$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abc1fb3f-5577-3ce6-ab8d-83fa04679641.roa File: abc1fb3f-5577-3ce6-ab8d-83fa04679641.roa (raw, json) Hash identifier: ld7tOXw89KkRsPgqKc/fhiXsGUZ9idPih7WTmhlUYEQ= Subject key identifier: 6A:64:5D:01:A2:0D:13:1B:F3:F9:2A:48:D2:6B:BF:FF:7A:32:CD:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F155331409F02C5D95336620 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abc1fb3f-5577-3ce6-ab8d-83fa04679641.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 98.18.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:33:14:09:f0:2c:5d:95:33:66:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=631c4aa3-3475-4761-b6ad-3c2527e71107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bf:cd:6c:4d:35:60:ea:4d:3c:b9:f7:9d:d5: 4b:ce:b7:1d:c7:dc:a8:1c:d7:28:89:b8:02:c3:91: ce:37:e8:75:37:b0:45:8b:90:c9:57:9f:46:a0:d2: 5f:6b:75:96:29:dc:ee:ed:be:c3:18:c3:6a:eb:45: ca:a0:77:ca:31:86:2f:5e:87:72:6f:7d:2f:df:46: 48:c9:e8:5c:86:9f:2c:b9:2d:ff:56:66:ac:db:b2: 73:04:a8:15:cb:db:a3:a8:91:f6:e3:e7:39:be:3b: d9:2e:1d:62:5e:2d:93:03:89:80:3f:fd:e6:75:cf: 15:de:78:4a:68:8b:89:84:ff:fc:ed:a1:e7:1c:5a: 75:29:8a:df:7a:15:84:e7:87:38:0b:ef:fa:89:33: fe:ad:3d:f4:c3:53:75:5e:81:f0:f3:ac:cf:6f:68: 6b:3e:63:9e:49:c9:4f:0c:c7:bf:7e:af:05:50:67: be:4e:4c:05:41:fc:09:d2:7a:4c:b8:0a:e2:d9:0e: d1:e6:87:e7:8b:1b:33:84:53:56:d5:e0:43:99:f9: ed:6b:81:e4:91:50:62:f9:64:d4:5a:0e:fe:1e:fd: 01:83:20:5f:c4:d7:06:67:8b:b7:42:d7:e9:ce:40: 80:5e:8b:5c:1a:88:31:38:35:dc:d4:7c:67:f2:18: d5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:64:5D:01:A2:0D:13:1B:F3:F9:2A:48:D2:6B:BF:FF:7A:32:CD:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abc1fb3f-5577-3ce6-ab8d-83fa04679641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b6:77:f4:5f:99:da:60:aa:76:cc:08:c8:21:c7:9a:1f:89: 8c:74:47:0e:14:f4:3b:c5:12:8a:a8:a8:db:c4:03:b6:7f:b4: de:07:11:21:53:13:8c:c8:fc:4e:04:96:05:07:3f:01:54:7c: b9:93:3e:55:47:cf:fc:27:f7:22:92:41:04:83:85:36:b5:a3: 84:86:f6:75:0c:72:d0:f5:c2:16:bd:40:7a:2f:0a:79:21:41: 34:40:de:00:e0:f5:39:1a:ba:3f:37:85:98:48:71:f6:aa:90: 81:ba:72:33:77:ac:19:32:f4:8b:43:87:b5:3b:4b:59:b8:42: a5:3d:1c:5c:7d:9c:cc:43:21:f3:9e:b9:24:67:4c:33:ba:85: 8f:12:61:ea:70:51:23:f5:ed:e7:82:ce:cf:ef:3b:24:bc:0d: 0b:37:09:93:bd:ce:c8:24:5b:06:53:c4:f9:7f:be:4b:ae:f8: b1:00:32:e6:c2:0c:6d:0f:ea:5d:56:99:02:dc:98:c3:6f:79: 77:ba:e0:03:79:48:d6:82:84:6c:ae:cf:20:db:1c:0f:af:81: a0:c3:73:1a:ea:14:cf:98:a1:02:eb:54:d2:28:9d:56:40:66: 5f:42:fa:f0:bc:30:79:70:ee:b5:7e:13:f0:d9:06:91:d2:43: cc:43:80:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTMUCfAsXZUzZiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk NjMxYzRhYTMtMzQ3NS00NzYxLWI2YWQtM2MyNTI3ZTcxMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb/NbE01YOpNPLn3ndVLzrcdx9yoHNcoibgC w5HON+h1N7BFi5DJV59GoNJfa3WWKdzu7b7DGMNq60XKoHfKMYYvXodyb30v30ZI yehchp8suS3/Vmas27JzBKgVy9ujqJH24+c5vjvZLh1iXi2TA4mAP/3mdc8V3nhK aIuJhP/87aHnHFp1KYrfehWE54c4C+/6iTP+rT30w1N1XoHw86zPb2hrPmOeSclP DMe/fq8FUGe+TkwFQfwJ0npMuAri2Q7R5ofnixszhFNW1eBDmfnta4HkkVBi+WTU Wg7+Hv0BgyBfxNcGZ4u3QtfpzkCAXotcGogxODXc1Hxn8hjV0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpkXQGiDRMb8/kqSNJrv/96Ms17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWJjMWZiM2YtNTU3Ny0z Y2U2LWFiOGQtODNmYTA0Njc5NjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq2d/RfmdpgqnbMCMghx5ofiYx0Rw4U9DvFEoqoqNvEA7Z/tN4HESFT E4zI/E4ElgUHPwFUfLmTPlVHz/wn9yKSQQSDhTa1o4SG9nUMctD1wha9QHovCnkh QTRA3gDg9Tkauj83hZhIcfaqkIG6cjN3rBky9ItDh7U7S1m4QqU9HFx9nMxDIfOe uSRnTDO6hY8SYepwUSP17eeCzs/vOyS8DQs3CZO9zsgkWwZTxPl/vkuu+LEAMubC DG0P6l1WmQLcmMNveXe64AN5SNaChGyuzyDbHA+vgaDDcxrqFM+YoQLrVNIonVZA Zl9C+vC8MHlw7rV+E/DZBpHSQ8xDgGY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:17 2024 by rpki-client on console-fra.rpki-client.org