$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc9aa98e-33eb-3e8b-8ec6-786ab4632982.roa File: fc9aa98e-33eb-3e8b-8ec6-786ab4632982.roa (raw, json) Hash identifier: +FoZVIXtLu5egTUE5ZD/98UOy5u9ysifB+HJl7Atp5g= Subject key identifier: E0:75:BA:63:36:87:E7:0F:6D:EC:85:F4:41:64:31:97:71:F2:F1:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285847F15501229B4AB474BD0832C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc9aa98e-33eb-3e8b-8ec6-786ab4632982.roa Signing time: Wed 20 Nov 2024 14:00:52 +0000 ROA not before: Wed 20 Nov 2024 14:00:52 +0000 ROA not after: Tue 18 Feb 2025 14:00:52 +0000 asID: 7029 IP address blocks: 98.21.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:55:01:22:9b:4a:b4:74:bd:08:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 20 14:00:52 2024 GMT Not After : Feb 18 14:00:52 2025 GMT Subject: CN=302f5341-f02d-400d-a9b2-ef4339e894e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:d1:d2:d3:66:ca:27:ec:5f:1a:fe:47:0e: 38:91:c6:44:03:9a:e8:8b:07:22:49:fc:36:71:39: 18:d6:b4:75:d3:37:4f:31:57:54:a5:13:dc:a2:84: f0:5f:25:52:57:03:f9:0d:0c:29:0a:80:af:c8:18: 6b:1c:2c:58:67:37:45:09:1d:4b:ee:a5:9c:b5:7a: c2:d4:ef:ce:7e:6a:5d:b6:ea:f1:fa:0d:9a:b5:48: 55:e3:90:58:bc:ff:65:39:5f:32:e5:53:86:0b:13: ae:14:d2:3d:08:1e:c9:09:9f:a8:e7:c9:04:34:1d: b7:1f:77:02:5d:7d:f2:9c:eb:e7:5c:36:2a:f1:88: e2:78:32:b5:55:11:39:3c:30:04:91:37:86:e1:96: 47:d1:b7:bd:3a:63:61:ca:b8:11:f1:b1:f0:dd:1b: 06:e3:8c:00:29:a8:a9:27:d6:17:b9:26:5a:95:cf: 3f:e0:7d:eb:23:73:d5:b6:24:b1:bd:42:61:32:08: 13:4c:74:b4:14:ae:ad:56:6d:83:db:79:21:0d:27: cd:8e:66:be:6b:1e:d0:e7:27:0d:b6:02:15:8c:53: 4d:6c:e1:d5:a6:a3:9d:cb:07:12:8d:fe:8a:71:05: 78:85:f4:7f:e0:62:bb:9e:fb:fc:96:52:e7:3c:5b: 1e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:75:BA:63:36:87:E7:0F:6D:EC:85:F4:41:64:31:97:71:F2:F1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc9aa98e-33eb-3e8b-8ec6-786ab4632982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ed:7e:69:9a:7b:3d:26:cc:e2:32:bf:cb:7a:1b:2b:f2:1c: d5:6d:84:31:0f:86:66:0c:e9:33:c5:61:f7:5a:e3:0d:3f:1e: b8:4b:b3:c8:8d:0d:ce:d7:36:5f:4f:0f:7c:0f:0f:57:43:0e: 09:a8:06:9f:37:49:f1:6d:78:ce:e3:0d:3a:f3:8e:b0:97:68: 4d:74:0d:a3:9e:9d:b5:26:28:2c:99:64:97:c5:8d:eb:0c:a8: 3c:51:90:04:4a:50:57:b2:10:d8:d6:2d:d8:4b:0a:db:54:a6: 23:8e:61:a1:25:3e:bd:f8:f8:4f:ad:d0:15:02:2a:62:d4:bb: 5b:1c:d6:cc:ca:86:32:e6:d4:48:9d:fe:62:c4:56:44:05:12: 86:e5:3a:f2:df:5d:a9:47:8f:a6:eb:77:6c:d2:e6:58:7c:5a: 5e:7c:63:9e:8f:4c:47:07:ba:71:ff:2f:61:1f:82:b6:16:82: f8:4b:aa:88:ec:89:f8:43:dc:ad:25:64:a7:ed:c2:2d:e5:0a: a2:19:bc:92:4c:c8:bb:79:f0:a6:dd:32:98:2d:f7:01:2d:3e: df:63:08:43:1f:3e:4b:e0:6c:8b:62:07:cb:ac:db:3c:29:35: ea:7c:c6:0b:66:d7:dd:d6:2e:c2:7a:4d:a3:28:f4:e8:82:89: e5:fd:9b:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVQEim0q0dL0IMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk MzAyZjUzNDEtZjAyZC00MDBkLWE5YjItZWY0MzM5ZTg5NGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhLR0tNmyifsXxr+Rw44kcZEA5roiwciSfw2 cTkY1rR10zdPMVdUpRPcooTwXyVSVwP5DQwpCoCvyBhrHCxYZzdFCR1L7qWctXrC 1O/Ofmpdturx+g2atUhV45BYvP9lOV8y5VOGCxOuFNI9CB7JCZ+o58kENB23H3cC XX3ynOvnXDYq8YjieDK1VRE5PDAEkTeG4ZZH0be9OmNhyrgR8bHw3RsG44wAKaip J9YXuSZalc8/4H3rI3PVtiSxvUJhMggTTHS0FK6tVm2D23khDSfNjma+ax7Q5ycN tgIVjFNNbOHVpqOdywcSjf6KcQV4hfR/4GK7nvv8llLnPFsezwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB1umM2h+cPbeyF9EFkMZdx8vHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmM5YWE5OGUtMzNlYi0z ZThiLThlYzYtNzg2YWI0NjMyOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJftfmmaez0mzOIyv8t6GyvyHNVthDEPhmYM6TPFYfda4w0/HrhLs8iN Dc7XNl9PD3wPD1dDDgmoBp83SfFteM7jDTrzjrCXaE10DaOenbUmKCyZZJfFjesM qDxRkARKUFeyENjWLdhLCttUpiOOYaElPr34+E+t0BUCKmLUu1sc1szKhjLm1Eid /mLEVkQFEoblOvLfXalHj6brd2zS5lh8Wl58Y56PTEcHunH/L2EfgrYWgvhLqojs ifhD3K0lZKftwi3lCqIZvJJMyLt58KbdMpgt9wEtPt9jCEMfPkvgbItiB8us2zwp Nep8xgtm193WLsJ6TaMo9OiCieX9mzg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:44:19 2024 by rpki-client on console-ams.rpki-client.org