLPIosew1UgDU8IyeBM/NTbzdDdFxcv4nbjYEutYZhw7TJbnqz 79AdMBdeuMUiUXZ/wMeaOWNiapWDfajgsJKd6hFV6jfoYEE4nyD+FD2+j6k1zLih rsGsIFRNCf73Mfn/dGl0vgRjKnK3Nx2mSQIqLn7M09F7TmBILG1OP4AqxwL7H/IO YDvl2TMO7GYmEivssmBBFjWB2TiJFk8= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:00 2024 by rpki-client on console-fra.rpki-client.org