$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa File: 20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa (raw, json) Hash identifier: jiBx3XOWkC79VoRictwbLFJfEVlQ0Yk6C8ad0y2gzpk= Subject key identifier: C6:A9:4A:FB:0D:5B:E9:4E:3D:89:C4:E6:25:CD:FE:BB:D1:EC:62:57 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285848F65BF42F708694E65361D200 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 32181 IP address blocks: 98.159.224.0/24 maxlen: 24 173.239.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f4:2f:70:86:94:e6:53:61:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=ce36518b-e349-4e69-b4d9-e8ca10db887e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:d9:2b:85:6c:74:28:85:ce:64:dc:4c:e1: 71:2f:96:b9:90:6e:7d:c7:f5:14:ce:f0:31:c1:e3: 3d:8b:af:95:50:8b:ea:a9:e2:a2:71:c0:14:81:b6: 5c:47:0f:5b:62:93:67:08:e6:8f:cf:59:ae:03:ba: 5c:31:9b:da:81:2e:ca:93:e2:7a:98:15:84:af:42: 17:38:34:d2:63:ac:fa:10:bb:1f:79:05:89:96:f4: 91:52:b4:67:89:ae:8b:5e:db:9f:40:b8:71:68:07: 9d:4e:65:af:05:35:c6:56:cc:72:50:59:bb:b4:50: c1:13:cc:b5:28:82:35:b4:28:70:e7:07:1f:6d:1f: df:d4:50:06:f4:d1:cf:7d:b8:d8:d6:f8:d7:b2:fa: af:b4:45:33:e0:6f:13:fd:44:13:e1:f0:30:b9:1b: b5:0c:5f:2b:c9:77:61:8b:3f:f7:a6:7a:b1:e0:0d: a1:79:4d:93:49:43:be:35:81:f4:a8:8f:0e:d4:6d: 47:bc:1e:ad:4f:f6:ad:50:80:ec:42:50:31:c7:07: 8d:09:78:c7:64:e3:38:ad:ac:98:40:dd:ef:68:d8: 80:d2:15:2c:d1:f5:71:b7:02:fb:44:41:89:96:65: a0:d7:39:b3:24:ec:e3:07:32:f4:8e:ec:48:12:22: 46:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A9:4A:FB:0D:5B:E9:4E:3D:89:C4:E6:25:CD:FE:BB:D1:EC:62:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/20cf665a-0b99-3e2a-8878-56fb7e8d403a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 98.159.224.0/24 173.239.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:51:a3:5d:b3:34:56:ca:15:a9:ed:1a:99:a2:c7:97:d6:25: 1a:6a:86:60:c0:4f:fc:c7:a4:20:fb:16:b8:5b:c9:fe:1a:05: e3:de:99:37:7f:72:83:35:52:bf:e7:45:9c:8a:4a:b2:30:3a: 10:ec:32:5b:18:26:ab:8c:08:0e:1e:08:a6:4c:66:87:70:f5: 4e:26:d9:b2:2c:41:7b:1c:2f:29:4a:d2:a5:90:54:69:b6:64: 00:23:e2:b7:5d:66:3c:96:36:d3:af:87:07:f7:0b:c1:ef:18: ca:7f:2d:8e:b6:51:bb:7e:b5:16:13:a8:c8:95:86:21:e2:01: db:07:d4:f1:c5:ae:05:e6:51:d3:b8:22:51:34:04:15:0f:c8: 07:3c:6d:86:3c:bf:55:bb:d9:d2:33:fd:3c:31:80:3b:bf:72: fb:5d:61:78:f0:93:3f:9a:87:31:b9:75:42:8c:1e:6d:2a:f5: 9f:36:f3:8f:64:12:36:32:af:d2:56:34:46:de:63:8e:be:f8: bb:e0:cf:c9:97:30:70:fd:bc:cd:a6:51:01:a1:d2:00:1e:e3: d8:5d:a7:4f:2c:bc:06:b0:c1:ab:6c:34:be:2f:15:09:f6:9c: b3:2c:26:e7:54:b1:a3:b6:64:0b:c9:fb:ab:4b:c5:42:f9:06: 48:7f:38:80 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj2W/QvcIaU5lNh0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk Y2UzNjUxOGItZTM0OS00ZTY5LWI0ZDktZThjYTEwZGI4ODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX3ZK4VsdCiFzmTcTOFxL5a5kG59x/UUzvAx weM9i6+VUIvqqeKiccAUgbZcRw9bYpNnCOaPz1muA7pcMZvagS7Kk+J6mBWEr0IX ODTSY6z6ELsfeQWJlvSRUrRnia6LXtufQLhxaAedTmWvBTXGVsxyUFm7tFDBE8y1 KII1tChw5wcfbR/f1FAG9NHPfbjY1vjXsvqvtEUz4G8T/UQT4fAwuRu1DF8ryXdh iz/3pnqx4A2heU2TSUO+NYH0qI8O1G1HvB6tT/atUIDsQlAxxweNCXjHZOM4rayY QN3vaNiA0hUs0fVxtwL7REGJlmWg1zmzJOzjBzL0juxIEiJGtQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMapSvsNW+lOPYnE5iXN/rvR7GJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMjBjZjY2NWEtMGI5OS0z ZTJhLTg4NzgtNTZmYjdlOGQ0MDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAYp/gAwQA re/MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMlRo12zNFbKFantGpmix5fWJRpqhmDAT/zHpCD7Frhbyf4a BePemTd/coM1Ur/nRZyKSrIwOhDsMlsYJquMCA4eCKZMZodw9U4m2bIsQXscLylK 0qWQVGm2ZAAj4rddZjyWNtOvhwf3C8HvGMp/LY62Ubt+tRYTqMiVhiHiAdsH1PHF rgXmUdO4IlE0BBUPyAc8bYY8v1W72dIz/TwxgDu/cvtdYXjwkz+ahzG5dUKMHm0q 9Z82849kEjYyr9JWNEbeY46++Lvgz8mXMHD9vM2mUQGh0gAe49hdp08svAawwats NL4vFQn2nLMsJudUsaO2ZAvJ+6tLxUL5Bkh/OIA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:42:11 2025 by rpki-client