$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30fae4c-ce93-3ac9-bd19-88334254ed01.roa File: e30fae4c-ce93-3ac9-bd19-88334254ed01.roa (raw, json) Hash identifier: IHhAEisgZbzUj9eXtsskAAMKmtH4PkUqcKCm94UuROI= Subject key identifier: 72:A1:10:36:C7:F7:F7:EF:A7:8D:68:46:7B:78:B2:3A:B2:33:2A:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F154FF66A072ACCF550F2E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30fae4c-ce93-3ac9-bd19-88334254ed01.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 98.17.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:54:ff:66:a0:72:ac:cf:55:0f:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=a489c731-91c0-4ea8-b308-3da0c4667e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:61:cc:8d:51:8f:d7:52:fe:3b:a3:f1:6a: cc:3c:22:1f:59:a1:d6:b7:a0:83:f2:c7:ec:d1:43: d1:bd:5d:79:8a:de:27:51:f9:3c:ad:63:79:15:06: d9:22:f0:af:2c:2a:1c:ee:37:d4:f0:71:53:63:b4: b5:78:16:a3:c6:ea:ce:7f:34:1a:75:0d:5c:2e:d2: f0:07:9a:58:0c:af:78:e6:f9:9e:56:0f:ff:00:36: 19:de:5f:4b:cb:00:ae:5b:96:c5:c9:d7:bd:12:04: eb:5b:96:96:4f:58:0d:10:66:a5:cc:dc:70:96:ac: da:c9:b3:a4:6e:39:69:5d:35:b5:5d:c3:7f:1a:a2: a6:0b:45:8a:3d:ef:f5:8c:d3:68:60:49:91:e6:3f: 6b:91:00:83:ef:23:1c:2b:08:01:8c:ce:96:af:b2: 9f:a7:a4:08:92:d2:07:10:b1:dd:3e:a3:98:ad:e9: 1a:b4:78:d8:60:eb:50:7e:2d:36:4d:26:9d:d6:c1: 31:bf:8a:73:0b:6d:01:49:a8:7e:24:e5:77:d0:cf: 08:26:53:d0:4d:45:0a:91:a3:94:98:58:36:40:01: 22:d2:ad:2c:ea:f2:cb:bb:48:72:93:9f:14:e5:66: d2:c0:44:81:80:5f:5c:76:f4:24:e1:25:07:08:9f: 9f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A1:10:36:C7:F7:F7:EF:A7:8D:68:46:7B:78:B2:3A:B2:33:2A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30fae4c-ce93-3ac9-bd19-88334254ed01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:28:c8:16:74:44:78:ac:ef:97:71:f8:4d:9c:eb:33:4e:a7: 64:1f:05:b1:7b:09:4e:a9:00:d6:c7:34:0a:41:9b:30:8a:65: 77:5f:d6:38:d8:d2:9a:27:f4:07:5b:96:fa:9b:c5:0c:50:4e: dd:aa:bb:e6:f1:70:27:5a:cc:d8:61:91:b2:cc:5d:8b:c2:46: a0:a0:aa:15:ba:29:0c:08:55:49:d9:dc:75:4e:8c:0e:6d:c2: ce:97:69:49:3a:d5:d3:6a:75:c2:56:fc:26:e2:99:8a:d1:32: 61:c4:c5:87:77:79:62:30:63:37:0d:27:92:90:b2:8f:02:ab: 5e:77:d4:46:d1:d7:7e:09:70:80:07:89:c4:42:fe:85:cf:d6: 71:ad:6f:39:36:b9:b6:b9:ea:0f:3c:f8:40:a7:98:17:c8:b0: c7:c4:78:d4:a5:21:a8:07:d2:5d:7c:15:04:73:25:a5:37:94: bc:68:15:0d:7e:b7:51:43:c8:7a:e3:51:61:0f:95:78:51:af: de:da:99:ef:dc:1a:72:8c:ef:40:9f:73:3c:7e:12:d1:fb:65: 34:72:de:04:0b:90:b4:c5:61:cc:8d:bf:6d:26:d2:93:46:87: ea:d4:c7:15:ed:31:fe:ab:e9:ad:34:85:f5:be:b7:56:71:1a: 7c:6b:7f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVP9moHKsz1UPLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk YTQ4OWM3MzEtOTFjMC00ZWE4LWIzMDgtM2RhMGM0NjY3ZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4BhzI1Rj9dS/juj8WrMPCIfWaHWt6CD8sfs 0UPRvV15it4nUfk8rWN5FQbZIvCvLCoc7jfU8HFTY7S1eBajxurOfzQadQ1cLtLw B5pYDK945vmeVg//ADYZ3l9LywCuW5bFyde9EgTrW5aWT1gNEGalzNxwlqzaybOk bjlpXTW1XcN/GqKmC0WKPe/1jNNoYEmR5j9rkQCD7yMcKwgBjM6Wr7Kfp6QIktIH ELHdPqOYrekatHjYYOtQfi02TSad1sExv4pzC20BSah+JOV30M8IJlPQTUUKkaOU mFg2QAEi0q0s6vLLu0hyk58U5WbSwESBgF9cdvQk4SUHCJ+fWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKhEDbH9/fvp41oRnt4sjqyMyptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTMwZmFlNGMtY2U5My0z YWM5LWJkMTktODgzMzQyNTRlZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGooyBZ0RHis75dx+E2c6zNOp2QfBbF7CU6pANbHNApBmzCKZXdf1jjY 0pon9AdblvqbxQxQTt2qu+bxcCdazNhhkbLMXYvCRqCgqhW6KQwIVUnZ3HVOjA5t ws6XaUk61dNqdcJW/CbimYrRMmHExYd3eWIwYzcNJ5KQso8Cq1531EbR134JcIAH icRC/oXP1nGtbzk2uba56g88+ECnmBfIsMfEeNSlIagH0l18FQRzJaU3lLxoFQ1+ t1FDyHrjUWEPlXhRr97ame/cGnKM70Cfczx+EtH7ZTRy3gQLkLTFYcyNv20m0pNG h+rUxxXtMf6r6a00hfW+t1ZxGnxrf3c= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:14 2024 by rpki-client on console-ams.rpki-client.org