$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ed92f52-026c-3192-9ffd-dec716448a4d.roa File: 4ed92f52-026c-3192-9ffd-dec716448a4d.roa (raw, json) Hash identifier: qTGLMTo9laxTx9eCB8bOLSNAw09wKEu+77KdOYLJdDE= Subject key identifier: 74:31:4D:4E:6F:55:20:B1:6B:B5:EF:BE:99:F3:F1:82:7C:3F:6B:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455332FF82B7F0B1B8E8E2E700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ed92f52-026c-3192-9ffd-dec716448a4d.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 98.17.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:32:ff:82:b7:f0:b1:b8:e8:e2:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=622c056c-3c26-4832-8cee-03471d6a2865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:55:e7:34:1a:75:42:83:e9:62:9e:29:f6:f3: b4:fc:bf:41:5e:70:ff:62:9c:cc:ee:43:49:60:6e: 6c:6c:b4:b8:86:02:b9:6e:f3:25:29:e9:3d:25:d3: 13:3a:7b:16:f3:00:b6:4e:54:e2:1e:05:d7:89:f3: 1d:e3:89:f1:c9:2e:37:1f:4a:9c:95:8d:b4:e9:6e: 6c:ec:f5:67:a9:4e:46:16:64:b4:ae:fe:c0:f9:24: 56:d6:bf:a5:f6:61:78:61:b6:23:42:8b:d1:95:60: 73:1a:a7:1b:90:11:29:a8:38:55:d9:af:b4:c8:79: a4:52:9c:45:19:65:f4:dd:dc:41:3f:5e:7d:4a:0a: 53:32:3d:43:55:53:39:d3:f8:ec:7e:53:1b:a7:eb: bf:21:a5:dc:8a:cf:65:dc:92:01:d2:36:b2:bf:b4: 8b:67:f4:26:a3:48:de:ba:f3:e5:a3:b8:1b:ef:6c: ea:b1:5a:e8:00:61:d9:ac:5c:4d:c7:b2:89:16:0f: 83:b9:cf:5a:2c:b1:d7:2e:af:c7:23:f5:cf:5f:9d: f9:b9:34:97:7e:56:6e:f8:f5:21:fc:9d:30:1a:5c: 3e:8d:4b:97:74:da:bc:1d:5b:b3:7f:ce:2d:bc:19: a4:9e:29:25:d7:97:c5:d2:b4:b6:1b:59:c5:4c:ae: 32:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:31:4D:4E:6F:55:20:B1:6B:B5:EF:BE:99:F3:F1:82:7C:3F:6B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ed92f52-026c-3192-9ffd-dec716448a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:3a:f4:59:b0:7c:54:aa:b3:2a:7a:10:96:2e:71:8d:22:9b: 41:c0:8a:a0:63:14:74:c6:b0:2e:a8:11:ae:58:62:fe:49:29: e7:5c:2a:5a:cf:ca:f8:30:20:83:38:cb:88:c1:47:8f:b3:b8: 59:01:79:7f:33:6a:5a:e6:a7:8f:46:b9:db:3e:48:a9:56:28: 26:f9:cd:e9:73:45:5b:32:de:ed:8c:96:61:76:69:e8:08:b4: 4e:29:45:53:0c:6b:f4:8f:f7:2f:8a:b2:3e:22:fb:9f:1c:ba: b5:c0:db:d5:1f:50:e1:76:e6:cc:5c:c6:19:7c:cc:8a:19:4f: 53:1c:6f:7d:e7:03:e3:ac:5d:2e:81:8d:47:d2:7e:24:96:d8: e4:dc:e5:8f:8d:e3:78:3c:06:39:d5:1c:70:28:fb:4f:ee:85: 27:d4:70:a2:b0:d1:0a:db:88:1b:17:9e:a4:0b:b9:e5:60:71: 4e:33:ce:5c:4b:7d:2a:39:69:69:99:aa:17:99:0c:56:3f:4e: 88:97:c9:da:68:03:bc:88:68:0f:3f:2c:22:cf:bc:ce:bb:89: 06:98:87:e3:ed:c6:ef:eb:b4:03:1d:66:52:7c:81:a2:59:71: 87:f2:f1:7e:00:13:2f:de:d3:de:cf:0c:ab:34:f4:f2:db:b5: fb:e8:f9:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMv+Ct/CxuOji5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NjIyYzA1NmMtM2MyNi00ODMyLThjZWUtMDM0NzFkNmEyODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFXnNBp1QoPpYp4p9vO0/L9BXnD/YpzM7kNJ YG5sbLS4hgK5bvMlKek9JdMTOnsW8wC2TlTiHgXXifMd44nxyS43H0qclY206W5s 7PVnqU5GFmS0rv7A+SRW1r+l9mF4YbYjQovRlWBzGqcbkBEpqDhV2a+0yHmkUpxF GWX03dxBP159SgpTMj1DVVM50/jsflMbp+u/IaXcis9l3JIB0jayv7SLZ/Qmo0je uvPlo7gb72zqsVroAGHZrFxNx7KJFg+Duc9aLLHXLq/HI/XPX535uTSXflZu+PUh /J0wGlw+jUuXdNq8HVuzf84tvBmknikl15fF0rS2G1nFTK4ywwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQxTU5vVSCxa7Xvvpnz8YJ8P2tcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVkOTJmNTItMDI2Yy0z MTkyLTlmZmQtZGVjNzE2NDQ4YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY69FmwfFSqsyp6EJYucY0im0HAiqBjFHTGsC6oEa5YYv5JKedcKlrP yvgwIIM4y4jBR4+zuFkBeX8zalrmp49Guds+SKlWKCb5zelzRVsy3u2MlmF2aegI tE4pRVMMa/SP9y+Ksj4i+58curXA29UfUOF25sxcxhl8zIoZT1Mcb33nA+OsXS6B jUfSfiSW2OTc5Y+N43g8BjnVHHAo+0/uhSfUcKKw0QrbiBsXnqQLueVgcU4zzlxL fSo5aWmZqheZDFY/ToiXydpoA7yIaA8/LCLPvM67iQaYh+Ptxu/rtAMdZlJ8gaJZ cYfy8X4AEy/e097PDKs09PLbtfvo+aw= -----END CERTIFICATE-----Generated at Thu May 23 13:44:57 2024 by rpki-client on console-fra.rpki-client.org