$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa File: 3e8a8d16-857b-33e9-b07b-913de656aa02.roa (raw, json) Hash identifier: 9x7GEMqssF3hIIGM/8b2xxpb8VFajRSVeeaGU/zk7tA= Subject key identifier: FB:30:0D:AC:37:1D:EE:B9:D9:00:1C:5E:1F:6B:08:EC:7E:A6:15:22 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584929E3CBCF9CE04BE2D7C2B480 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 4213 IP address blocks: 98.126.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:cb:cf:9c:e0:4b:e2:d7:c2:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=ea2a75b8-ea41-4351-a7c2-dc8031fbd3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c4:40:52:b5:78:60:ab:76:a3:8c:25:fd:7f: 2d:19:74:7f:bb:61:34:e5:37:37:bf:3e:46:a4:5a: 9b:08:8a:b8:74:78:72:f2:f7:70:1e:e5:66:1b:9b: 2f:60:44:ff:82:f2:9d:a5:fa:e2:9a:46:52:22:42: ce:31:4c:15:41:2c:fa:d6:94:e5:d3:ff:e6:26:af: a6:b7:b0:e3:f3:10:f9:23:97:8b:87:5b:b8:41:e8: ca:ed:33:06:cc:1b:65:7f:46:16:c9:a8:27:dd:0f: c3:a6:6b:c0:7d:2d:aa:d2:96:e3:3b:5a:ca:e9:b4: 2b:6b:75:41:bf:5e:39:a5:64:28:7b:4a:74:1f:7b: ab:65:f8:6f:6b:0a:bf:13:36:e0:e3:28:9c:53:bf: a3:a5:dc:df:ca:64:92:51:97:ba:5b:d9:e7:e4:7a: 21:55:8b:03:43:ed:71:74:0c:bd:0f:a6:43:6f:3f: 0f:ae:99:2e:56:16:85:5b:2f:de:7c:a4:18:eb:bd: c8:8e:9d:ce:ed:80:17:57:f8:9d:47:e8:60:21:bd: b2:c7:9e:f3:8a:a7:7b:7e:42:bc:e0:0c:53:3f:8b: 3f:9d:b8:51:53:bb:5a:3a:c8:8d:ab:c5:a6:37:ac: 2c:86:66:8e:b2:1e:12:52:d8:fc:f7:6b:38:fc:57: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:30:0D:AC:37:1D:EE:B9:D9:00:1C:5E:1F:6B:08:EC:7E:A6:15:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:9b:9a:80:af:ae:ae:b4:2e:35:a6:81:f0:67:b1:37:13:e3: 9c:24:a5:6b:79:82:f8:45:cc:30:7f:1f:34:ee:62:71:4e:54: 87:e7:96:e2:e7:84:06:26:9a:52:61:96:94:60:e3:5f:e9:d6: 57:ca:6b:e5:7c:05:ce:12:e6:2a:4c:e0:9f:dd:1b:01:c4:ff: c5:06:c4:b0:41:aa:dc:90:cf:b0:3d:93:fd:2e:a5:13:57:29: 0e:7f:1b:e3:83:d3:34:52:f4:ee:60:2d:11:dd:e1:7e:73:54: 59:49:d9:c6:21:b6:7a:1e:59:c3:80:be:84:e9:cb:b1:67:8b: b7:30:2b:de:b8:7c:41:11:0f:51:32:4f:8e:4e:48:09:7d:7b: cd:62:34:e4:3c:17:3f:00:2f:11:fe:17:4d:21:84:94:51:5b: e9:90:8b:a4:2b:d5:e9:ff:ba:2c:d9:c3:3c:1e:55:b4:a5:b1: f2:94:4f:0e:ac:e8:b4:fc:e7:cc:7b:41:a1:83:08:90:76:da: 98:52:ce:55:8f:7b:03:14:8b:46:fa:cc:11:ee:38:7a:b1:ee: 78:a1:f6:28:0c:83:c4:bd:c6:82:16:66:db:d0:62:6d:be:9e: b2:77:44:01:ce:22:ea:b5:b6:aa:dd:15:98:52:23:4a:c1:cc: cc:e6:0f:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp48vPnOBL4tfCtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk ZWEyYTc1YjgtZWE0MS00MzUxLWE3YzItZGM4MDMxZmJkM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcRAUrV4YKt2o4wl/X8tGXR/u2E05Tc3vz5G pFqbCIq4dHhy8vdwHuVmG5svYET/gvKdpfrimkZSIkLOMUwVQSz61pTl0//mJq+m t7Dj8xD5I5eLh1u4QejK7TMGzBtlf0YWyagn3Q/DpmvAfS2q0pbjO1rK6bQra3VB v145pWQoe0p0H3urZfhvawq/Ezbg4yicU7+jpdzfymSSUZe6W9nn5HohVYsDQ+1x dAy9D6ZDbz8PrpkuVhaFWy/efKQY673Ijp3O7YAXV/idR+hgIb2yx57ziqd7fkK8 4AxTP4s/nbhRU7taOsiNq8WmN6wshmaOsh4SUtj892s4/Ffm2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPswDaw3He652QAcXh9rCOx+phUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvM2U4YThkMTYtODU3Yi0z M2U5LWIwN2ItOTEzZGU2NTZhYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYn6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWbmoCvrq60LjWmgfBnsTcT45wkpWt5gvhFzDB/HzTuYnFOVIfnluLn hAYmmlJhlpRg41/p1lfKa+V8Bc4S5ipM4J/dGwHE/8UGxLBBqtyQz7A9k/0upRNX KQ5/G+OD0zRS9O5gLRHd4X5zVFlJ2cYhtnoeWcOAvoTpy7Fni7cwK964fEERD1Ey T45OSAl9e81iNOQ8Fz8ALxH+F00hhJRRW+mQi6Qr1en/uizZwzweVbSlsfKUTw6s 6LT858x7QaGDCJB22phSzlWPewMUi0b6zBHuOHqx7nih9igMg8S9xoIWZtvQYm2+ nrJ3RAHOIuq1tqrdFZhSI0rBzMzmDwI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:43 2025 by rpki-client