$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3f9bc4a3-4a6f-3a72-b2d2-8488135cd817.roa File: 3f9bc4a3-4a6f-3a72-b2d2-8488135cd817.roa (raw, json) Hash identifier: bm05wUi2lC0+W/YxgeXzfmBWvYFQYQuQHoIvbzOuJ/4= Subject key identifier: A1:B2:E2:D6:54:C4:27:C2:BE:74:14:6F:BA:20:AC:0A:0E:06:F6:4D Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584858A053E0CA63DDE8FCCFB200 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3f9bc4a3-4a6f-3a72-b2d2-8488135cd817.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 13213 IP address blocks: 98.159.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:53:e0:ca:63:dd:e8:fc:cf:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=32f51b52-a797-4c50-8c5b-87bcac9c5ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8a:27:4a:77:b1:09:73:e9:f4:4d:be:07:ae: e1:4f:17:33:48:ac:d5:e3:27:24:5f:79:f4:e4:35: d5:33:62:fa:b4:2e:74:7a:0b:f8:a8:ce:18:09:15: 1b:15:11:db:a0:ea:54:c2:f7:f2:2a:d0:68:f7:f5: a3:84:47:c2:43:ea:c3:8e:e9:97:d0:bd:53:04:3e: ec:37:e6:72:b2:76:cc:d0:08:21:da:30:fd:e8:75: 81:51:b7:e6:4f:82:d0:03:77:f0:f6:7c:1f:e0:1e: 44:fd:b2:3a:d7:0e:4a:5e:85:21:30:9c:10:91:db: c3:c6:f8:dc:83:5f:5b:71:7e:3d:3d:81:4c:85:eb: 3d:da:3c:a6:76:9c:1f:8d:87:19:d0:d5:c9:97:a7: 18:d8:6b:63:51:34:34:19:1e:f7:1d:b9:27:ae:5e: 27:0b:91:94:1b:58:09:50:df:03:d2:8d:b0:0c:9e: 84:b0:0e:44:89:64:4e:12:96:6d:33:8a:a3:a0:43: 72:04:34:41:ce:cc:4b:6d:b8:dc:1a:10:57:fe:aa: e6:bf:e7:55:99:e2:a6:2c:95:46:86:ed:b9:81:03: 26:15:17:26:21:37:8f:da:7c:12:37:1b:60:7f:37: 57:cc:63:eb:ba:96:26:f7:bf:26:a8:42:55:ab:b0: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B2:E2:D6:54:C4:27:C2:BE:74:14:6F:BA:20:AC:0A:0E:06:F6:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3f9bc4a3-4a6f-3a72-b2d2-8488135cd817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 98.159.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:6a:3c:99:77:95:9a:23:43:f9:5c:06:c9:a9:51:7e:d4:02: 62:18:e0:9e:81:a7:d7:e4:c2:61:47:46:ef:62:6e:99:0a:85: 5b:2c:d5:1f:0a:c6:5d:0f:fc:b6:a8:b3:b8:28:05:87:1b:b1: 5d:91:97:9c:74:35:33:ef:78:ee:94:b6:f2:fa:a5:cc:85:dc: ab:63:f7:d5:40:fc:46:ba:7e:ae:f1:e8:7b:f2:02:22:eb:37: 67:06:4f:98:89:49:81:38:0e:60:cc:11:c5:b6:75:7a:f7:d8: 0b:90:99:24:c3:a0:66:d6:78:a5:85:ec:1c:c4:f1:3f:4e:55: 12:c3:b2:cd:0e:ab:57:e9:22:81:53:4f:62:1e:e1:7f:a3:81: ae:30:1e:7b:f1:ac:2d:38:ae:49:65:83:9e:ef:95:9d:3c:06: 6c:06:cb:db:35:83:98:99:8b:34:08:fa:35:78:dd:3e:ea:34: 90:c2:34:32:68:38:83:7a:ba:f2:d1:35:a2:9f:86:72:53:31: 06:e8:a3:7a:b8:4d:75:25:7f:8a:fa:df:f7:a5:98:a4:f4:c6: ed:0b:96:79:13:7a:77:8b:5f:d0:2c:99:6d:d8:e6:49:84:0b: fc:ff:47:c6:d7:76:ab:69:27:21:6d:30:7a:49:90:27:74:6b: ef:09:e4:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFPgymPd6PzPsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk MzJmNTFiNTItYTc5Ny00YzUwLThjNWItODdiY2FjOWM1ZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYonSnexCXPp9E2+B67hTxczSKzV4yckX3n0 5DXVM2L6tC50egv4qM4YCRUbFRHboOpUwvfyKtBo9/WjhEfCQ+rDjumX0L1TBD7s N+ZysnbM0Agh2jD96HWBUbfmT4LQA3fw9nwf4B5E/bI61w5KXoUhMJwQkdvDxvjc g19bcX49PYFMhes92jymdpwfjYcZ0NXJl6cY2GtjUTQ0GR73Hbknrl4nC5GUG1gJ UN8D0o2wDJ6EsA5EiWROEpZtM4qjoENyBDRBzsxLbbjcGhBX/qrmv+dVmeKmLJVG hu25gQMmFRcmITeP2nwSNxtgfzdXzGPrupYm978mqEJVq7DrmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGy4tZUxCfCvnQUb7ogrAoOBvZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvM2Y5YmM0YTMtNGE2Zi0z YTcyLWIyZDItODQ4ODEzNWNkODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp/iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpqPJl3lZojQ/lcBsmpUX7UAmIY4J6Bp9fkwmFHRu9ibpkKhVss1R8K xl0P/Laos7goBYcbsV2Rl5x0NTPveO6UtvL6pcyF3Ktj99VA/Ea6fq7x6HvyAiLr N2cGT5iJSYE4DmDMEcW2dXr32AuQmSTDoGbWeKWF7BzE8T9OVRLDss0Oq1fpIoFT T2Ie4X+jga4wHnvxrC04rkllg57vlZ08BmwGy9s1g5iZizQI+jV43T7qNJDCNDJo OIN6uvLRNaKfhnJTMQboo3q4TXUlf4r63/elmKT0xu0LlnkTeneLX9AsmW3Y5kmE C/z/R8bXdqtpJyFtMHpJkCd0a+8J5IU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:28 2025 by rpki-client