$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa File: 3e8a8d16-857b-33e9-b07b-913de656aa02.roa (raw, json) Hash identifier: ez09QhQ9x3TiN0fG2qt8M9eR0/BmIlWDn8KkHCdvEnI= Subject key identifier: A4:51:61:3B:64:30:E7:D6:F2:0D:63:91:EB:17:96:D0:84:1F:B7:48 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858484AAAE179EC4173BDDDAF3D40 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa Signing time: Sun 22 Dec 2024 14:00:51 +0000 ROA not before: Sun 22 Dec 2024 14:00:51 +0000 ROA not after: Sat 22 Mar 2025 13:00:51 +0000 asID: 4213 IP address blocks: 98.126.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4a:aa:e1:79:ec:41:73:bd:dd:af:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Dec 22 14:00:51 2024 GMT Not After : Mar 22 13:00:51 2025 GMT Subject: CN=146b5445-2640-481c-b0df-17dd99ce6567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:de:4d:32:13:35:53:a9:b8:e3:14:e1:3e: 9f:3c:e4:18:aa:60:5c:f5:29:04:df:4d:2b:c2:5e: 76:b6:1c:d4:da:d3:82:57:fd:0c:75:d0:3a:d5:35: a5:b5:cb:d0:1b:05:8a:a7:f6:81:86:da:82:56:2e: d0:2a:6f:f0:12:80:23:ee:fb:cf:b1:00:15:c8:04: 75:5c:5d:a7:6a:68:33:6d:0d:f3:80:4c:83:21:03: 81:07:19:49:90:01:d2:33:e2:02:eb:cf:07:cc:6a: 03:a0:8b:d1:26:94:4e:81:02:82:b9:95:0c:5f:75: 18:79:46:00:95:d6:b0:77:60:7e:88:50:b9:38:4d: 84:11:1a:c0:88:6a:01:06:2b:11:34:98:9f:cb:71: ba:1f:ef:cc:14:9c:e7:50:6e:03:4f:c5:13:26:63: 4c:93:50:b0:92:d9:e8:5b:21:00:5a:de:1c:7f:ad: 5d:55:c6:61:81:0a:97:9f:9d:80:8b:85:49:c6:d7: 24:8e:f8:77:0f:a2:a8:b0:fc:b8:0d:08:d4:72:2b: 1c:64:77:e2:55:12:5a:ab:f2:33:f6:73:ae:27:1d: f7:5f:0b:6c:50:cc:a1:71:1c:17:00:ab:d9:15:cd: 0a:2e:80:9a:b7:81:27:e3:bf:96:fe:01:7c:ae:01: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:51:61:3B:64:30:E7:D6:F2:0D:63:91:EB:17:96:D0:84:1F:B7:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e9:b4:fe:57:ee:61:d6:55:db:9b:91:04:46:3c:97:22:e3: a3:0d:bb:04:1e:9e:26:40:b2:53:17:5c:a3:c0:92:9b:fc:54: dd:fb:c5:98:93:7a:33:5e:29:be:15:9d:2e:da:7c:ee:31:8d: 30:e0:90:36:dd:2e:ff:33:88:e0:2b:2e:3b:44:af:e3:fa:ef: 01:2b:7b:e6:2c:d1:a4:fb:b5:b1:d5:50:c8:9c:62:27:08:e4: cf:87:98:93:98:f1:3b:38:fb:5c:54:70:73:c8:71:e7:4f:ab: b9:e9:3d:66:25:6a:c9:66:19:a2:48:66:cc:61:0f:80:aa:b2: 16:a3:79:6d:34:da:f0:cc:e0:84:d9:cd:7e:7c:35:3d:48:2a: 01:4c:07:03:31:11:7b:7c:52:9d:20:f4:be:f2:7e:4c:bf:7c: 0f:f8:56:a3:ea:43:59:4c:4d:ae:57:0e:32:7d:a4:5b:a9:91: b0:78:81:09:6b:4b:00:cb:70:a9:cd:3e:0c:92:c8:37:ad:f2: 15:93:2f:de:7a:27:93:63:e6:ae:c1:2d:c0:98:ff:57:23:82: c4:b6:ce:d7:c6:24:1a:61:0f:72:c1:67:00:80:28:a9:e8:89: 3c:7c:a6:b6:a2:71:e7:16:51:fb:02:44:b3:c4:3a:97:fe:c4: 28:be:f6:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhKquF57EFzvd2vPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk MTQ2YjU0NDUtMjY0MC00ODFjLWIwZGYtMTdkZDk5Y2U2NTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtPeTTITNVOpuOMU4T6fPOQYqmBc9SkE300r wl52thzU2tOCV/0MddA61TWltcvQGwWKp/aBhtqCVi7QKm/wEoAj7vvPsQAVyAR1 XF2namgzbQ3zgEyDIQOBBxlJkAHSM+IC688HzGoDoIvRJpROgQKCuZUMX3UYeUYA ldawd2B+iFC5OE2EERrAiGoBBisRNJify3G6H+/MFJznUG4DT8UTJmNMk1Cwktno WyEAWt4cf61dVcZhgQqXn52Ai4VJxtckjvh3D6KosPy4DQjUciscZHfiVRJaq/Iz 9nOuJx33XwtsUMyhcRwXAKvZFc0KLoCat4En47+W/gF8rgE4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRRYTtkMOfW8g1jkesXltCEH7dIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvM2U4YThkMTYtODU3Yi0z M2U5LWIwN2ItOTEzZGU2NTZhYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYn6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXptP5X7mHWVdubkQRGPJci46MNuwQeniZAslMXXKPAkpv8VN37xZiT ejNeKb4VnS7afO4xjTDgkDbdLv8ziOArLjtEr+P67wEre+Ys0aT7tbHVUMicYicI 5M+HmJOY8Ts4+1xUcHPIcedPq7npPWYlaslmGaJIZsxhD4CqshajeW002vDM4ITZ zX58NT1IKgFMBwMxEXt8Up0g9L7yfky/fA/4VqPqQ1lMTa5XDjJ9pFupkbB4gQlr SwDLcKnNPgySyDet8hWTL956J5Nj5q7BLcCY/1cjgsS2ztfGJBphD3LBZwCAKKno iTx8praicecWUfsCRLPEOpf+xCi+9vU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:09 2025 by rpki-client