$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa File: bf629dc2-f852-3d47-a607-0e222991c7a9.roa (raw, json) Hash identifier: DzU4gqbJj9S4odiRlEWPuzskkmaOBIO1EGDY+ofFgOk= Subject key identifier: 03:3D:05:7B:21:33:51:75:EF:F2:B8:95:2D:89:BC:54:1F:11:80:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858473119BBDDDD856794FA0DFAF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa Signing time: Thu 12 Sep 2024 17:26:25 +0000 ROA not before: Thu 12 Sep 2024 17:26:25 +0000 ROA not after: Wed 11 Dec 2024 18:26:25 +0000 asID: 7029 IP address blocks: 98.17.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:19:bb:dd:dd:85:67:94:fa:0d:fa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 17:26:25 2024 GMT Not After : Dec 11 18:26:25 2024 GMT Subject: CN=4b1fb625-c7f8-488b-9a4f-44616d93df0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:98:9b:ff:ca:ed:3e:20:99:7b:49:cd:da:2d: 41:ec:7b:8b:62:ae:6e:e0:1a:c1:70:4f:49:b1:35: b3:ff:c7:c7:6b:d5:de:26:95:f6:7d:4a:cf:09:a4: 56:48:42:80:df:c4:41:d0:61:ef:85:0a:db:ad:1e: e3:a4:a7:4d:5f:43:13:87:37:bd:81:96:bc:08:2c: b0:06:0d:bb:01:21:bb:8c:0d:49:42:6c:46:bc:a8: 26:77:f2:6c:68:bb:04:5a:13:78:c7:f0:63:09:11: d5:1c:2b:59:3d:2b:ad:19:f5:03:dd:d8:cf:31:7e: 05:cb:7a:8b:13:ab:5a:d0:e3:e4:ae:98:9d:8d:82: b2:3b:8c:32:e2:af:67:4c:0a:a2:1f:99:5c:8b:ea: bc:fd:9a:51:f0:17:7e:9d:f7:4e:25:f4:e0:8c:a2: 25:cf:c9:6a:1d:d1:f7:f5:9d:0b:bf:15:cf:1f:0e: 3f:5d:72:44:0c:94:a5:03:a7:3c:ba:dd:97:50:df: aa:64:6b:12:4a:e8:8c:90:0a:0c:b4:0d:c7:fc:b9: fa:ed:d0:fd:5e:a3:15:90:a3:ca:7f:71:01:66:12: af:3f:e8:9f:8c:cb:8f:6c:21:c8:c1:ac:db:75:1e: 86:90:77:47:77:ba:c7:7c:3e:13:c4:94:76:f8:21: 06:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3D:05:7B:21:33:51:75:EF:F2:B8:95:2D:89:BC:54:1F:11:80:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b5:b1:3e:4a:4e:0d:81:b2:81:0e:7a:4f:0c:c7:71:d0:15: fc:ca:7e:d2:37:43:3d:f1:0c:fa:3b:b1:e7:89:80:68:e7:64: 4e:1a:0e:78:b8:9f:98:88:53:22:d2:c6:c0:4b:c2:c8:1d:b9: 2c:79:d9:bc:5d:29:51:55:57:c3:ab:c2:2e:aa:e6:d1:c4:93: cb:c0:f2:a9:d8:43:6b:8e:cf:5b:95:ec:85:20:66:28:9a:6c: 7a:34:cc:76:05:31:a7:49:91:e4:19:c8:9c:52:41:81:d6:92: 8c:1e:ae:76:0a:cd:90:97:d3:53:ab:9e:23:ac:e3:7d:b2:40: 2c:a6:1b:fb:7c:b4:7c:34:a8:2a:a2:00:d8:4c:f7:1f:2d:bc: 33:40:f8:de:92:e7:15:cd:51:70:43:3e:d1:8c:73:2c:91:62: cd:25:8b:27:59:23:55:06:56:23:f8:5d:88:7e:c3:d0:df:45: e9:eb:b0:e7:5d:60:7b:17:c9:31:ce:4f:8e:ee:2a:0d:82:dd: 73:70:11:9c:47:62:4b:c8:5d:d8:98:e3:f1:ad:08:3f:8f:7c: 77:bf:d5:f5:18:4d:3a:0f:d1:b6:87:16:46:5b:a4:4c:4f:0b: cd:40:95:53:ae:28:dc:95:3a:46:1b:25:e4:c3:a7:2c:03:25: e0:47:24:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcxGbvd3YVnlPoN+vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDkxMjE3MjYyNVoXDTI0MTIxMTE4MjYyNVowLzEtMCsGA1UEAxMk NGIxZmI2MjUtYzdmOC00ODhiLTlhNGYtNDQ2MTZkOTNkZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZib/8rtPiCZe0nN2i1B7HuLYq5u4BrBcE9J sTWz/8fHa9XeJpX2fUrPCaRWSEKA38RB0GHvhQrbrR7jpKdNX0MThze9gZa8CCyw Bg27ASG7jA1JQmxGvKgmd/JsaLsEWhN4x/BjCRHVHCtZPSutGfUD3djPMX4Fy3qL E6ta0OPkrpidjYKyO4wy4q9nTAqiH5lci+q8/ZpR8Bd+nfdOJfTgjKIlz8lqHdH3 9Z0LvxXPHw4/XXJEDJSlA6c8ut2XUN+qZGsSSuiMkAoMtA3H/Ln67dD9XqMVkKPK f3EBZhKvP+ifjMuPbCHIwazbdR6GkHdHd7rHfD4TxJR2+CEGHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAM9BXshM1F17/K4lS2JvFQfEYDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmY2MjlkYzItZjg1Mi0z ZDQ3LWE2MDctMGUyMjI5OTFjN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa1sT5KTg2BsoEOek8Mx3HQFfzKftI3Qz3xDPo7seeJgGjnZE4aDni4 n5iIUyLSxsBLwsgduSx52bxdKVFVV8Orwi6q5tHEk8vA8qnYQ2uOz1uV7IUgZiia bHo0zHYFMadJkeQZyJxSQYHWkowernYKzZCX01OrniOs432yQCymG/t8tHw0qCqi ANhM9x8tvDNA+N6S5xXNUXBDPtGMcyyRYs0liydZI1UGViP4XYh+w9DfRenrsOdd YHsXyTHOT47uKg2C3XNwEZxHYkvIXdiY4/GtCD+PfHe/1fUYTToP0baHFkZbpExP C81AlVOuKNyVOkYbJeTDpywDJeBHJEw= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:08 2024 by rpki-client on console-ams.rpki-client.org