$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cade0a1-99c3-38fc-9644-60ef4eea60f7.roa File: 8cade0a1-99c3-38fc-9644-60ef4eea60f7.roa (raw, json) Hash identifier: WV+5bHYfNy+HKX9hG+4HdM5hg2s3DHYElwlwnCGr9Sw= Subject key identifier: C2:AF:2A:FF:D8:98:C2:C7:6B:4B:7C:48:A3:D7:B9:7C:5D:8E:35:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584840E5AAB06DB7A57131E23D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cade0a1-99c3-38fc-9644-60ef4eea60f7.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 7725 IP address blocks: 98.252.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:aa:b0:6d:b7:a5:71:31:e2:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=b8d57a9a-0bad-4eb0-af74-38a4ca922207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:de:0a:b8:da:50:66:9b:fb:05:b5:fd:bb:e9: d7:a7:25:7d:20:93:b9:f6:85:18:38:0e:af:0a:5f: 4a:7b:34:21:52:55:b6:e4:c6:5c:3e:e6:94:2c:a6: 45:64:47:63:73:f9:3a:b4:2b:a3:4c:e5:2d:fd:e1: a3:39:49:36:5b:f3:93:72:77:90:74:b7:08:59:ef: 80:a6:ba:43:47:85:b6:12:b9:1d:1f:2c:3f:f4:3b: ef:57:a4:14:e1:f8:3b:9b:2e:b1:da:92:4f:59:b7: 69:73:73:ea:41:f9:4a:9d:62:fb:22:3d:e3:82:5a: fb:b1:68:6b:f1:80:e6:51:6c:b9:42:be:78:b8:19: a9:5b:78:11:56:83:ef:f5:e2:44:d9:ee:f1:e1:1a: 22:85:cd:32:05:d1:df:c7:10:c2:57:2b:4e:f4:99: cb:be:e2:30:af:0d:85:50:65:a5:1f:90:c8:11:39: 1a:53:1d:12:9d:24:1a:ee:dd:ec:25:c8:94:ba:05: 62:44:82:66:ed:18:84:8e:79:18:52:b8:63:ac:7a: 58:91:6c:58:40:57:4c:9d:47:73:4c:82:ae:63:f2: e0:22:55:a2:f2:e4:15:e3:0f:b0:6d:27:11:77:76: 95:c0:55:dd:f8:92:58:bc:82:51:42:3b:69:b7:cf: 19:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AF:2A:FF:D8:98:C2:C7:6B:4B:7C:48:A3:D7:B9:7C:5D:8E:35:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cade0a1-99c3-38fc-9644-60ef4eea60f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.252.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:ae:b5:1a:22:80:37:94:e7:93:2d:8f:90:6c:e3:ae:7a:c9: 56:21:a9:3e:f4:db:13:00:53:8f:ea:4c:cf:f8:46:fd:e1:4b: 39:86:b9:de:1e:db:ec:13:b1:25:9d:01:9a:85:25:7b:44:cd: b5:61:13:2e:62:79:34:c9:a2:b2:59:52:f2:20:04:e6:72:dd: fd:ed:c1:69:27:64:be:be:e7:6b:aa:fb:52:2e:9e:a0:f2:fa: a5:b2:f2:44:8d:fb:62:55:5a:a4:52:54:65:f2:3c:f6:ed:81: 57:0e:c3:33:11:fa:57:e4:77:c4:27:5b:0a:90:b3:76:00:5b: f7:20:b2:f6:0e:33:2a:4a:64:d0:b9:24:81:24:ee:06:d4:f6: 89:31:c9:7b:c2:ae:37:48:6c:ae:a3:88:12:52:58:7d:3c:17: 96:9a:66:69:4d:a9:fc:55:d9:9c:65:48:68:13:cd:b7:39:63: 0c:f3:fb:00:2d:88:7e:3f:dd:65:69:ef:cb:4b:67:a0:d9:7f: c5:0d:f6:f0:67:dd:ad:a8:fe:6f:2e:90:ca:2b:dc:5e:fd:3b: d0:a9:1e:1b:32:e2:17:ce:89:47:d5:a6:73:12:84:9c:01:a6: c5:fe:6d:31:91:f2:47:da:8b:58:80:64:1e:f0:24:66:ab:34: d0:00:cd:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5aqwbbelcTHiPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk YjhkNTdhOWEtMGJhZC00ZWIwLWFmNzQtMzhhNGNhOTIyMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid4KuNpQZpv7BbX9u+nXpyV9IJO59oUYOA6v Cl9KezQhUlW25MZcPuaULKZFZEdjc/k6tCujTOUt/eGjOUk2W/OTcneQdLcIWe+A prpDR4W2ErkdHyw/9DvvV6QU4fg7my6x2pJPWbdpc3PqQflKnWL7Ij3jglr7sWhr 8YDmUWy5Qr54uBmpW3gRVoPv9eJE2e7x4Roihc0yBdHfxxDCVytO9JnLvuIwrw2F UGWlH5DIETkaUx0SnSQa7t3sJciUugViRIJm7RiEjnkYUrhjrHpYkWxYQFdMnUdz TIKuY/LgIlWi8uQV4w+wbScRd3aVwFXd+JJYvIJRQjtpt88Z3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKvKv/YmMLHa0t8SKPXuXxdjjUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGNhZGUwYTEtOTljMy0z OGZjLTk2NDQtNjBlZjRlZWE2MGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuutRoigDeU55Mtj5Bs4656yVYhqT702xMAU4/qTM/4Rv3hSzmGud4e 2+wTsSWdAZqFJXtEzbVhEy5ieTTJorJZUvIgBOZy3f3twWknZL6+52uq+1IunqDy +qWy8kSN+2JVWqRSVGXyPPbtgVcOwzMR+lfkd8QnWwqQs3YAW/cgsvYOMypKZNC5 JIEk7gbU9okxyXvCrjdIbK6jiBJSWH08F5aaZmlNqfxV2ZxlSGgTzbc5Ywzz+wAt iH4/3WVp78tLZ6DZf8UN9vBn3a2o/m8ukMor3F79O9CpHhsy4hfOiUfVpnMShJwB psX+bTGR8kfai1iAZB7wJGarNNAAzYI= -----END CERTIFICATE-----Generated at Sun Dec 22 13:07:57 2024 by rpki-client on console-ams.rpki-client.org