$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa File: 67880de3-678a-3ed2-9b09-075e2377ad48.roa (raw, json) Hash identifier: +yViqp2B4CXwUMNdlWrK1LAwl//CjDRnVntorX2YP3E= Subject key identifier: 2F:C7:1E:8E:E4:95:D4:0E:35:B6:CD:58:87:18:DC:50:A3:A8:E6:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15500B038A75D2E9CA24640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 98.20.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:00:b0:38:a7:5d:2e:9c:a2:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=5a4893f0-2e89-4a0b-922f-4f68ec50a91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:ae:fb:5b:25:e4:b8:22:59:3f:fb:ae:97: b3:56:77:15:fa:ba:54:ce:6f:e6:05:28:19:cb:f6: 91:19:83:ba:d9:b1:d9:16:c7:2b:44:7b:bf:51:b5: 8d:37:e6:26:5a:52:1a:7b:1a:59:fc:67:1a:60:4d: 7b:42:21:44:13:eb:14:0b:30:cd:fd:51:36:75:98: db:8c:e9:7f:28:8c:3f:04:48:d9:6e:4a:0b:e0:a7: f5:d8:e0:0d:01:0d:b9:ba:0b:0a:41:cf:9c:cc:9d: 59:30:c8:b2:1c:b8:33:5a:c7:cf:f3:24:48:52:ef: 8e:3d:45:76:a4:34:b9:e7:65:2d:09:7a:d4:00:74: 24:50:dd:59:23:83:a3:b1:ab:ed:99:f8:2c:d1:2f: c7:c8:51:d8:d1:25:99:70:01:24:99:36:4e:04:0d: 48:7e:80:76:57:72:20:c7:d5:07:09:be:e1:3b:10: d6:c4:3d:b8:43:a8:9c:2c:70:13:03:d0:d7:85:ae: 6b:a7:e8:71:cf:9a:54:9e:69:89:19:75:ad:50:f6: f1:9f:7a:dc:a7:68:93:f2:af:cc:01:d9:fc:c4:c0: 75:42:6d:18:1d:73:50:1e:7a:97:74:7e:21:59:39: fd:79:a3:d5:c1:30:88:16:ba:b1:a2:21:7f:c3:ea: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C7:1E:8E:E4:95:D4:0E:35:B6:CD:58:87:18:DC:50:A3:A8:E6:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:70:35:f5:14:73:30:d9:f3:33:a2:b1:19:58:2f:7f:e8:8e: 45:b1:c2:e0:b4:ba:15:02:2c:a7:35:56:50:7e:3a:2d:78:6e: 12:71:f8:d7:92:20:fa:cf:e7:41:da:bf:45:ec:6c:60:a1:38: d7:07:27:17:0f:5d:95:17:ca:02:ae:f2:aa:6e:f9:b3:91:9e: ff:0e:5e:53:a1:94:b0:97:d2:30:65:d4:38:af:5b:10:a3:c7: 7b:1e:2c:65:cf:a1:65:3b:dc:4b:9f:56:93:d5:58:cf:a2:91: d0:2e:39:0b:14:ef:b2:25:33:85:0f:f3:f2:93:19:1a:83:fe: 2e:aa:e3:c9:da:55:7d:82:9a:b5:34:08:6f:4f:3e:f2:45:c7: 66:1e:11:36:75:1e:76:12:13:df:23:95:c4:a5:0b:fe:cc:84: 75:e0:b2:29:16:b7:c0:27:b7:13:bb:8a:f4:29:ad:cd:a7:16: a3:ab:3b:66:68:64:34:02:0c:79:5c:9b:d5:6b:73:c2:4b:34: 59:8a:3b:b5:35:ed:27:fd:a8:91:b7:ec:04:1e:b9:5e:4f:f1: a7:03:dd:84:48:de:d1:f7:55:69:24:76:10:ea:d8:55:a1:5f: 24:83:cb:45:76:fe:56:96:1b:18:1a:51:98:4e:e1:e2:51:f6: f5:3d:5b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQCwOKddLpyiRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NWE0ODkzZjAtMmU4OS00YTBiLTkyMmYtNGY2OGVjNTBhOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWau+1sl5LgiWT/7rpezVncV+rpUzm/mBSgZ y/aRGYO62bHZFscrRHu/UbWNN+YmWlIaexpZ/GcaYE17QiFEE+sUCzDN/VE2dZjb jOl/KIw/BEjZbkoL4Kf12OANAQ25ugsKQc+czJ1ZMMiyHLgzWsfP8yRIUu+OPUV2 pDS552UtCXrUAHQkUN1ZI4Ojsavtmfgs0S/HyFHY0SWZcAEkmTZOBA1IfoB2V3Ig x9UHCb7hOxDWxD24Q6icLHATA9DXha5rp+hxz5pUnmmJGXWtUPbxn3rcp2iT8q/M Adn8xMB1Qm0YHXNQHnqXdH4hWTn9eaPVwTCIFrqxoiF/w+pcFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/HHo7kldQONbbNWIcY3FCjqOZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc4ODBkZTMtNjc4YS0z ZWQyLTliMDktMDc1ZTIzNzdhZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5wNfUUczDZ8zOisRlYL3/ojkWxwuC0uhUCLKc1VlB+Oi14bhJx+NeS IPrP50Hav0XsbGChONcHJxcPXZUXygKu8qpu+bORnv8OXlOhlLCX0jBl1DivWxCj x3seLGXPoWU73EufVpPVWM+ikdAuOQsU77IlM4UP8/KTGRqD/i6q48naVX2CmrU0 CG9PPvJFx2YeETZ1HnYSE98jlcSlC/7MhHXgsikWt8AntxO7ivQprc2nFqOrO2Zo ZDQCDHlcm9Vrc8JLNFmKO7U17Sf9qJG37AQeuV5P8acD3YRI3tH3VWkkdhDq2FWh XySDy0V2/laWGxgaUZhO4eJR9vU9WwA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:05 2024 by rpki-client on console-fra.rpki-client.org