$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa File: a428fefd-e21b-3a06-93e8-83dbc2a71707.roa (raw, json) Hash identifier: 5Wf6kWXa7EWL8+LgLzGbjYwPBRnaZkFZfTNvDy4TQeA= Subject key identifier: DD:8E:F5:01:42:10:6F:63:5F:D5:16:FF:D7:09:A6:66:DD:0B:83:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858475D40DD23F3661DBAC8E62160 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa Signing time: Sat 28 Sep 2024 13:00:41 +0000 ROA not before: Sat 28 Sep 2024 13:00:41 +0000 ROA not after: Fri 27 Dec 2024 14:00:41 +0000 asID: 7029 IP address blocks: 98.16.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5d:40:dd:23:f3:66:1d:ba:c8:e6:21:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 13:00:41 2024 GMT Not After : Dec 27 14:00:41 2024 GMT Subject: CN=05b268ab-5bba-46a9-a745-b11014caac2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:e7:31:f8:3e:af:b6:e6:bb:14:b3:f8:f1: f7:17:55:e4:94:58:8a:74:41:79:43:32:8e:3a:7e: 12:90:63:6d:9e:f9:02:e7:fd:45:98:10:b6:39:97: 0f:cc:7f:f9:e9:0e:20:6a:8a:84:81:5b:10:1e:39: 28:7c:e7:00:f8:6e:f1:e7:a5:6d:f8:00:b3:19:30: 4a:8a:13:24:c9:09:6f:14:12:6e:39:5f:5d:22:16: 61:2b:48:2e:35:36:a9:f6:96:59:96:28:c1:51:e6: b9:28:6a:85:63:28:5d:69:39:48:7f:8a:df:5c:55: 03:03:6e:1a:a0:9e:1f:5f:41:0b:70:4d:40:78:9a: 42:29:99:d5:78:fe:8f:b3:23:1b:11:7b:50:99:34: 0d:7d:f4:36:8e:e6:35:3d:da:64:85:89:56:97:d6: 5f:a6:72:92:fd:72:d5:60:08:27:d7:08:76:4c:d5: 74:55:da:3a:c9:d0:4d:5c:fe:f1:85:9f:a8:21:95: 54:de:8f:8e:98:58:52:61:d9:bf:40:47:25:c6:f9: f2:db:3f:03:d4:c0:81:2a:2d:c4:b9:a5:42:9e:dc: 81:f1:9f:bc:e1:44:0c:7e:7b:36:c3:ec:85:38:8a: 2d:6f:36:2e:11:f7:3e:7a:05:a4:e0:42:05:4b:10: 72:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8E:F5:01:42:10:6F:63:5F:D5:16:FF:D7:09:A6:66:DD:0B:83:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8d:49:bd:50:c9:3b:83:13:54:ad:d2:6c:ce:62:bd:97:de: 0f:39:65:7a:58:85:8f:cd:aa:e8:81:7a:d2:68:cd:5c:52:b8: d0:51:22:a7:d6:c0:3d:6d:cf:56:88:ca:dc:ac:75:74:b3:92: 38:fb:af:fe:e9:3b:ee:40:6a:4d:9d:bb:1b:5b:40:fc:62:ea: ef:da:6a:52:6a:cd:de:45:76:a8:ec:77:d0:d9:d2:4b:29:11: 47:5c:82:00:75:5e:0b:b1:fb:e9:7f:ae:ae:77:af:9a:34:42: 52:a0:d2:78:60:0b:98:ab:31:f9:b0:97:e5:b1:9a:98:00:89: 02:34:e0:3e:b6:6f:31:11:f4:0c:00:f9:2d:d3:17:d9:ba:17: 3d:79:07:4a:32:66:4b:6e:3b:4c:19:02:a7:16:1b:d4:57:f5: 06:a0:b0:c4:6b:06:42:81:86:39:ab:2e:21:6b:7b:42:cc:02: 9e:59:65:1e:cd:56:48:41:db:02:2d:1c:fa:a1:8b:d4:f8:7e: 29:7c:22:a5:04:aa:35:01:c3:a6:11:99:05:90:49:cd:6c:8e: f7:e8:72:90:ca:8f:15:d3:85:92:08:7c:d9:d0:72:e7:32:6d: ef:03:e4:ee:11:d9:5f:25:36:22:0e:0a:7b:4d:29:62:d6:3f: a9:89:d2:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEddQN0j82YdusjmIWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkyODEzMDA0MVoXDTI0MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDViMjY4YWItNWJiYS00NmE5LWE3NDUtYjExMDE0Y2FhYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCLnMfg+r7bmuxSz+PH3F1XklFiKdEF5QzKO On4SkGNtnvkC5/1FmBC2OZcPzH/56Q4gaoqEgVsQHjkofOcA+G7x56Vt+ACzGTBK ihMkyQlvFBJuOV9dIhZhK0guNTap9pZZlijBUea5KGqFYyhdaTlIf4rfXFUDA24a oJ4fX0ELcE1AeJpCKZnVeP6PsyMbEXtQmTQNffQ2juY1PdpkhYlWl9ZfpnKS/XLV YAgn1wh2TNV0Vdo6ydBNXP7xhZ+oIZVU3o+OmFhSYdm/QEclxvny2z8D1MCBKi3E uaVCntyB8Z+84UQMfns2w+yFOIotbzYuEfc+egWk4EIFSxByuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2O9QFCEG9jX9UW/9cJpmbdC4PuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQyOGZlZmQtZTIxYi0z YTA2LTkzZTgtODNkYmMyYTcxNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+NSb1QyTuDE1St0mzOYr2X3g85ZXpYhY/NquiBetJozVxSuNBRIqfW wD1tz1aIytysdXSzkjj7r/7pO+5Aak2duxtbQPxi6u/aalJqzd5Fdqjsd9DZ0ksp EUdcggB1Xgux++l/rq53r5o0QlKg0nhgC5irMfmwl+WxmpgAiQI04D62bzER9AwA +S3TF9m6Fz15B0oyZktuO0wZAqcWG9RX9QagsMRrBkKBhjmrLiFre0LMAp5ZZR7N VkhB2wItHPqhi9T4fil8IqUEqjUBw6YRmQWQSc1sjvfocpDKjxXThZIIfNnQcucy be8D5O4R2V8lNiIOCntNKWLWP6mJ0mE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:02 2024 by rpki-client on console-ams.rpki-client.org