$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa File: d4d720d3-846d-3239-b157-4b6a59742d0f.roa (raw, json) Hash identifier: AVURKyMH1sDxuebdjXy7ggpMhkD2b+EelUUg9UQ30Lk= Subject key identifier: E2:31:81:45:E8:76:48:5E:2F:AB:76:19:15:13:FE:8C:E8:AB:02:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847D834B0F7D44009B676606EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa Signing time: Mon 11 Nov 2024 14:00:39 +0000 ROA not before: Mon 11 Nov 2024 14:00:39 +0000 ROA not after: Sun 09 Feb 2025 14:00:39 +0000 asID: 7029 IP address blocks: 98.22.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d8:34:b0:f7:d4:40:09:b6:76:60:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 11 14:00:39 2024 GMT Not After : Feb 9 14:00:39 2025 GMT Subject: CN=65f669e3-c58e-4267-9a84-de3f61faa8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:95:f8:7e:51:83:e2:8f:20:54:a4:07:d3: 4e:76:76:6c:76:c1:74:53:b0:1a:f1:cd:fe:d6:82: 01:d5:3c:61:86:3d:f1:6e:2c:9a:c5:26:2f:b2:22: fc:a7:58:43:fb:de:f0:53:63:54:82:17:bd:c2:c2: 08:02:31:b9:ec:36:c7:8a:ab:e8:d8:50:72:2b:34: f8:b2:64:3e:b8:07:f5:06:6c:33:f0:34:83:ce:b7: 1a:64:bb:98:8b:80:d7:3d:fe:a3:fb:9e:63:e1:6f: d8:5b:78:56:58:2d:e9:56:bc:84:fb:1a:d1:c5:26: cc:63:71:ec:da:e4:fc:4b:03:35:ac:07:c3:d2:8c: c9:96:5d:e9:28:4e:9d:b5:cf:7b:40:d7:b6:34:2c: 74:5a:e0:45:5b:58:17:fa:d0:7e:77:9c:a1:1c:48: df:94:cc:b0:f6:ed:74:b9:c7:a6:a9:be:ab:6d:a3: cf:26:d7:c9:78:1c:f2:3c:2f:02:2b:1d:b4:66:6c: 24:6e:6e:47:84:e4:49:84:06:e7:aa:7d:bf:46:63: 73:df:28:f5:b4:dd:0a:fe:28:c7:14:a5:3d:5b:19: 6d:fd:66:42:f2:ba:41:89:a7:da:00:03:4d:b5:f3: f6:a6:72:23:86:03:d0:5f:3c:d3:71:93:ec:78:9f: 98:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:31:81:45:E8:76:48:5E:2F:AB:76:19:15:13:FE:8C:E8:AB:02:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f0:09:53:30:9f:54:37:2e:1a:e5:f4:24:5c:a0:e3:1a:77: 0f:00:10:51:23:73:db:93:07:3f:b9:e8:b7:4d:fc:50:e9:06: 8d:a3:d6:d2:ab:86:6d:7e:30:8c:a3:90:8a:99:31:72:c5:68: c1:e2:a2:c7:b5:45:88:4b:43:a4:83:95:b1:58:9a:6f:d2:f6: c6:78:71:cc:f9:6b:18:df:59:7e:8b:df:e0:fb:1f:52:e2:70: 43:42:dd:d3:68:0e:21:f9:3a:76:9d:c7:46:19:6d:fc:66:ac: 02:f0:43:15:6c:7f:9f:34:cf:2d:17:b5:ab:c0:c8:1a:d1:a9: 67:8e:3b:64:0b:37:60:9e:18:94:65:08:93:e0:2a:d4:63:4d: 39:05:20:7f:05:9e:3b:27:c7:2d:28:38:a1:24:b7:67:47:2f: 3a:81:ef:04:4c:0f:58:8d:1c:01:df:18:a7:d9:27:99:28:e4: 00:c3:2a:5b:c9:73:04:d3:ce:77:12:cf:7c:12:a6:90:bc:02: bb:2f:7a:95:d7:7d:9e:13:9d:39:d0:01:db:e7:81:46:3f:3c: 40:68:45:b2:5a:26:a3:49:4d:16:34:f3:da:19:05:e8:a8:2a: 58:01:7d:62:be:17:13:da:e0:73:1e:1c:95:38:7e:cf:00:32: 47:58:b6:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfYNLD31EAJtnZgbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExMTE0MDAzOVoXDTI1MDIwOTE0MDAzOVowLzEtMCsGA1UEAxMk NjVmNjY5ZTMtYzU4ZS00MjY3LTlhODQtZGUzZjYxZmFhOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11iV+H5Rg+KPIFSkB9NOdnZsdsF0U7Aa8c3+ 1oIB1Txhhj3xbiyaxSYvsiL8p1hD+97wU2NUghe9wsIIAjG57DbHiqvo2FByKzT4 smQ+uAf1Bmwz8DSDzrcaZLuYi4DXPf6j+55j4W/YW3hWWC3pVryE+xrRxSbMY3Hs 2uT8SwM1rAfD0ozJll3pKE6dtc97QNe2NCx0WuBFW1gX+tB+d5yhHEjflMyw9u10 ucemqb6rbaPPJtfJeBzyPC8CKx20Zmwkbm5HhORJhAbnqn2/RmNz3yj1tN0K/ijH FKU9Wxlt/WZC8rpBiafaAANNtfP2pnIjhgPQXzzTcZPseJ+YkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIxgUXodkheL6t2GRUT/ozoqwI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRkNzIwZDMtODQ2ZC0z MjM5LWIxNTctNGI2YTU5NzQyZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHwCVMwn1Q3Lhrl9CRcoOMadw8AEFEjc9uTBz+56LdN/FDpBo2j1tKr hm1+MIyjkIqZMXLFaMHiose1RYhLQ6SDlbFYmm/S9sZ4ccz5axjfWX6L3+D7H1Li cENC3dNoDiH5Onadx0YZbfxmrALwQxVsf580zy0XtavAyBrRqWeOO2QLN2CeGJRl CJPgKtRjTTkFIH8Fnjsnxy0oOKEkt2dHLzqB7wRMD1iNHAHfGKfZJ5ko5ADDKlvJ cwTTzncSz3wSppC8ArsvepXXfZ4TnTnQAdvngUY/PEBoRbJaJqNJTRY089oZBeio KlgBfWK+FxPa4HMeHJU4fs8AMkdYtrE= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:12 2024 by rpki-client on console-ams.rpki-client.org