$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65c051a-9022-3436-b16e-e62d98c54372.roa File: a65c051a-9022-3436-b16e-e62d98c54372.roa (raw, json) Hash identifier: kieN3iJWJTzPLFhwo8ip/E5TPFOIKB1iAs+EIvZLGb4= Subject key identifier: 2B:F8:58:11:C0:53:05:3B:E3:48:77:EB:86:7E:57:63:05:2B:EE:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847E095011DFC1A17419E0D3280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65c051a-9022-3436-b16e-e62d98c54372.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 7029 IP address blocks: 98.19.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:95:01:1d:fc:1a:17:41:9e:0d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=4bf9fc98-7250-4efe-ad05-d1ab2bdc9dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:42:ac:00:9d:d7:63:32:1a:0b:b9:92:20:6d: 8f:81:60:35:b6:d7:6c:f1:e3:6f:66:fe:8f:a1:cc: 50:db:1d:06:b3:c2:f0:28:3b:51:28:b5:1b:dc:8a: 91:15:b2:55:78:87:e7:b4:51:e5:aa:d1:10:55:3b: 41:75:ea:19:83:ef:1a:cf:b1:35:55:d0:6d:e0:57: 13:0b:b6:e4:95:74:ce:e3:cb:fa:c3:4e:f4:ac:19: cf:9b:46:8d:0d:b2:71:18:31:d3:6b:9f:44:35:db: 7e:25:c8:a4:82:96:06:11:1e:38:59:61:5a:f7:72: f3:ec:b5:07:62:87:2b:e3:58:01:a9:d5:6c:a6:28: 78:57:e8:f5:af:78:42:a3:8d:23:86:92:40:7b:65: af:88:6f:a1:e5:b0:ec:7d:88:d1:ca:be:43:64:ab: 81:3c:49:77:34:17:7b:26:b7:da:b5:f8:27:d2:6e: a9:59:29:9d:85:6d:b6:a7:b4:87:4e:66:e2:79:50: 2e:54:b8:1f:ce:fd:b0:52:4f:99:07:64:14:33:a7: 1c:f6:72:07:04:c1:9e:d1:68:6d:25:36:fa:38:8c: 14:a5:bc:e3:82:1a:d7:09:2c:ef:47:2b:22:f3:ed: 95:82:04:f4:1c:d0:7f:8f:8f:95:91:21:84:d5:6f: 2d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F8:58:11:C0:53:05:3B:E3:48:77:EB:86:7E:57:63:05:2B:EE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65c051a-9022-3436-b16e-e62d98c54372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d1:e5:74:f5:ad:ab:fc:ed:10:b1:25:14:29:9f:5c:6b:00: 84:9b:bc:3c:f8:5d:1f:72:cf:b0:0f:df:d3:bb:51:4b:a6:d5: b3:ea:0f:ee:4a:98:36:53:2e:81:02:8d:39:3d:70:32:76:97: 1d:eb:7b:15:6b:9e:5d:96:c6:9a:79:6c:e7:25:fa:e3:7c:f3: 2c:71:f9:82:31:78:61:19:91:3a:97:07:dc:27:fd:83:dc:26: d1:6a:df:18:25:3a:c6:5f:c8:36:94:57:17:74:53:2c:b3:09: 73:0e:c3:16:1b:9a:b5:e2:f6:13:a6:17:55:68:ee:1d:c7:eb: 11:ca:2d:a7:83:cb:13:ec:0a:bb:67:94:50:f7:7b:ca:5f:ef: db:7b:10:b8:2c:12:7c:3a:6b:41:65:fa:4e:5f:95:40:ba:bc: 1b:ed:40:40:ed:85:ec:41:48:79:d4:c0:55:c6:96:db:f0:ee: 02:32:ce:59:d7:a2:fa:24:93:5e:ee:7e:cf:33:13:a7:e9:9d: 45:4f:c2:75:18:f0:c1:ff:ab:84:eb:fe:c5:03:80:88:54:02: 01:41:f5:9d:bb:8e:4c:73:48:6e:4c:16:31:7a:49:d9:df:1a: 9e:d5:34:c6:86:20:8e:3d:13:24:3a:35:87:9d:e1:77:39:df: a8:ef:2d:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglQEd/BoXQZ4NMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk NGJmOWZjOTgtNzI1MC00ZWZlLWFkMDUtZDFhYjJiZGM5ZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0KsAJ3XYzIaC7mSIG2PgWA1ttds8eNvZv6P ocxQ2x0Gs8LwKDtRKLUb3IqRFbJVeIfntFHlqtEQVTtBdeoZg+8az7E1VdBt4FcT C7bklXTO48v6w070rBnPm0aNDbJxGDHTa59ENdt+JcikgpYGER44WWFa93Lz7LUH Yocr41gBqdVspih4V+j1r3hCo40jhpJAe2WviG+h5bDsfYjRyr5DZKuBPEl3NBd7 Jrfatfgn0m6pWSmdhW22p7SHTmbieVAuVLgfzv2wUk+ZB2QUM6cc9nIHBMGe0Wht JTb6OIwUpbzjghrXCSzvRysi8+2VggT0HNB/j4+VkSGE1W8tVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv4WBHAUwU740h364Z+V2MFK+7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY1YzA1MWEtOTAyMi0z NDM2LWIxNmUtZTYyZDk4YzU0MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbR5XT1rav87RCxJRQpn1xrAISbvDz4XR9yz7AP39O7UUum1bPqD+5K mDZTLoECjTk9cDJ2lx3rexVrnl2Wxpp5bOcl+uN88yxx+YIxeGEZkTqXB9wn/YPc JtFq3xglOsZfyDaUVxd0UyyzCXMOwxYbmrXi9hOmF1Vo7h3H6xHKLaeDyxPsCrtn lFD3e8pf79t7ELgsEnw6a0Fl+k5flUC6vBvtQEDthexBSHnUwFXGltvw7gIyzlnX ovokk17ufs8zE6fpnUVPwnUY8MH/q4Tr/sUDgIhUAgFB9Z27jkxzSG5MFjF6Sdnf Gp7VNMaGII49EyQ6NYed4Xc536jvLZA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:16 2024 by rpki-client on console-fra.rpki-client.org