$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa File: 5c4d4390-cf6b-3694-845f-b3f976f482a7.roa (raw, json) Hash identifier: xLa+MZixDSKkV84hpvEqu6Zv5mnVoDZGlpfTd7BWViU= Subject key identifier: 18:96:2B:15:C8:AB:89:02:CB:65:7C:F3:33:68:B0:C0:6A:90:A8:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285845533303B984EDF02030A1F000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 98.20.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:03:b9:84:ed:f0:20:30:a1:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=44637791-5d62-4a61-970c-08074d6e2657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:6b:02:c7:9d:46:c9:a3:b5:d3:6d:2a:d2: 41:d0:2f:e1:1c:f0:69:4b:02:7a:8a:16:fd:c1:39: 12:58:58:cb:ff:96:20:11:3a:f3:7a:75:70:dd:12: 6c:00:55:da:34:ee:24:b7:b2:d3:1c:3e:ab:80:cb: d3:bb:7e:e1:2a:4a:dd:11:36:35:b9:13:b7:0b:16: a2:11:41:12:26:cc:dc:61:b9:fc:7e:fe:5f:2e:45: ce:94:05:19:7a:26:7c:7b:c1:41:67:df:3b:c2:1d: f5:a5:dc:33:86:72:0c:09:5f:8a:5e:47:db:1f:a1: 9b:2f:1e:bc:5b:01:1d:aa:55:2c:5f:d5:73:e7:95: e0:61:80:4a:c5:0d:80:d8:13:a3:83:c0:ba:74:b6: 75:3e:0b:39:cd:f4:0b:34:74:eb:c4:d0:69:26:eb: 6b:2d:e7:e7:85:0a:ba:e3:2d:bc:a9:b7:2e:94:de: 27:06:37:01:44:c4:fb:6e:83:46:10:98:55:8d:d1: a1:e6:c2:e9:f1:51:d0:58:d2:83:c9:4e:57:d2:f3: 1e:2b:18:30:a0:38:e9:4a:0b:63:09:08:13:d0:3f: 7e:50:c6:21:bc:4c:b2:bd:c6:41:e1:ef:cc:55:3f: 43:17:9e:6a:cf:04:c0:fe:2a:3f:ad:18:52:1f:75: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:96:2B:15:C8:AB:89:02:CB:65:7C:F3:33:68:B0:C0:6A:90:A8:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:30:e6:3f:0e:4b:13:fe:dc:bf:bf:fb:0d:4b:49:b0:64:ad: 39:b7:1d:a0:b1:59:af:03:3f:17:41:e8:12:7e:9c:cb:48:7f: bb:68:e9:bb:14:af:0a:00:31:26:a6:92:06:a1:06:20:8e:d1: 92:e2:ed:d4:d1:fe:25:82:a7:ce:5e:de:d7:d0:eb:5c:0c:e7: bd:2f:d8:74:c5:dd:ab:a4:4d:6b:8c:e8:e4:95:a5:24:9e:79: 95:74:7d:5d:c5:6d:1d:5a:fc:f0:f0:18:99:b6:ff:ef:ee:f6: 4a:a1:d8:89:12:72:de:4d:ae:20:20:4b:52:fb:fe:39:bc:d3: 89:34:fb:51:26:0c:fb:d7:e2:d9:c1:b3:b8:18:be:d8:81:a2: 84:6c:b1:e4:28:88:5b:8e:0f:7a:c1:db:5d:4b:26:35:89:ce: a6:b6:a0:1c:1f:b3:85:73:20:f8:9e:43:a5:a6:e9:83:c2:51: f6:9c:fc:b4:9c:ed:27:d8:37:c7:c8:fd:f3:c4:1a:be:48:57: 60:b4:d5:21:9e:0c:29:08:c8:cd:14:73:75:aa:11:d2:f1:66: c5:94:32:7a:f7:6a:d4:1c:3b:7d:59:bc:96:b9:db:f3:4c:c4: 5f:22:6e:29:5e:6b:54:cc:38:d4:c4:e4:47:44:3e:31:e5:ae: a5:5e:eb:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMwO5hO3wIDCh8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NDQ2Mzc3OTEtNWQ2Mi00YTYxLTk3MGMtMDgwNzRkNmUyNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlONrAsedRsmjtdNtKtJB0C/hHPBpSwJ6ihb9 wTkSWFjL/5YgETrzenVw3RJsAFXaNO4kt7LTHD6rgMvTu37hKkrdETY1uRO3Cxai EUESJszcYbn8fv5fLkXOlAUZeiZ8e8FBZ987wh31pdwzhnIMCV+KXkfbH6GbLx68 WwEdqlUsX9Vz55XgYYBKxQ2A2BOjg8C6dLZ1Pgs5zfQLNHTrxNBpJutrLefnhQq6 4y28qbculN4nBjcBRMT7boNGEJhVjdGh5sLp8VHQWNKDyU5X0vMeKxgwoDjpSgtj CQgT0D9+UMYhvEyyvcZB4e/MVT9DF55qzwTA/io/rRhSH3WaLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiWKxXIq4kCy2V88zNosMBqkKiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM0ZDQzOTAtY2Y2Yi0z Njk0LTg0NWYtYjNmOTc2ZjQ4MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYw5j8OSxP+3L+/+w1LSbBkrTm3HaCxWa8DPxdB6BJ+nMtIf7to6bsU rwoAMSamkgahBiCO0ZLi7dTR/iWCp85e3tfQ61wM570v2HTF3aukTWuM6OSVpSSe eZV0fV3FbR1a/PDwGJm2/+/u9kqh2IkSct5NriAgS1L7/jm804k0+1EmDPvX4tnB s7gYvtiBooRsseQoiFuOD3rB211LJjWJzqa2oBwfs4VzIPieQ6Wm6YPCUfac/LSc 7SfYN8fI/fPEGr5IV2C01SGeDCkIyM0Uc3WqEdLxZsWUMnr3atQcO31ZvJa52/NM xF8ibilea1TMONTE5EdEPjHlrqVe6wY= -----END CERTIFICATE-----Generated at Thu May 23 15:53:47 2024 by rpki-client on console-fra.rpki-client.org