$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa File: 466f6df5-9580-3849-bf40-eeaab04c5e4f.roa (raw, json) Hash identifier: /YpcktYP2tMnJlySjyQ+/f6M7JYo6KBD1OPwUpGhngI= Subject key identifier: 5A:30:CA:C2:52:3B:ED:46:73:52:1F:8B:66:A0:37:02:43:BD:78:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858473117C7641BC3A4FE25A38E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa Signing time: Thu 12 Sep 2024 17:22:28 +0000 ROA not before: Thu 12 Sep 2024 17:22:28 +0000 ROA not after: Wed 11 Dec 2024 18:22:28 +0000 asID: 7029 IP address blocks: 98.16.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:17:c7:64:1b:c3:a4:fe:25:a3:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:22:28 2024 GMT Not After : Dec 11 18:22:28 2024 GMT Subject: CN=2a3dd481-0fc6-4fd3-a734-4607bb36fae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:c7:e2:c1:56:0c:4a:f5:06:f8:6a:84:b3: 4c:c5:ca:94:4b:68:17:d8:ea:aa:5e:5a:2e:7b:c4: 62:4f:b2:6d:c0:b2:09:39:83:ec:d3:dd:5f:f3:b3: 86:d6:97:49:de:93:99:db:f0:05:c5:9c:2a:82:5e: cb:6f:ef:ec:ca:c1:9b:b9:9a:b8:88:9f:b7:55:37: b6:48:3b:61:3e:a7:e0:2e:42:e3:bc:90:e7:84:db: d0:bd:c4:0c:f1:ea:cd:ff:9c:51:67:cf:b3:ac:e3: a9:57:95:a2:1e:44:d4:72:4e:3c:45:0a:9b:52:0c: 78:db:ba:a2:49:a7:b4:27:9f:32:8c:1d:73:47:2d: e6:3d:6a:97:41:96:a6:9c:dc:c5:55:d8:25:5f:46: ba:e2:57:f5:e2:e9:d6:07:52:5e:e9:0e:5f:c4:6a: 24:9a:19:ab:ad:df:5f:67:67:1c:06:f1:51:0d:80: 1e:90:0a:45:58:9b:08:2e:0f:30:28:d4:f7:7b:2f: 63:fa:3d:ca:0a:38:e5:d7:e4:2e:55:7f:e6:fe:eb: 90:60:77:7a:99:4d:3c:0d:40:4b:db:e2:f2:f7:f6: 5b:67:e9:d4:31:7b:2f:7e:56:85:3b:57:1f:18:ba: 2d:3f:1c:b2:e6:8f:dd:b5:06:e4:06:91:e7:0f:1c: 70:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:30:CA:C2:52:3B:ED:46:73:52:1F:8B:66:A0:37:02:43:BD:78:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:dc:86:d1:06:6c:96:56:24:64:e0:8f:3e:0d:ec:df:9a:c9: e2:af:ca:ad:94:80:45:10:29:77:a6:3b:53:9e:7b:2a:55:b2: 77:08:17:99:c6:00:ca:e0:42:fc:62:a2:67:e1:6f:59:b8:77: 62:fb:a9:1b:1e:e8:de:e2:54:d3:41:c7:c0:8c:c6:df:d3:3a: 28:89:1b:a3:94:bb:d6:89:52:89:83:2a:e6:81:c0:44:a5:b7: a5:a3:d5:7f:54:02:bb:57:f5:0d:17:7b:b3:97:ff:97:d3:14: ca:5d:b0:a8:b7:cb:f2:6c:a7:a0:9f:76:09:62:16:af:aa:d2: 87:81:09:d9:59:35:92:56:37:bd:cf:3a:1e:e9:d7:e3:e9:e6: 5f:13:20:82:71:d6:f7:e1:20:d6:5c:84:e4:d4:9f:54:74:de: 3c:43:be:19:40:97:23:7e:48:c8:35:06:c4:d2:7b:b6:63:b0: 3a:e2:e0:81:43:92:35:90:c7:ef:48:81:03:97:5c:79:94:da: 11:5a:a8:bd:d9:84:1c:cc:91:5b:c1:77:1a:f7:d6:eb:ce:d9: bf:36:fb:fc:cc:ee:24:72:d8:b4:fd:89:2d:c3:39:12:68:4b: dd:61:01:ad:da:2d:ad:4d:20:83:60:5d:0b:25:17:f1:24:b6: da:2a:be:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxF8dkG8Ok/iWjjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjIyOFoXDTI0MTIxMTE4MjIyOFowLzEtMCsGA1UEAxMk MmEzZGQ0ODEtMGZjNi00ZmQzLWE3MzQtNDYwN2JiMzZmYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTXH4sFWDEr1BvhqhLNMxcqUS2gX2OqqXlou e8RiT7JtwLIJOYPs091f87OG1pdJ3pOZ2/AFxZwqgl7Lb+/sysGbuZq4iJ+3VTe2 SDthPqfgLkLjvJDnhNvQvcQM8erN/5xRZ8+zrOOpV5WiHkTUck48RQqbUgx427qi Sae0J58yjB1zRy3mPWqXQZamnNzFVdglX0a64lf14unWB1Je6Q5fxGokmhmrrd9f Z2ccBvFRDYAekApFWJsILg8wKNT3ey9j+j3KCjjl1+QuVX/m/uuQYHd6mU08DUBL 2+Ly9/ZbZ+nUMXsvflaFO1cfGLotPxyy5o/dtQbkBpHnDxxwBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFowysJSO+1Gc1Ifi2agNwJDvXhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDY2ZjZkZjUtOTU4MC0z ODQ5LWJmNDAtZWVhYWIwNGM1ZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDchtEGbJZWJGTgjz4N7N+ayeKvyq2UgEUQKXemO1OeeypVsncIF5nG AMrgQvxiomfhb1m4d2L7qRse6N7iVNNBx8CMxt/TOiiJG6OUu9aJUomDKuaBwESl t6Wj1X9UArtX9Q0Xe7OX/5fTFMpdsKi3y/Jsp6CfdgliFq+q0oeBCdlZNZJWN73P Oh7p1+Pp5l8TIIJx1vfhINZchOTUn1R03jxDvhlAlyN+SMg1BsTSe7ZjsDri4IFD kjWQx+9IgQOXXHmU2hFaqL3ZhBzMkVvBdxr31uvO2b82+/zM7iRy2LT9iS3DORJo S91hAa3aLa1NIINgXQslF/EkttoqvvY= -----END CERTIFICATE-----Generated at Sun Nov 24 20:59:05 2024 by rpki-client on console-fra.rpki-client.org