$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa File: d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa (raw, json) Hash identifier: DfOSOTbUcIznCIDSPCKzTU69SQRZrngZtM8W0Pt2D00= Subject key identifier: D2:00:F0:61:7F:3E:E0:F5:B3:60:FA:E9:AA:CC:9F:7A:38:0D:BC:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333030613DF490906A8A480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 98.20.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:03:06:13:df:49:09:06:a8:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=6570990d-5229-4d23-9036-5ffc2dc62184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:97:37:dd:d2:bd:1a:c0:4f:c1:9c:7f:58:00: e5:3c:71:9a:91:72:50:51:41:53:e8:b8:cc:37:c2: 53:a4:e9:10:d7:39:01:9d:42:c8:f3:3e:0a:f1:82: cb:a6:39:0d:79:80:1a:8b:f9:a1:54:f6:f3:bd:21: 07:7b:a3:ee:93:b6:bb:5c:18:fa:db:dc:71:64:c3: 4c:aa:58:6a:8c:03:34:5c:16:08:95:14:d9:40:5d: a0:76:43:f0:04:f4:53:b5:73:22:8b:50:7c:5e:46: ec:e7:4b:05:bc:75:9e:d8:bc:d4:70:0d:32:25:13: ef:87:58:2c:0a:ec:49:ef:c8:71:3e:47:27:35:20: 53:fc:bd:ae:b2:30:de:dc:71:d8:de:79:66:94:77: 2a:79:36:c3:95:63:20:26:b7:9f:ba:ef:a8:e3:a0: 33:d6:f9:4c:bf:81:07:1e:6e:c7:de:05:9f:e6:78: 1f:27:39:0c:10:f5:5c:5a:77:e2:f0:cf:b9:4c:2c: 21:8f:52:8d:b0:ae:37:da:61:a9:83:1e:20:05:70: a2:f4:7f:8c:9e:9a:27:35:04:aa:18:c2:e7:5e:ba: 98:d2:79:71:36:cf:e5:d4:db:28:14:5d:c1:6f:e4: 73:b1:46:7a:bd:b1:9c:8f:bb:f9:46:c0:10:8c:2f: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:00:F0:61:7F:3E:E0:F5:B3:60:FA:E9:AA:CC:9F:7A:38:0D:BC:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:29:bf:49:32:5d:45:db:32:9d:79:81:3d:9f:6e:ff:a6:56: 03:68:2d:90:8d:25:fe:02:97:82:dd:15:41:36:1e:0b:90:4d: 17:d8:7c:6b:21:a4:b8:08:23:74:2f:7b:04:9b:a1:da:4d:73: 8b:f8:ef:3c:32:c4:31:c9:52:55:bd:4f:bc:c5:87:2a:75:88: f3:99:fd:26:16:d7:be:0b:63:c2:2b:cd:a9:b4:22:f5:6f:63: 02:84:00:e4:ae:6b:8d:ae:57:b1:7a:f7:b0:5a:49:b4:fe:33: d3:43:1f:51:e3:6b:86:a9:0d:98:08:32:99:3a:67:33:e1:37: 02:d7:8c:f8:81:a6:83:76:dc:67:b8:96:7d:f1:ff:e3:54:cf: 05:1e:8e:de:25:25:1d:21:39:f2:9d:18:b8:2f:58:60:d4:f8: f4:4b:55:87:e0:60:cd:00:60:7a:a0:d3:24:a0:a5:82:8f:df: 0e:84:de:ad:7b:0d:6f:63:38:6a:1e:cf:1a:fb:1a:eb:ae:28: b6:d1:f4:28:91:de:32:20:ec:ff:be:51:69:22:0a:d6:91:9f: 41:8e:75:66:27:05:dd:6e:79:80:55:d5:16:60:08:fb:ea:9d: db:0d:b1:57:48:c2:7e:e8:26:0b:43:cc:96:73:ca:f6:e7:5e: ce:bf:82:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMwMGE99JCQaopIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk NjU3MDk5MGQtNTIyOS00ZDIzLTkwMzYtNWZmYzJkYzYyMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Zc33dK9GsBPwZx/WADlPHGakXJQUUFT6LjM N8JTpOkQ1zkBnULI8z4K8YLLpjkNeYAai/mhVPbzvSEHe6Puk7a7XBj629xxZMNM qlhqjAM0XBYIlRTZQF2gdkPwBPRTtXMii1B8Xkbs50sFvHWe2LzUcA0yJRPvh1gs CuxJ78hxPkcnNSBT/L2usjDe3HHY3nlmlHcqeTbDlWMgJrefuu+o46Az1vlMv4EH Hm7H3gWf5ngfJzkMEPVcWnfi8M+5TCwhj1KNsK432mGpgx4gBXCi9H+MnponNQSq GMLnXrqY0nlxNs/l1NsoFF3Bb+RzsUZ6vbGcj7v5RsAQjC8RTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIA8GF/PuD1s2D66arMn3o4DbwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDYwOWQ3ZDEtODFlOC0z NzAzLTlhMTItYTZmOTdhMWJkNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYhQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYpv0kyXUXbMp15gT2fbv+mVgNoLZCNJf4Cl4LdFUE2HguQTRfYfGsh pLgII3QvewSbodpNc4v47zwyxDHJUlW9T7zFhyp1iPOZ/SYW174LY8Irzam0IvVv YwKEAOSua42uV7F697BaSbT+M9NDH1Hja4apDZgIMpk6ZzPhNwLXjPiBpoN23Ge4 ln3x/+NUzwUejt4lJR0hOfKdGLgvWGDU+PRLVYfgYM0AYHqg0ySgpYKP3w6E3q17 DW9jOGoezxr7GuuuKLbR9CiR3jIg7P++UWkiCtaRn0GOdWYnBd1ueYBV1RZgCPvq ndsNsVdIwn7oJgtDzJZzyvbnXs6/glo= -----END CERTIFICATE-----Generated at Thu May 23 19:42:35 2024 by rpki-client on console-fra.rpki-client.org