$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa File: aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa (raw, json) Hash identifier: oeQvlPe42WcBJO0rrJAlO+2p6wWXi8dXsiCndfkwwtI= Subject key identifier: 5E:D8:30:51:4A:22:ED:6C:CC:7B:D3:81:41:1B:BA:46:0A:92:24:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847E095014EC1856F8646904E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 7029 IP address blocks: 98.21.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:95:01:4e:c1:85:6f:86:46:90:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=4037f334-88bd-4792-a403-3e8ebf4223fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:91:cb:ae:9b:84:6d:3e:5f:29:eb:53:68: 97:3b:a0:a7:22:9e:8b:48:6a:5e:12:a6:6c:d7:4e: da:b5:90:99:d6:b0:72:2d:d1:0a:ea:3e:c2:46:45: b7:9d:fe:28:11:0d:32:59:15:38:e4:dc:d4:40:cf: 8b:56:47:88:74:08:42:64:38:ce:9a:0e:20:e5:21: be:b0:0f:fe:c0:bb:73:b8:c0:a1:bc:12:49:44:14: ab:0f:98:23:f8:57:72:e3:8b:6c:27:c1:c9:53:34: 87:58:8d:0f:62:d9:c1:3a:e1:a3:e0:dd:6f:0e:d1: 44:0b:82:88:95:98:db:24:de:ec:0c:c0:e4:de:08: 87:a9:ab:54:bb:ad:40:2b:f0:cb:a2:19:cd:9b:71: 16:5a:90:77:7a:31:95:22:80:b5:46:e8:67:24:d2: 12:76:de:64:74:e7:e5:9c:c1:dd:f7:97:50:76:23: dd:d1:5e:e8:36:c8:f2:cb:01:f3:ce:35:15:73:ab: c7:7f:ca:e9:94:35:aa:86:d8:cd:30:b7:56:9a:fe: d7:74:00:86:79:31:85:05:14:c6:26:a9:69:ca:ff: ea:30:d5:9f:b3:4f:ce:15:ce:41:80:66:5a:da:68: 1b:ba:67:58:55:d9:d4:61:e0:95:4b:1e:12:db:b8: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D8:30:51:4A:22:ED:6C:CC:7B:D3:81:41:1B:BA:46:0A:92:24:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:63:8e:fc:b6:82:1c:db:f6:f8:5c:cf:4b:14:55:69:60:98: 53:de:83:23:b1:af:1f:2a:cc:cc:a2:7f:8f:c6:ae:45:9f:7c: 03:15:0c:a9:54:68:1a:0f:37:0a:fc:4b:e6:9f:3d:1d:df:4c: 41:17:b3:e0:54:a7:d1:aa:dc:71:42:95:2f:31:6b:16:60:c1: 31:52:2b:05:5d:de:bc:f2:a4:97:24:46:20:dd:e3:51:52:99: 07:10:ee:ab:8a:5e:df:58:ba:bc:ee:c0:da:26:fe:81:85:7c: 7b:5d:35:5a:2b:26:36:ad:e0:2d:3f:9a:ec:92:1f:5f:56:c9: 43:71:cf:42:2b:55:a9:85:7f:25:55:44:f9:48:69:b0:e1:36: de:55:46:33:db:20:27:85:0e:73:88:68:64:50:e8:b5:55:e5: 18:31:a0:27:31:28:71:5c:f5:58:fc:b5:e9:c9:7e:c1:8e:6b: bd:db:f7:7b:46:26:1d:7d:c0:20:a8:f0:1c:76:06:59:f3:e7: b1:21:31:40:68:d1:a9:ca:fc:59:ad:f1:4a:37:bd:b5:fb:b3: 19:31:f8:e6:03:ad:a2:fd:1b:72:84:d2:88:be:f0:6f:96:bf: b5:f5:6f:6e:76:fe:ae:b6:40:1b:5c:11:79:37:58:c2:97:a9: 93:b8:48:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglQFOwYVvhkaQTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk NDAzN2YzMzQtODhiZC00NzkyLWE0MDMtM2U4ZWJmNDIyM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA6Ry66bhG0+XynrU2iXO6CnIp6LSGpeEqZs 107atZCZ1rByLdEK6j7CRkW3nf4oEQ0yWRU45NzUQM+LVkeIdAhCZDjOmg4g5SG+ sA/+wLtzuMChvBJJRBSrD5gj+Fdy44tsJ8HJUzSHWI0PYtnBOuGj4N1vDtFEC4KI lZjbJN7sDMDk3giHqatUu61AK/DLohnNm3EWWpB3ejGVIoC1RuhnJNISdt5kdOfl nMHd95dQdiPd0V7oNsjyywHzzjUVc6vHf8rplDWqhtjNMLdWmv7XdACGeTGFBRTG Jqlpyv/qMNWfs0/OFc5BgGZa2mgbumdYVdnUYeCVSx4S27inRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7YMFFKIu1szHvTgUEbukYKkiTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWFjYzNmMjMtZGRjZC0z NjhlLTg5YTgtY2Q0ODMxZmQxN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFjjvy2ghzb9vhcz0sUVWlgmFPegyOxrx8qzMyif4/GrkWffAMVDKlU aBoPNwr8S+afPR3fTEEXs+BUp9Gq3HFClS8xaxZgwTFSKwVd3rzypJckRiDd41FS mQcQ7quKXt9YurzuwNom/oGFfHtdNVorJjat4C0/muySH19WyUNxz0IrVamFfyVV RPlIabDhNt5VRjPbICeFDnOIaGRQ6LVV5RgxoCcxKHFc9Vj8tenJfsGOa73b93tG Jh19wCCo8Bx2Blnz57EhMUBo0anK/Fmt8Uo3vbX7sxkx+OYDraL9G3KE0oi+8G+W v7X1b252/q62QBtcEXk3WMKXqZO4SHA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:17 2024 by rpki-client on console-fra.rpki-client.org