$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c40bd0a-db57-39f3-8195-eea505b34707.roa File: 1c40bd0a-db57-39f3-8195-eea505b34707.roa (raw, json) Hash identifier: H9DWuPgTQb7w1wPo3Qrji1p92GHMNG5u7qCftIfdvgo= Subject key identifier: 6D:C6:B3:56:1B:1D:EE:15:EA:18:3D:F8:31:42:05:F4:9F:FA:5F:56 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858484AAAE18B4F4202BD4CD4C300 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c40bd0a-db57-39f3-8195-eea505b34707.roa Signing time: Sun 22 Dec 2024 14:00:51 +0000 ROA not before: Sun 22 Dec 2024 14:00:51 +0000 ROA not after: Sat 22 Mar 2025 13:00:51 +0000 asID: 35908 IP address blocks: 98.126.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4a:aa:e1:8b:4f:42:02:bd:4c:d4:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Dec 22 14:00:51 2024 GMT Not After : Mar 22 13:00:51 2025 GMT Subject: CN=72ad5fe8-7a72-4720-940c-91e4352db468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:36:21:1b:d2:61:74:46:f6:90:2e:74:4f:91: 84:5b:58:c9:78:4f:44:35:ab:3b:dc:ac:d0:53:42: d5:f1:a6:49:d9:61:41:38:b3:66:8a:2c:df:a5:35: 8e:e5:53:1e:d2:c6:27:1a:12:d6:bc:d4:99:0c:a6: de:c0:df:aa:3e:7c:91:18:db:fe:ea:74:f8:75:35: ba:27:ee:13:a6:bb:a2:b8:ea:11:75:36:56:39:38: 91:28:c6:f7:1a:f2:f8:b0:54:65:03:b2:69:13:da: c5:b6:7a:96:d5:58:98:9e:75:32:42:f0:e5:f6:9e: 0b:9e:10:c2:fe:97:9a:35:b7:1b:23:61:10:11:86: bf:44:70:73:85:15:b8:8c:63:a6:2b:32:cb:b7:09: 4d:3b:1e:d0:05:29:0d:18:77:04:93:4a:6b:f2:0a: a7:e3:b3:64:92:ed:54:d4:8a:76:74:e3:f2:c5:de: 9a:3c:e9:64:36:67:fa:15:a8:62:13:1b:a1:a7:86: 5f:5c:01:47:61:34:3a:86:8c:59:c5:83:ea:22:f6: e5:2d:0a:21:34:7d:94:2c:4b:6a:f7:93:72:fd:78: 0a:a2:2b:63:12:2c:d1:09:15:f9:0c:f2:50:35:62: 99:e9:b4:3d:86:0e:06:40:88:ba:b8:13:b4:55:a2: f5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C6:B3:56:1B:1D:EE:15:EA:18:3D:F8:31:42:05:F4:9F:FA:5F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c40bd0a-db57-39f3-8195-eea505b34707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:bf:49:80:0a:97:6e:0f:ad:74:42:13:72:db:53:86:f4:6d: dd:49:ec:17:bb:87:fb:ff:64:a7:98:5a:35:88:80:17:02:fa: de:21:c6:c0:07:32:a2:cc:3e:8f:2a:be:6c:5c:c3:10:01:bc: 48:ac:bb:c8:cd:98:80:11:95:c7:85:9c:39:f2:66:8d:63:2f: 86:5f:51:23:87:5c:92:db:bb:1e:01:c5:7e:e8:44:06:8a:0f: 5e:b8:d7:10:80:73:bb:09:e1:2e:39:26:cd:2b:df:21:ee:1a: 50:6d:c5:66:de:f7:4c:d4:7e:bb:1a:75:0f:a6:78:40:e9:27: 08:2a:6e:b4:f7:70:09:31:ab:4e:2a:72:0f:4f:5e:3a:b6:93: 94:fa:c0:db:6d:7f:d2:6c:62:f1:f8:ee:a7:92:00:3f:ab:7c: 2f:e3:4c:eb:5b:03:6f:e0:57:47:f4:4e:11:e3:14:61:9d:90: 41:c0:cc:5e:65:01:60:e5:95:37:25:83:2b:96:86:b6:b6:2e: 64:f1:d6:ad:15:ba:ee:0e:ba:b1:d5:97:ea:09:a2:85:2f:2a: c1:bf:5d:78:1c:4e:a2:9c:8b:f1:97:c4:67:83:de:13:81:53: 91:98:d6:1a:42:35:2f:6c:32:8c:81:a7:5c:ea:00:3b:2b:d9: 5a:ba:35:3c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhKquGLT0ICvUzUwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk NzJhZDVmZTgtN2E3Mi00NzIwLTk0MGMtOTFlNDM1MmRiNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DYhG9JhdEb2kC50T5GEW1jJeE9ENas73KzQ U0LV8aZJ2WFBOLNmiizfpTWO5VMe0sYnGhLWvNSZDKbewN+qPnyRGNv+6nT4dTW6 J+4TpruiuOoRdTZWOTiRKMb3GvL4sFRlA7JpE9rFtnqW1ViYnnUyQvDl9p4LnhDC /peaNbcbI2EQEYa/RHBzhRW4jGOmKzLLtwlNOx7QBSkNGHcEk0pr8gqn47Nkku1U 1Ip2dOPyxd6aPOlkNmf6FahiExuhp4ZfXAFHYTQ6hoxZxYPqIvblLQohNH2ULEtq 95Ny/XgKoitjEizRCRX5DPJQNWKZ6bQ9hg4GQIi6uBO0VaL1cQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFG3Gs1YbHe4V6hg9+DFCBfSf+l9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMWM0MGJkMGEtZGI1Ny0z OWYzLTgxOTUtZWVhNTA1YjM0NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYn4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAsb9JgAqXbg+tdEITcttThvRt3UnsF7uH+/9kp5haNYiAFwL63iHGwAcy osw+jyq+bFzDEAG8SKy7yM2YgBGVx4WcOfJmjWMvhl9RI4dcktu7HgHFfuhEBooP XrjXEIBzuwnhLjkmzSvfIe4aUG3FZt73TNR+uxp1D6Z4QOknCCputPdwCTGrTipy D09eOraTlPrA221/0mxi8fjup5IAP6t8L+NM61sDb+BXR/ROEeMUYZ2QQcDMXmUB YOWVNyWDK5aGtrYuZPHWrRW67g66sdWX6gmihS8qwb9deBxOopyL8ZfEZ4PeE4FT kZjWGkI1L2wyjIGnXOoAOyvZWro1PA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:04 2025 by rpki-client