$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/411b61f7-6fd1-38b6-b645-def7d9ab2af8.roa File: 411b61f7-6fd1-38b6-b645-def7d9ab2af8.roa (raw, json) Hash identifier: 2L6f4suw7qiv4o0PwEURG3YPuFPJT5ocQnBj7Cf6+N0= Subject key identifier: 6B:0A:0B:C0:9E:E8:58:AD:7B:F9:B1:CE:A5:34:D7:32:15:85:86:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15500D14FD99013EB90A000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/411b61f7-6fd1-38b6-b645-def7d9ab2af8.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 98.21.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:00:d1:4f:d9:90:13:eb:90:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=a3a47ece-5fa7-460f-b257-6bdddf0360d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:ac:17:92:da:cf:fc:dc:bf:55:69:c1:53: 76:37:89:56:f7:3c:74:ab:7b:db:d6:f6:4f:c0:d8: 8a:3e:44:86:03:a5:43:7a:6f:47:4c:a0:68:29:0a: c1:9f:da:d8:a1:38:ab:0d:94:2f:72:2c:57:d1:2c: 86:99:0a:b0:49:88:f8:99:d9:33:48:36:95:db:05: 62:ca:a8:9b:71:91:43:5c:07:d8:79:08:9a:86:24: f0:f6:a1:58:48:8d:a0:5a:d0:d5:eb:62:f5:ac:40: dc:bd:5d:12:2d:68:b5:34:86:68:c9:55:ec:4d:17: 2c:3a:86:7d:fe:ba:7c:77:0b:be:f8:81:d6:20:b5: b9:4b:35:df:2d:7b:cd:1c:23:27:2a:b4:e8:09:ab: 65:36:a0:fc:f5:e0:5e:0a:9e:c1:23:4d:75:f7:5f: 29:e4:ec:fe:93:b7:34:18:59:45:74:03:16:35:fd: f3:2a:8b:da:67:2b:22:ff:d6:95:1d:ba:9e:8f:61: d5:a9:56:54:29:b6:47:b3:d6:4f:10:05:7a:8f:cc: f4:2d:92:48:e1:8c:38:7a:84:0c:0d:57:90:d4:93: 8c:2a:28:60:59:58:14:1f:03:8d:c9:29:5b:97:98: b7:f8:3f:e3:ff:da:b5:70:f1:d6:c8:e8:d3:30:4d: b7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0A:0B:C0:9E:E8:58:AD:7B:F9:B1:CE:A5:34:D7:32:15:85:86:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/411b61f7-6fd1-38b6-b645-def7d9ab2af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:46:fd:d9:a9:b4:cc:eb:62:a7:c3:aa:da:87:99:2d:9b:fc: e9:4c:28:af:99:c6:05:cc:b7:04:d8:73:37:ec:a1:1a:59:e9: 32:9c:b3:3f:db:9a:f1:3f:f9:fe:52:12:96:d2:d8:c6:2a:69: 1a:4a:57:0f:64:06:0b:8b:3e:91:76:6a:79:01:54:07:23:34: 1d:d8:7f:ba:58:d8:3a:8f:1e:bf:b3:06:ca:27:a0:d5:ba:ed: bd:69:ae:42:e3:bc:82:87:ba:a4:fa:3c:c0:d4:60:7b:27:76: 23:f0:e1:83:05:f3:14:32:7a:83:6f:eb:7b:4f:ec:06:7b:dc: 52:0a:20:43:84:77:13:a6:5c:d4:da:d8:a0:54:6a:62:0a:78: c3:c5:0d:8b:d5:d1:a5:6c:f1:9e:15:7b:bf:04:2e:79:19:e8: e6:6a:3a:9f:c1:e2:3d:b6:a6:3c:b2:ce:dd:72:e9:3f:61:71: fb:5c:87:b3:ac:f0:ac:4c:d0:bb:cd:65:fa:93:da:17:83:2d: bb:98:6c:dd:0b:09:0c:ca:83:8d:01:c4:42:45:c5:1b:ca:62: fe:3a:fb:75:e8:8f:92:d4:9a:44:4b:84:1b:a4:36:cd:19:d4: 74:42:f4:92:93:2d:90:29:ad:1c:9d:cf:9e:e3:1d:e5:e0:49: 33:45:73:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQDRT9mQE+uQoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YTNhNDdlY2UtNWZhNy00NjBmLWIyNTctNmJkZGRmMDM2MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN6sF5Laz/zcv1VpwVN2N4lW9zx0q3vb1vZP wNiKPkSGA6VDem9HTKBoKQrBn9rYoTirDZQvcixX0SyGmQqwSYj4mdkzSDaV2wVi yqibcZFDXAfYeQiahiTw9qFYSI2gWtDV62L1rEDcvV0SLWi1NIZoyVXsTRcsOoZ9 /rp8dwu++IHWILW5SzXfLXvNHCMnKrToCatlNqD89eBeCp7BI011918p5Oz+k7c0 GFlFdAMWNf3zKovaZysi/9aVHbqej2HVqVZUKbZHs9ZPEAV6j8z0LZJI4Yw4eoQM DVeQ1JOMKihgWVgUHwONySlbl5i3+D/j/9q1cPHWyOjTME23mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsKC8Ce6Fite/mxzqU01zIVhYbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDExYjYxZjctNmZkMS0z OGI2LWI2NDUtZGVmN2Q5YWIyYWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFG/dmptMzrYqfDqtqHmS2b/OlMKK+ZxgXMtwTYczfsoRpZ6TKcsz/b mvE/+f5SEpbS2MYqaRpKVw9kBguLPpF2ankBVAcjNB3Yf7pY2DqPHr+zBsonoNW6 7b1prkLjvIKHuqT6PMDUYHsndiPw4YMF8xQyeoNv63tP7AZ73FIKIEOEdxOmXNTa 2KBUamIKeMPFDYvV0aVs8Z4Ve78ELnkZ6OZqOp/B4j22pjyyzt1y6T9hcftch7Os 8KxM0LvNZfqT2heDLbuYbN0LCQzKg40BxEJFxRvKYv46+3Xoj5LUmkRLhBukNs0Z 1HRC9JKTLZAprRydz57jHeXgSTNFc8k= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:39 2024 by rpki-client on console-ams.rpki-client.org