$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa File: 22131742-375f-3ede-807f-b0f8c1fe30b1.roa (raw, json) Hash identifier: wGTXL78vukSCIBcTITGx5AAcGI744adrOqd2QIAfEFs= Subject key identifier: 38:83:86:E4:D7:C7:18:0A:0D:FD:5C:AB:3A:93:AE:6E:3D:91:BF:6B Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F43285848100A931677CA71CBE9AFD230 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa Signing time: Sun 01 Dec 2024 14:00:51 +0000 ROA not before: Sun 01 Dec 2024 14:00:51 +0000 ROA not after: Sat 01 Mar 2025 14:00:51 +0000 asID: 2734 IP address blocks: 98.158.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:10:0a:93:16:77:ca:71:cb:e9:af:d2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Dec 1 14:00:51 2024 GMT Not After : Mar 1 14:00:51 2025 GMT Subject: CN=77d7f6d4-24fe-4da3-a18d-f9717bada31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f2:87:c8:74:23:98:f6:43:71:6a:1f:6e:77: 09:02:d7:a2:7e:74:8d:1d:5d:3a:34:c1:98:8c:de: 67:59:ac:ea:f8:0e:6a:08:29:70:d8:5c:2a:10:2c: da:e9:88:d1:45:95:a1:43:64:95:b9:df:6a:6c:2e: 2c:fa:04:10:42:bf:da:bd:e2:23:cc:2e:b9:e7:a5: 52:d1:cb:51:6c:3c:48:17:2f:f6:5c:94:f5:d4:79: 65:08:2d:45:f7:fb:a7:e4:f1:fe:5f:5c:29:99:e3: fa:f0:18:f5:aa:8d:e7:b2:9f:9e:05:02:5d:36:94: e9:79:56:44:d0:99:30:72:23:be:fc:d7:6e:ec:d0: 4f:d8:82:f7:64:a0:fe:4a:6a:69:a1:44:c0:0d:d3: a1:39:9c:12:0c:49:67:7a:90:91:54:dc:d3:0f:5e: 48:48:93:b7:a2:21:7d:b8:11:84:34:cd:f0:fe:c3: 6f:fc:81:bc:f3:e2:37:14:44:08:71:7e:51:2b:de: bd:14:b3:76:85:2e:9c:a0:fd:16:af:33:b8:29:14: 39:a8:7b:e1:1e:fd:3a:06:46:ff:60:07:bd:e0:8b: 0d:a2:61:f4:5c:25:af:1d:03:de:7e:46:d0:9c:ce: 62:22:9d:7e:ba:e6:5c:52:a1:f2:be:30:b2:ff:51: e5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:83:86:E4:D7:C7:18:0A:0D:FD:5C:AB:3A:93:AE:6E:3D:91:BF:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:c5:92:01:6f:52:f9:d6:22:61:2b:b6:e4:1a:ce:09:f6:77: bf:0f:da:24:9b:0b:18:9e:ff:73:12:46:2a:45:94:21:8f:8f: 99:23:45:94:8a:2c:7d:f7:f0:09:01:45:d6:e1:d1:9c:9b:0b: 69:ee:ed:2b:09:4a:34:f6:2f:29:f0:ee:ad:03:d3:1f:49:85: 1a:8c:be:cc:f8:24:22:bd:ba:41:b3:5a:c9:b4:06:2c:55:12: 2e:4e:28:ac:6f:95:44:c6:28:70:9c:43:24:4c:9d:b7:4e:a2: bf:00:99:7c:83:f9:2d:fb:ed:ae:3d:3e:d1:b5:dd:3a:ca:68: 3a:35:62:66:c5:1d:5d:02:13:fa:88:c8:76:06:ee:9e:e4:a5: f5:63:e4:7d:0b:8c:3a:27:d9:eb:40:f1:f6:23:00:11:52:be: 36:c4:da:87:e2:87:82:24:cd:84:7a:3e:71:af:4f:d9:d8:ab: ab:22:14:30:ae:28:24:a8:24:84:c4:93:ca:73:7e:15:ed:dd: 5b:52:34:17:fd:a1:29:99:b2:56:2e:ca:a8:fe:b3:1b:d0:55: 64:46:11:be:47:d3:b0:f1:86:4c:e4:b7:ce:3d:32:38:2e:73: 5c:05:f1:79:d9:20:23:df:9f:d5:ac:18:4e:d1:bf:f1:ef:29: d3:8a:23:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCpMWd8pxy+mv0jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk NzdkN2Y2ZDQtMjRmZS00ZGEzLWExOGQtZjk3MTdiYWRhMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fKHyHQjmPZDcWofbncJAteifnSNHV06NMGY jN5nWazq+A5qCClw2FwqECza6YjRRZWhQ2SVud9qbC4s+gQQQr/aveIjzC6556VS 0ctRbDxIFy/2XJT11HllCC1F9/un5PH+X1wpmeP68Bj1qo3nsp+eBQJdNpTpeVZE 0JkwciO+/Ndu7NBP2IL3ZKD+SmppoUTADdOhOZwSDElnepCRVNzTD15ISJO3oiF9 uBGENM3w/sNv/IG88+I3FEQIcX5RK969FLN2hS6coP0WrzO4KRQ5qHvhHv06Bkb/ YAe94IsNomH0XCWvHQPefkbQnM5iIp1+uuZcUqHyvjCy/1HlGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiDhuTXxxgKDf1cqzqTrm49kb9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvMjIxMzE3NDItMzc1Zi0z ZWRlLTgwN2YtYjBmOGMxZmUzMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzFkgFvUvnWImErtuQazgn2d78P2iSbCxie/3MSRipFlCGPj5kjRZSK LH338AkBRdbh0ZybC2nu7SsJSjT2Lynw7q0D0x9JhRqMvsz4JCK9ukGzWsm0BixV Ei5OKKxvlUTGKHCcQyRMnbdOor8AmXyD+S377a49PtG13TrKaDo1YmbFHV0CE/qI yHYG7p7kpfVj5H0LjDon2etA8fYjABFSvjbE2ofih4IkzYR6PnGvT9nYq6siFDCu KCSoJITEk8pzfhXt3VtSNBf9oSmZslYuyqj+sxvQVWRGEb5H07Dxhkzkt849Mjgu c1wF8XnZICPfn9WsGE7Rv/HvKdOKI4M= -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:55 2025 by rpki-client