$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70036666-fb28-3db8-9e18-37be3fec893f.roa File: 70036666-fb28-3db8-9e18-37be3fec893f.roa (raw, json) Hash identifier: MPDW3omKAv8xykLmAIbnwso+4+Y5cFsWqvoPoxM4b9Y= Subject key identifier: 99:42:20:A3:CD:76:7E:3F:EE:52:C4:E0:5D:25:B1:0E:7F:56:34:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C62D66E90695CA84DEA60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70036666-fb28-3db8-9e18-37be3fec893f.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 98.240.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:62:d6:6e:90:69:5c:a8:4d:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=1aa89c61-64e8-4ed3-944d-4bfd97f3bdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:04:cc:93:75:c2:85:90:54:8b:d1:7d:f7: fc:58:23:3c:e2:76:f9:3c:c3:99:d3:cd:01:67:bf: de:67:5e:a6:07:82:5e:09:72:4d:70:59:e1:fd:12: 6d:11:fe:5a:ce:b6:12:c5:bd:3f:31:56:79:0b:42: 8c:92:f8:a9:34:a0:e1:7e:b2:d7:66:da:3f:fe:34: 66:fc:85:91:1d:24:ef:77:3f:41:95:3d:50:de:a0: 16:e5:77:22:32:ed:ed:1c:6e:c7:88:ea:af:4a:29: 20:71:29:d8:da:e4:07:69:58:7f:f1:05:3f:b7:a9: 09:86:56:57:8a:4d:74:15:e3:29:73:23:d1:a0:1d: 2a:a2:35:3b:32:ba:61:73:60:31:6b:bf:4f:65:4a: 9f:64:db:13:1d:06:0b:99:29:35:43:9d:15:72:13: 40:12:3d:d5:38:5e:5a:ea:fe:67:c1:fa:f6:0f:21: cf:4c:65:39:92:a9:f2:cf:d0:1e:9c:7b:4b:ec:f3: 68:e6:21:34:00:79:97:51:7b:7e:52:ed:4c:19:ce: c7:32:1d:89:be:00:75:ac:e0:f7:3c:cc:9a:58:91: 1d:f7:82:66:53:e5:89:4d:03:9a:4e:79:45:1c:9d: c8:d5:d2:b1:68:f5:48:b7:1f:fd:97:2a:7e:a7:ff: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:42:20:A3:CD:76:7E:3F:EE:52:C4:E0:5D:25:B1:0E:7F:56:34:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70036666-fb28-3db8-9e18-37be3fec893f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.240.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3d:ea:76:45:a9:bf:f1:bb:2d:1a:8b:0f:eb:01:81:c7:f1: d1:74:b4:cc:9a:6e:88:40:3f:f9:a3:a6:bd:6a:eb:0c:ea:20: 39:55:a8:33:07:48:e0:b9:42:e9:01:06:7e:78:80:a3:37:a5: 20:0b:54:c7:11:b3:e0:01:0e:43:ca:30:1f:45:32:30:40:28: 3b:6d:ec:9c:02:92:ef:56:c9:e8:0b:fe:1d:f1:21:7e:26:de: 0b:00:13:bf:39:48:8f:0a:19:54:7e:bc:1b:2a:15:ab:13:3d: dc:66:ee:a1:c2:1f:7f:9f:6a:dd:29:fb:af:ae:61:96:24:c6: c3:20:70:75:c5:a8:4d:af:7c:c2:dd:01:58:8f:26:1b:f9:12: d0:40:76:0e:b0:15:23:8b:36:56:ed:c1:8f:22:65:d7:08:51: 45:fe:c9:e8:08:0e:58:1f:64:cb:22:62:1a:9a:ec:e4:5e:57: 2b:dc:7c:09:4c:d3:ef:32:19:33:cb:f5:cb:bb:be:8a:35:07: 92:ec:6c:7f:32:64:a9:08:a6:24:06:e4:89:22:8e:56:0e:ad: 25:5e:6e:a0:29:7b:50:42:b0:7e:03:65:73:03:16:48:e5:3d: 11:fe:b6:44:e0:a4:06:99:be:74:cc:1b:0a:73:9d:e6:9b:35: d5:77:03:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebGLWbpBpXKhN6mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MWFhODljNjEtNjRlOC00ZWQzLTk0NGQtNGJmZDk3ZjNiZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaUEzJN1woWQVIvRfff8WCM84nb5PMOZ080B Z7/eZ16mB4JeCXJNcFnh/RJtEf5azrYSxb0/MVZ5C0KMkvipNKDhfrLXZto//jRm /IWRHSTvdz9BlT1Q3qAW5XciMu3tHG7HiOqvSikgcSnY2uQHaVh/8QU/t6kJhlZX ik10FeMpcyPRoB0qojU7Mrphc2Axa79PZUqfZNsTHQYLmSk1Q50VchNAEj3VOF5a 6v5nwfr2DyHPTGU5kqnyz9AenHtL7PNo5iE0AHmXUXt+Uu1MGc7HMh2JvgB1rOD3 PMyaWJEd94JmU+WJTQOaTnlFHJ3I1dKxaPVItx/9lyp+p/8nyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlCIKPNdn4/7lLE4F0lsQ5/VjSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzAwMzY2NjYtZmIyOC0z ZGI4LTllMTgtMzdiZTNmZWM4OTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYvCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ896nZFqb/xuy0aiw/rAYHH8dF0tMyabohAP/mjpr1q6wzqIDlVqDMH SOC5QukBBn54gKM3pSALVMcRs+ABDkPKMB9FMjBAKDtt7JwCku9WyegL/h3xIX4m 3gsAE785SI8KGVR+vBsqFasTPdxm7qHCH3+fat0p+6+uYZYkxsMgcHXFqE2vfMLd AViPJhv5EtBAdg6wFSOLNlbtwY8iZdcIUUX+yegIDlgfZMsiYhqa7OReVyvcfAlM 0+8yGTPL9cu7voo1B5LsbH8yZKkIpiQG5IkijlYOrSVebqApe1BCsH4DZXMDFkjl PRH+tkTgpAaZvnTMGwpzneabNdV3A70= -----END CERTIFICATE-----Generated at Mon Apr 7 06:28:47 2025 by rpki-client