$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/748b9a4d-38fc-3c59-aa9f-5ef994392cb6.roa File: 748b9a4d-38fc-3c59-aa9f-5ef994392cb6.roa (raw, json) Hash identifier: bF6JWUU6irW6lVUAvsTqTpNCFj+o5A9dIoYzndXp7BI= Subject key identifier: 36:FE:95:9C:BC:87:E7:E3:62:06:D9:36:A3:EA:97:C5:84:0E:ED:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40DC84906E9071E0F681B6 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/748b9a4d-38fc-3c59-aa9f-5ef994392cb6.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 98.22.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:dc:84:90:6e:90:71:e0:f6:81:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=2937e4a5-e892-4f5b-823f-a8746d089a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:b5:7a:97:c3:b7:f3:e5:96:7d:7a:eb:da: 6d:84:19:2a:ae:de:22:a0:b6:b1:49:56:a5:83:35: 4a:02:72:ff:17:12:5a:8a:4a:4b:36:ee:1f:9f:8b: 68:7e:6f:c5:b0:87:94:84:d0:17:a4:a1:12:d1:a5: 44:16:30:4c:86:75:1c:30:b6:e6:f8:5e:a4:b2:67: fa:68:b6:ac:d3:60:bc:2f:b1:40:7a:62:df:a6:1a: 4f:1f:ac:a9:0c:f2:82:6d:4b:9b:91:f1:a4:bb:6a: 4d:fa:45:b4:c1:51:57:51:1b:06:9a:af:29:69:42: 82:71:d6:a2:bb:33:19:1f:b2:aa:37:8a:e3:53:3e: f8:f1:60:59:d6:af:8d:a8:bd:d9:66:62:1a:54:d8: 41:75:5b:9c:82:13:47:15:d9:a9:01:c7:f0:f8:d5: 5c:e6:92:90:71:ae:35:ce:c1:6a:8a:d6:69:26:bf: 18:1a:2b:75:6d:4c:78:d5:2a:ff:a2:58:67:4c:4e: ba:f4:de:fc:ce:4a:a5:53:94:f4:25:5f:15:8c:43: a3:bf:4f:87:71:44:4b:15:49:32:77:e8:94:74:b8: 24:57:d3:1f:30:36:92:60:4a:46:bc:16:cd:32:9b: a0:02:c1:4b:10:6b:74:40:dd:18:01:16:37:c7:1a: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FE:95:9C:BC:87:E7:E3:62:06:D9:36:A3:EA:97:C5:84:0E:ED:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/748b9a4d-38fc-3c59-aa9f-5ef994392cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e1:b4:8d:7b:5e:57:09:57:52:15:da:94:45:c4:16:89:0b: e1:8c:9e:3b:f8:ff:d5:d5:8a:06:c1:f2:34:0c:67:9c:6d:51: a2:65:73:12:87:d2:a3:8b:8a:b7:5b:30:eb:8f:43:76:5a:ca: 01:ff:57:a2:4e:4c:3b:1c:cf:e5:3c:9f:35:b7:30:ab:3a:f3: cd:d1:4e:00:96:47:6e:37:27:99:d2:94:ac:4e:35:6e:99:5e: 65:6f:fb:01:bb:dc:b8:88:77:f9:b9:c0:a7:b7:e3:94:ee:9a: 9b:a8:d7:00:b9:25:e3:1b:86:51:90:46:94:1e:d8:e3:9b:79: f7:42:4a:2e:d6:37:85:b7:ec:bc:7e:00:18:62:f6:16:64:79: 12:35:32:01:e8:19:d6:c7:06:ae:f9:9c:f3:61:29:47:fa:b0: 89:1e:83:e0:89:a2:54:14:7e:2d:24:34:d0:34:35:d0:76:d9: c7:92:7a:09:09:8c:95:7d:02:a3:56:93:0d:27:95:f5:9e:03: df:ed:39:59:dd:2f:e8:e9:30:43:e3:bd:5d:b4:02:01:3d:9a: 25:d4:b0:ef:e9:c7:18:e9:fe:ef:7c:7e:9e:36:14:70:a7:bf: 6a:a7:76:d2:b7:1c:ff:9c:8b:8e:2a:60:39:3e:c2:4a:06:9c: ae:af:82:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNyEkG6QceD2gbYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MjkzN2U0YTUtZTg5Mi00ZjViLTgyM2YtYTg3NDZkMDg5YTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7G1epfDt/Plln1669pthBkqrt4ioLaxSVal gzVKAnL/FxJaikpLNu4fn4tofm/FsIeUhNAXpKES0aVEFjBMhnUcMLbm+F6ksmf6 aLas02C8L7FAemLfphpPH6ypDPKCbUubkfGku2pN+kW0wVFXURsGmq8paUKCcdai uzMZH7KqN4rjUz748WBZ1q+NqL3ZZmIaVNhBdVucghNHFdmpAcfw+NVc5pKQca41 zsFqitZpJr8YGit1bUx41Sr/olhnTE669N78zkqlU5T0JV8VjEOjv0+HcURLFUky d+iUdLgkV9MfMDaSYEpGvBbNMpugAsFLEGt0QN0YARY3xxok7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb+lZy8h+fjYgbZNqPql8WEDu2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzQ4YjlhNGQtMzhmYy0z YzU5LWFhOWYtNWVmOTk0MzkyY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/htI17XlcJV1IV2pRFxBaJC+GMnjv4/9XVigbB8jQMZ5xtUaJlcxKH 0qOLirdbMOuPQ3ZaygH/V6JOTDscz+U8nzW3MKs6883RTgCWR243J5nSlKxONW6Z XmVv+wG73LiId/m5wKe345Tumpuo1wC5JeMbhlGQRpQe2OObefdCSi7WN4W37Lx+ ABhi9hZkeRI1MgHoGdbHBq75nPNhKUf6sIkeg+CJolQUfi0kNNA0NdB22ceSegkJ jJV9AqNWkw0nlfWeA9/tOVndL+jpMEPjvV20AgE9miXUsO/pxxjp/u98fp42FHCn v2qndtK3HP+ci44qYDk+wkoGnK6vglw= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:08 2024 by rpki-client on console-fra.rpki-client.org