$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa File: f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa (raw, json) Hash identifier: bqShxCmuqlDPWAUA6c0eJjmNTN674YEgKgdZsA4KwyQ= Subject key identifier: DA:01:75:95:79:61:61:EB:EF:A4:2C:7C:AF:7F:71:E0:84:62:83:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847E095006CB94752A3E9511B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa Signing time: Thu 14 Nov 2024 14:00:40 +0000 ROA not before: Thu 14 Nov 2024 14:00:40 +0000 ROA not after: Wed 12 Feb 2025 14:00:40 +0000 asID: 7029 IP address blocks: 98.17.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:95:00:6c:b9:47:52:a3:e9:51:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 14 14:00:40 2024 GMT Not After : Feb 12 14:00:40 2025 GMT Subject: CN=1a4afca9-e8e9-496d-bd8b-d9509d290996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d5:6d:f5:0b:d8:0e:e7:d1:7a:bd:bc:ee:a9: 94:55:33:90:fb:fc:e8:a1:d2:16:fc:ce:fb:88:c1: b9:82:bd:16:05:a0:c3:6d:b0:2f:a5:51:ab:cf:52: b2:eb:5e:13:d6:7c:5e:6b:93:ad:7b:00:3a:7f:e8: b0:88:04:4b:70:66:0a:2b:5c:cc:48:ca:90:92:0a: 97:b7:f5:2d:fa:e6:db:93:85:09:c7:71:79:1d:29: 54:90:13:a2:9e:01:69:30:95:03:00:80:e7:8b:3d: db:58:54:96:9f:d0:8a:cc:1b:01:71:69:62:53:f3: ef:e9:ce:7d:15:81:5a:45:8b:de:3c:d4:21:3d:6f: 9f:5d:5a:b6:ae:91:5f:55:94:41:01:e3:99:50:96: ce:c6:2a:af:ec:54:38:03:22:97:96:e9:15:60:b1: 8f:ef:24:8c:18:45:7f:9a:02:84:b2:aa:af:7d:73: 29:80:9f:ba:6c:17:88:67:e7:ba:74:b1:12:55:03: a6:ab:25:cf:fa:69:fe:87:05:c2:f3:ca:5f:6b:bb: 13:8b:f8:a3:d3:77:ee:b1:dc:2e:1b:6b:c1:45:99: 0c:a0:ed:1d:dd:df:68:11:67:2c:41:66:3d:29:b2: 49:da:ac:ae:b3:10:ed:5a:26:35:49:fa:40:ad:ce: e8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:01:75:95:79:61:61:EB:EF:A4:2C:7C:AF:7F:71:E0:84:62:83:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:56:90:5a:d1:60:03:09:99:bc:79:eb:cd:dc:ee:d8:1d:df: 61:06:21:91:7c:07:83:91:a3:f9:a0:d4:b9:ca:43:01:57:1a: 95:bb:b2:1c:35:ed:37:c0:c7:04:51:f6:05:1a:e6:3f:78:6b: b4:15:4b:1f:d7:f1:20:79:dd:2f:09:30:db:84:b9:66:50:e4: 70:e3:30:64:89:b0:4c:7b:96:51:a3:56:d2:44:59:07:1e:1d: b6:44:70:f0:f9:46:fd:ad:06:d2:ea:81:34:ce:be:6d:dc:e1: 83:88:f8:7c:d7:8f:1c:3c:09:6c:fb:35:5f:db:be:8a:a2:21: 65:f9:52:54:64:d4:b0:ff:5e:70:56:77:4b:ff:fb:81:a7:f3: 96:48:de:e6:38:64:a3:69:a7:0e:b1:36:98:e9:d2:00:f2:80: 65:79:00:c1:82:68:3b:7a:c1:0f:f2:36:97:54:83:6f:a3:45: f2:20:ab:74:6f:bd:e2:3a:16:68:4e:a1:fd:67:45:ab:35:c8: dd:94:d9:f5:8b:f2:b2:6b:1a:56:a4:04:3a:36:46:4d:76:fe: 0c:db:ab:c5:d7:87:49:8a:42:1e:86:6e:7b:a3:7d:8e:84:00: ed:26:ac:8e:84:58:60:a4:6a:16:af:ca:b0:4f:21:ff:41:b8: 54:c6:1f:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglQBsuUdSo+lRG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk MWE0YWZjYTktZThlOS00OTZkLWJkOGItZDk1MDlkMjkwOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dVt9QvYDufRer287qmUVTOQ+/zoodIW/M77 iMG5gr0WBaDDbbAvpVGrz1Ky614T1nxea5OtewA6f+iwiARLcGYKK1zMSMqQkgqX t/Ut+ubbk4UJx3F5HSlUkBOingFpMJUDAIDniz3bWFSWn9CKzBsBcWliU/Pv6c59 FYFaRYvePNQhPW+fXVq2rpFfVZRBAeOZUJbOxiqv7FQ4AyKXlukVYLGP7ySMGEV/ mgKEsqqvfXMpgJ+6bBeIZ+e6dLESVQOmqyXP+mn+hwXC88pfa7sTi/ij03fusdwu G2vBRZkMoO0d3d9oEWcsQWY9KbJJ2qyusxDtWiY1SfpArc7odQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoBdZV5YWHr76QsfK9/ceCEYoMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjhjNzU5NTMtYzllZC0z ZGNiLTkwMmMtYjkzZjM0ZDRhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJWkFrRYAMJmbx5683c7tgd32EGIZF8B4ORo/mg1LnKQwFXGpW7shw1 7TfAxwRR9gUa5j94a7QVSx/X8SB53S8JMNuEuWZQ5HDjMGSJsEx7llGjVtJEWQce HbZEcPD5Rv2tBtLqgTTOvm3c4YOI+HzXjxw8CWz7NV/bvoqiIWX5UlRk1LD/XnBW d0v/+4Gn85ZI3uY4ZKNppw6xNpjp0gDygGV5AMGCaDt6wQ/yNpdUg2+jRfIgq3Rv veI6FmhOof1nRas1yN2U2fWL8rJrGlakBDo2Rk12/gzbq8XXh0mKQh6GbnujfY6E AO0mrI6EWGCkahavyrBPIf9BuFTGH1E= -----END CERTIFICATE-----Generated at Thu Nov 21 21:06:30 2024 by rpki-client on console-fra.rpki-client.org