$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa File: 38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa (raw, json) Hash identifier: hUMBZowx5Wh1VANKhNWjL5SK9/MOnKTRTiJptNQIVQY= Subject key identifier: 10:01:A8:27:D6:86:E2:CF:75:68:47:3B:BB:58:B6:3F:AC:F7:C9:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847AB6BFCA24A10C5DB2B268880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 7029 IP address blocks: 98.21.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6b:fc:a2:4a:10:c5:db:2b:26:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=59788bf1-b8ce-4bad-8c5b-1adeb6a20733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:6d:fe:3c:a6:bc:ee:93:38:53:08:da:d0: 98:ab:6c:f1:9a:ed:6e:e7:bc:cb:1e:57:25:8b:21: 00:53:23:48:b8:36:ff:07:38:ea:b7:eb:98:3d:7c: f6:fd:7e:ff:2e:62:2c:88:2b:07:7f:65:99:28:da: 8f:f6:2f:0a:b9:3b:55:b8:38:d4:ab:b2:38:d3:d0: 86:32:fc:49:24:a5:a1:b2:a5:14:a3:5f:51:81:3d: e2:2a:7b:17:e2:3c:40:06:5f:2b:48:3a:c1:23:1a: bd:4b:34:8c:32:ba:35:44:70:1d:09:4b:a0:02:89: 4d:8a:5b:be:1a:c5:f2:e3:b8:1b:e9:6a:e5:52:67: 04:0d:df:c6:70:0d:ff:3c:0f:71:03:a6:7d:a6:9b: f9:60:42:0c:39:61:ba:ec:bd:7e:6e:1d:75:87:1b: 89:48:f2:9e:f1:f4:63:74:6b:6d:9d:e5:a9:a9:02: 3a:10:eb:3e:65:68:db:de:31:3c:d2:8a:b6:67:f3: 76:0d:df:c5:ee:6b:8d:c6:12:b7:c4:52:83:cb:40: 9a:10:70:9f:84:0a:8c:ae:09:cf:f9:bf:19:86:1a: 1d:01:07:8a:7e:06:01:81:65:13:44:b6:c5:0d:61: be:43:2e:c8:9d:f7:16:74:7b:32:97:f1:03:52:f0: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:01:A8:27:D6:86:E2:CF:75:68:47:3B:BB:58:B6:3F:AC:F7:C9:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:64:e8:9e:cb:9b:03:7c:e8:72:11:b6:d0:74:ce:a1:f2:21: b0:4c:fe:7f:2f:64:16:a6:6c:0e:66:75:04:fe:c7:2a:19:11: 6d:70:33:0e:a5:5d:9d:81:27:88:4d:27:9f:31:32:8f:bd:2c: ab:d3:0a:5f:65:48:fd:e5:8c:34:51:c3:f3:0c:5f:6e:3c:4d: 6b:fe:c1:74:21:39:f2:a2:d8:a7:c1:78:47:c2:cb:13:36:19: 89:64:28:97:98:d5:71:e1:6b:31:45:99:d3:16:5e:e1:ff:f0: 62:e4:01:16:fe:ac:87:2c:44:08:67:82:62:b9:d7:7e:a8:57: ef:30:49:cf:01:3c:42:43:e7:cf:f3:d7:4e:3b:04:36:58:42: 78:7e:3c:88:7d:73:2a:2c:01:7a:23:c0:e1:4c:e9:45:d9:1a: fe:8a:6f:bf:c1:1e:c5:51:ce:70:cb:ea:15:70:f3:7b:0d:7b: 13:af:dc:5f:aa:25:c0:5b:6b:e9:1d:24:fc:f9:43:01:9f:87: 72:79:5a:47:3a:b9:2e:a6:08:7a:50:14:cf:72:a3:db:53:f5: d5:25:ec:2b:c2:c4:ab:1d:15:9f:2b:d6:85:8e:d1:bb:51:97: ba:b8:f7:94:98:42:cf:60:0c:44:b4:9b:e7:7c:bf:fe:db:f6: c6:d6:bc:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEera/yiShDF2ysmiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk NTk3ODhiZjEtYjhjZS00YmFkLThjNWItMWFkZWI2YTIwNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNNt/jymvO6TOFMI2tCYq2zxmu1u57zLHlcl iyEAUyNIuDb/Bzjqt+uYPXz2/X7/LmIsiCsHf2WZKNqP9i8KuTtVuDjUq7I409CG MvxJJKWhsqUUo19RgT3iKnsX4jxABl8rSDrBIxq9SzSMMro1RHAdCUugAolNilu+ GsXy47gb6WrlUmcEDd/GcA3/PA9xA6Z9ppv5YEIMOWG67L1+bh11hxuJSPKe8fRj dGttneWpqQI6EOs+ZWjb3jE80oq2Z/N2Dd/F7muNxhK3xFKDy0CaEHCfhAqMrgnP +b8ZhhodAQeKfgYBgWUTRLbFDWG+Qy7InfcWdHsyl/EDUvAbJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBABqCfWhuLPdWhHO7tYtj+s98nzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzhmZTgzZTgtMmJhMC0z ZDkyLWJlZTMtMjliYjIwN2E5NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFk6J7LmwN86HIRttB0zqHyIbBM/n8vZBambA5mdQT+xyoZEW1wMw6l XZ2BJ4hNJ58xMo+9LKvTCl9lSP3ljDRRw/MMX248TWv+wXQhOfKi2KfBeEfCyxM2 GYlkKJeY1XHhazFFmdMWXuH/8GLkARb+rIcsRAhngmK5136oV+8wSc8BPEJD58/z 1047BDZYQnh+PIh9cyosAXojwOFM6UXZGv6Kb7/BHsVRznDL6hVw83sNexOv3F+q JcBba+kdJPz5QwGfh3J5Wkc6uS6mCHpQFM9yo9tT9dUl7CvCxKsdFZ8r1oWO0btR l7q495SYQs9gDES0m+d8v/7b9sbWvPc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:57 2024 by rpki-client on console-fra.rpki-client.org