$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa File: 942824f6-6070-3132-8cee-ad290f982789.roa (raw, json) Hash identifier: vSGwEB9kxns5LHafZBAWBBET14EmIRHLfIPdQH8G98E= Subject key identifier: 07:F5:95:9B:16:DA:18:1E:27:DD:AB:9F:1F:10:68:3C:F3:B4:31:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40DAA10534E230FFF12840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 98.17.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:da:a1:05:34:e2:30:ff:f1:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=e1799226-2463-41f9-9c48-64c62882bcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:ca:9a:19:5f:a7:84:01:68:c4:97:e5:5b: db:7e:59:e7:00:87:ff:a4:45:ef:14:fb:b5:9b:a2: dd:20:7b:8d:d3:d3:31:e5:36:b7:2a:10:2e:02:b5: 5c:ae:b3:17:cc:55:6d:a7:2f:de:1a:1d:19:42:f3: 64:c8:24:f7:3d:a9:8b:48:d1:64:12:21:c0:73:f8: ea:96:95:ee:29:0d:4b:57:3d:16:0c:fb:af:aa:2d: 43:e0:60:92:58:51:be:18:05:ce:9e:77:f6:31:0e: 74:07:d0:18:f4:2d:5e:82:6c:05:d0:72:3c:16:34: 06:d7:81:0e:bc:4f:fe:27:38:5c:24:e9:f8:68:f5: df:a6:43:0e:39:8b:8d:72:35:d6:a9:8f:72:96:24: f1:81:62:e3:b1:16:45:60:e0:44:06:1b:bf:fb:ca: e8:aa:cd:df:f5:30:f1:a5:6a:4c:ad:51:f2:5d:84: c0:93:17:0c:3c:93:eb:4a:27:88:b7:04:49:1e:8f: 53:64:a7:cd:f8:45:a1:46:db:ee:83:07:8d:a9:df: 52:36:5c:2e:b7:f7:11:3a:a1:d4:83:a1:fa:77:6b: e9:c6:42:58:f0:32:0a:6b:54:42:c9:9a:d9:78:74: f0:6b:69:f9:63:35:31:71:c8:d7:30:ec:1a:93:8f: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F5:95:9B:16:DA:18:1E:27:DD:AB:9F:1F:10:68:3C:F3:B4:31:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:10:2d:bc:cd:dd:29:44:a8:9e:12:57:b0:55:51:59:65:c0: 8a:01:77:5b:4c:55:47:04:3e:de:c3:d4:df:a2:dd:6b:6b:f5: f6:a0:0c:eb:94:08:ea:ea:0b:9f:40:e9:83:1e:8f:cd:32:2f: 6f:e3:83:31:22:46:7e:0c:78:43:ee:db:90:4e:1d:b1:3f:00: f7:da:2c:df:78:e2:93:d4:f8:93:ff:4e:c4:57:98:60:32:47: 97:d8:80:c2:7f:7a:70:35:99:2c:74:60:ab:1c:2a:6d:60:37: ec:2d:56:0c:f2:44:6b:ce:03:38:06:08:2b:74:6f:82:68:67: 5f:54:13:fb:7f:6f:11:2b:87:e8:93:0b:ad:f1:05:7a:5a:46: fe:84:ba:4c:89:f3:5b:eb:8f:d8:70:e5:94:68:0a:bb:c6:f2: df:bd:f7:3d:3c:ce:4f:18:9a:34:38:e9:e7:71:f9:39:bd:54: 63:62:2c:d9:04:64:7f:ed:6e:a2:72:c5:45:55:c8:76:ce:31: ad:89:28:1e:56:24:eb:1e:26:c5:0e:5e:a6:4d:34:49:c6:63: 35:84:b3:da:39:be:32:3c:64:66:0b:9d:06:ed:9d:b7:fa:3f: 66:d3:d7:6c:5f:62:0f:9a:bf:51:73:6b:d2:38:6e:12:cb:4a: 7c:e8:24:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQNqhBTTiMP/xKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTE3OTkyMjYtMjQ2My00MWY5LTljNDgtNjRjNjI4ODJiY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgPKmhlfp4QBaMSX5VvbflnnAIf/pEXvFPu1 m6LdIHuN09Mx5Ta3KhAuArVcrrMXzFVtpy/eGh0ZQvNkyCT3PamLSNFkEiHAc/jq lpXuKQ1LVz0WDPuvqi1D4GCSWFG+GAXOnnf2MQ50B9AY9C1egmwF0HI8FjQG14EO vE/+JzhcJOn4aPXfpkMOOYuNcjXWqY9yliTxgWLjsRZFYOBEBhu/+8roqs3f9TDx pWpMrVHyXYTAkxcMPJPrSieItwRJHo9TZKfN+EWhRtvugweNqd9SNlwut/cROqHU g6H6d2vpxkJY8DIKa1RCyZrZeHTwa2n5YzUxccjXMOwak48rCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAf1lZsW2hgeJ92rnx8QaDzztDFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQyODI0ZjYtNjA3MC0z MTMyLThjZWUtYWQyOTBmOTgyNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwQLbzN3SlEqJ4SV7BVUVllwIoBd1tMVUcEPt7D1N+i3Wtr9fagDOuU COrqC59A6YMej80yL2/jgzEiRn4MeEPu25BOHbE/APfaLN944pPU+JP/TsRXmGAy R5fYgMJ/enA1mSx0YKscKm1gN+wtVgzyRGvOAzgGCCt0b4JoZ19UE/t/bxErh+iT C63xBXpaRv6EukyJ81vrj9hw5ZRoCrvG8t+99z08zk8YmjQ46edx+Tm9VGNiLNkE ZH/tbqJyxUVVyHbOMa2JKB5WJOseJsUOXqZNNEnGYzWEs9o5vjI8ZGYLnQbtnbf6 P2bT12xfYg+av1Fza9I4bhLLSnzoJFc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:43:58 2024 by rpki-client on console-ams.rpki-client.org