$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa File: f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa (raw, json) Hash identifier: CQ3rBb49ZMqDOlqq2ZfmGUsQ/MYRrH2JWD8EI6LXBC8= Subject key identifier: CF:E9:CF:F4:2D:F4:59:FD:29:1C:FE:15:E4:23:3A:B2:64:AE:D9:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847EE8A3971A9BE1B3A9ADC8A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 7029 IP address blocks: 98.16.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:39:71:a9:be:1b:3a:9a:dc:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=8cc2f14c-3b9d-47a4-b3f6-1a7869851c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:44:cb:88:b5:a2:e0:4c:d3:3e:33:47:9d: ac:1c:a4:f5:a5:1e:dc:21:3e:01:6f:b3:65:13:c6: 76:6f:39:21:f9:20:88:66:40:cf:f7:89:35:21:b0: 0a:e7:b2:73:a7:64:c5:0a:75:3f:9e:a7:d6:ab:dd: ca:23:c9:db:f5:a1:4b:e2:dd:9a:09:4b:fa:f8:e5: 11:2e:94:57:5b:48:49:a1:a7:a0:cb:bd:9e:53:c7: fb:05:e8:0c:e5:7a:77:25:29:a3:08:fb:e1:c8:bc: b2:05:fc:9b:7c:af:39:e6:63:67:df:e3:5f:7d:bd: ac:55:62:a1:7d:8f:82:6b:fb:86:e0:bb:bb:6c:a0: 4f:11:81:aa:3f:1a:ba:73:ea:cf:f2:44:9c:52:04: ef:ad:32:4c:2b:3f:79:a6:da:9b:55:8c:0d:e0:79: d8:17:b3:8e:ea:07:34:30:c9:c4:d7:28:ec:dc:51: 63:25:4d:2d:b9:ed:b9:36:77:57:fc:2e:0c:8f:3a: 3e:99:db:1a:5e:eb:80:9c:1f:22:ff:50:60:ce:47: e6:5e:bf:c5:ec:64:d6:ac:70:29:65:19:ac:5e:98: 3e:40:11:eb:f8:26:23:f7:14:50:05:65:75:34:37: 1f:77:68:29:b4:bb:bd:83:34:91:5d:4d:f1:04:94: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E9:CF:F4:2D:F4:59:FD:29:1C:FE:15:E4:23:3A:B2:64:AE:D9:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:66:7b:67:8e:c4:a0:f3:a6:ac:ce:cf:ba:5d:e4:3a:48:07: d8:b4:00:5f:3f:1d:e7:ff:d4:3d:f5:c0:36:c7:0d:95:d6:63: 37:96:f0:89:13:aa:81:5b:2d:56:d5:67:05:1f:b2:9e:2c:10: 19:6b:4b:83:27:c9:ee:f6:59:75:bb:b2:df:01:78:65:80:1c: 98:78:f3:b6:d6:61:6c:1a:1d:96:83:1f:a5:ac:8d:bf:4b:0f: 71:be:ca:c7:ce:f4:df:bb:60:33:01:86:e4:39:81:f8:be:70: db:1c:44:4f:5d:c4:7f:b5:34:1c:25:3c:41:ef:37:cf:6a:ac: 63:91:a6:e8:d6:4a:91:b3:da:43:88:26:ce:bd:be:89:5a:06: d8:cf:2c:7b:a8:4c:a2:0d:5a:9d:fd:8b:d5:bc:18:73:51:0a: ed:4b:46:ec:b0:f6:6e:67:2f:58:a3:fb:49:af:e5:6a:80:7f: 8d:ee:3c:56:7c:8d:20:5c:6d:fe:fe:e4:4b:98:6c:e1:40:10: 83:11:12:2d:1b:08:d8:fa:3a:29:c2:fa:fa:cd:03:a8:d3:7a: d3:65:19:7d:a7:08:8a:ae:a8:2e:05:c7:06:fd:09:fb:e5:10: b3:66:ca:bc:ae:9b:49:69:c9:1b:45:25:fe:69:11:ad:72:f6: 75:da:da:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijlxqb4bOprcigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk OGNjMmYxNGMtM2I5ZC00N2E0LWIzZjYtMWE3ODY5ODUxYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM1Ey4i1ouBM0z4zR52sHKT1pR7cIT4Bb7Nl E8Z2bzkh+SCIZkDP94k1IbAK57Jzp2TFCnU/nqfWq93KI8nb9aFL4t2aCUv6+OUR LpRXW0hJoaegy72eU8f7BegM5Xp3JSmjCPvhyLyyBfybfK855mNn3+Nffb2sVWKh fY+Ca/uG4Lu7bKBPEYGqPxq6c+rP8kScUgTvrTJMKz95ptqbVYwN4HnYF7OO6gc0 MMnE1yjs3FFjJU0tue25NndX/C4Mjzo+mdsaXuuAnB8i/1BgzkfmXr/F7GTWrHAp ZRmsXpg+QBHr+CYj9xRQBWV1NDcfd2gptLu9gzSRXU3xBJTEWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/pz/Qt9Fn9KRz+FeQjOrJkrtmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFmM2I4OWYtMTUwNC0z ZmY4LWE0ZjctYjcwN2UyMGQ5MjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpme2eOxKDzpqzOz7pd5DpIB9i0AF8/Hef/1D31wDbHDZXWYzeW8IkT qoFbLVbVZwUfsp4sEBlrS4Mnye72WXW7st8BeGWAHJh487bWYWwaHZaDH6Wsjb9L D3G+ysfO9N+7YDMBhuQ5gfi+cNscRE9dxH+1NBwlPEHvN89qrGORpujWSpGz2kOI Js69volaBtjPLHuoTKINWp39i9W8GHNRCu1LRuyw9m5nL1ij+0mv5WqAf43uPFZ8 jSBcbf7+5EuYbOFAEIMREi0bCNj6OinC+vrNA6jTetNlGX2nCIquqC4Fxwb9Cfvl ELNmyryum0lpyRtFJf5pEa1y9nXa2oI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:29 2024 by rpki-client on console-fra.rpki-client.org