$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f103d08-9522-32b2-8e45-df45f1a43288.roa File: 2f103d08-9522-32b2-8e45-df45f1a43288.roa (raw, json) Hash identifier: FYBd8r+aqRE9SwBpIzKFE8HBrD7j4MTjsSdh46oYRgs= Subject key identifier: 5B:8B:BB:14:EE:7D:AC:D0:AA:E4:D9:D4:91:97:20:15:98:82:FC:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155470024FB2ED711DE4180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f103d08-9522-32b2-8e45-df45f1a43288.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 393652 IP address blocks: 98.16.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:47:00:24:fb:2e:d7:11:de:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=a0927997-eed4-4cef-8293-7e25b98d0ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:c0:af:10:8c:77:da:41:87:de:cd:66:45: 5e:33:f3:4b:92:9e:cc:a2:94:eb:86:ac:01:2a:89: b3:89:4b:26:e0:d2:19:32:73:2d:bd:cd:0f:ef:25: 2f:af:3b:c0:26:7b:3a:24:c7:ab:d5:a6:73:5d:99: 0f:d1:05:ab:e5:da:0d:f0:0a:7f:fa:e1:6d:5a:37: a4:00:ec:66:96:99:c6:6b:2c:b2:03:b0:c5:49:3f: 3a:eb:a4:b9:60:1f:2b:c0:e8:9c:6a:bc:07:32:b7: 42:03:3a:90:10:39:3b:7b:de:e3:67:56:c7:b1:1c: fc:a0:82:da:25:c1:2d:01:d9:ac:0c:ec:8f:85:c0: 42:1c:84:a1:40:0b:8e:c9:54:e0:f9:03:cc:2b:fd: c3:0e:ad:95:5c:35:f1:85:6d:6c:ca:96:ba:83:28: 45:10:d6:f3:1b:1b:0a:ae:ba:fc:87:ba:f3:0d:dc: 9e:36:bd:a6:c8:03:33:76:36:fa:9b:37:e1:86:d5: 7b:c9:2d:a4:e4:ea:5b:30:a5:3d:54:43:e1:a2:e4: 5b:bf:9c:dc:7b:9a:fe:f2:91:ac:3c:43:7b:00:8d: b4:9c:68:c9:49:36:13:58:15:ab:aa:6b:62:3c:ca: 61:d5:cb:e1:be:ec:4e:ab:24:57:93:54:86:a5:2f: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8B:BB:14:EE:7D:AC:D0:AA:E4:D9:D4:91:97:20:15:98:82:FC:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f103d08-9522-32b2-8e45-df45f1a43288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1c:29:f3:01:25:18:58:b1:03:70:d2:70:fb:d3:17:d8:c3: bb:44:13:e9:f3:e0:58:ff:bd:05:cd:87:2c:e4:47:d1:ac:f6: 9d:53:01:a4:d8:9c:06:4e:5d:fc:04:80:43:ba:e5:20:8b:72: 19:f6:dc:92:7a:63:87:66:e7:42:8b:b8:44:36:d0:b4:e8:69: d3:d3:82:55:5d:98:24:73:e1:74:6d:78:35:7d:5c:58:91:72: fd:63:7c:70:83:d6:a6:da:c1:cc:f5:a6:da:e7:cb:15:48:a8: fb:62:b0:13:a2:e1:45:82:e2:b7:62:64:5f:e8:e3:6d:50:fb: 88:dc:b0:0c:5e:6d:80:8b:90:99:1b:c1:03:d7:c4:b3:c0:3f: 68:a8:7b:f0:dc:b2:39:29:b1:be:6b:c9:9f:ff:ea:9c:ed:80: 88:0a:b5:19:7e:bb:d5:f3:eb:d2:08:0a:5e:e5:48:ab:6d:f8: e2:dd:82:b1:b8:de:69:77:77:40:29:16:64:4a:99:89:a3:af: 52:d5:cc:6e:20:72:44:eb:66:99:89:47:fe:8f:55:16:e4:f6: f6:9b:eb:a5:2c:4b:23:01:a0:ee:c8:9e:9a:17:e1:65:5c:b3: 91:28:e9:6a:a8:0a:c9:b4:7d:cc:c1:dc:fe:d5:53:1b:5c:5a: 21:ea:57:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVUcAJPsu1xHeQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YTA5Mjc5OTctZWVkNC00Y2VmLTgyOTMtN2UyNWI5OGQwZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHDArxCMd9pBh97NZkVeM/NLkp7MopTrhqwB KomziUsm4NIZMnMtvc0P7yUvrzvAJns6JMer1aZzXZkP0QWr5doN8Ap/+uFtWjek AOxmlpnGayyyA7DFST8666S5YB8rwOicarwHMrdCAzqQEDk7e97jZ1bHsRz8oILa JcEtAdmsDOyPhcBCHIShQAuOyVTg+QPMK/3DDq2VXDXxhW1sypa6gyhFENbzGxsK rrr8h7rzDdyeNr2myAMzdjb6mzfhhtV7yS2k5OpbMKU9VEPhouRbv5zce5r+8pGs PEN7AI20nGjJSTYTWBWrqmtiPMph1cvhvuxOqyRXk1SGpS89jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuLuxTufazQquTZ1JGXIBWYgvwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmYxMDNkMDgtOTUyMi0z MmIyLThlNDUtZGY0NWYxYTQzMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEcKfMBJRhYsQNw0nD70xfYw7tEE+nz4Fj/vQXNhyzkR9Gs9p1TAaTY nAZOXfwEgEO65SCLchn23JJ6Y4dm50KLuEQ20LToadPTglVdmCRz4XRteDV9XFiR cv1jfHCD1qbawcz1ptrnyxVIqPtisBOi4UWC4rdiZF/o421Q+4jcsAxebYCLkJkb wQPXxLPAP2ioe/Dcsjkpsb5ryZ//6pztgIgKtRl+u9Xz69IICl7lSKtt+OLdgrG4 3ml3d0ApFmRKmYmjr1LVzG4gckTrZpmJR/6PVRbk9vab66UsSyMBoO7InpoX4WVc s5Eo6WqoCsm0fczB3P7VUxtcWiHqV9Y= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:50 2024 by rpki-client on console-ams.rpki-client.org