$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4391ebc1-9d59-3837-94b5-63ecf12031a8.roa File: 4391ebc1-9d59-3837-94b5-63ecf12031a8.roa (raw, json) Hash identifier: 628kLsAO4D8C4uDKcxLE9L/tTVSDkpPFRrjJzOikzmk= Subject key identifier: 7F:DA:B2:B5:6F:32:75:7C:C8:81:99:74:6A:2C:1F:CD:9F:67:C8:56 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F432858481C9A8D99101EBF1C037A8180 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4391ebc1-9d59-3837-94b5-63ecf12031a8.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 25899 IP address blocks: 98.142.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:8d:99:10:1e:bf:1c:03:7a:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=e4c80424-4c33-4a37-9c75-9eebad4761b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4a:91:57:06:f4:e3:0a:b8:bc:dc:c7:fa:ce: b4:b7:48:70:db:b8:e0:aa:58:92:c8:ca:e5:45:db: 05:58:97:74:db:82:d2:82:b9:5a:dc:73:6b:da:6e: 5b:3f:e3:b0:8e:0b:d5:25:48:b0:16:02:28:67:b5: 92:10:7a:61:2f:85:ad:17:c0:a5:65:a4:6f:5d:58: 99:24:74:5a:cd:0d:ea:9b:2f:23:8b:38:44:b8:a3: 6f:1f:a2:76:0d:f9:13:86:9a:41:74:7f:9e:aa:84: 9d:fc:6d:a3:a1:37:fc:3a:b0:1b:5c:f9:cb:b4:99: 89:b9:bb:31:aa:99:ec:98:f0:43:e9:17:34:94:06: d9:43:48:e2:07:a4:af:ce:b6:31:6d:b0:8f:a5:60: 05:09:4a:44:13:8e:40:00:65:8f:b4:79:53:1e:62: 97:d9:90:2b:5c:d8:df:c1:97:3c:53:eb:ab:0a:50: f8:55:98:86:21:c9:7c:34:0a:57:29:17:c1:34:91: 98:1d:44:55:a8:91:f0:f9:f3:87:62:56:89:c6:13: 93:88:62:95:f3:49:8b:8c:d9:27:c9:d3:d4:f7:e9: 91:8e:25:33:3b:7e:10:98:cb:0a:17:94:de:0e:6d: 3d:9c:b6:7d:de:94:23:7e:7a:ac:b1:cb:24:5e:e9: 12:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DA:B2:B5:6F:32:75:7C:C8:81:99:74:6A:2C:1F:CD:9F:67:C8:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4391ebc1-9d59-3837-94b5-63ecf12031a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 98.142.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ba:8a:58:01:c0:96:e2:40:d4:72:f8:71:eb:95:00:fd:e9: df:4f:75:43:58:31:06:2f:eb:a7:60:40:4e:83:f9:ea:cd:17: ca:21:49:29:e6:55:13:90:5d:b0:77:51:c9:7e:ad:bd:09:4f: 47:54:42:f2:54:91:f2:49:d5:aa:0d:64:a0:8c:aa:08:45:6d: 59:21:30:6c:77:fa:cc:c1:7c:54:e6:fb:82:43:4f:7b:03:de: e7:81:07:4f:eb:9d:80:f9:29:b1:29:cd:b1:5f:94:ea:ea:18: 67:10:2c:4d:6a:be:2e:9d:b9:3d:d8:8a:95:58:64:15:55:a3: 77:b6:de:8e:48:f9:0f:62:be:10:d3:02:fd:01:4b:67:4c:f9: f6:fd:ac:b5:34:3d:13:61:3f:61:78:be:cd:71:4d:84:74:75: c1:f9:26:68:97:e8:b7:00:ae:32:d2:ba:a3:fa:73:fc:cd:1d: ad:3f:9d:31:13:78:09:70:8d:bd:43:ea:72:c8:5b:60:68:25: 2f:cc:61:77:78:78:53:3d:c9:12:19:d9:b3:f6:6a:3d:28:58: e7:23:d2:81:b8:5e:e3:24:69:79:4d:8c:b4:e7:92:47:17:fa: 53:50:fe:a4:17:ce:c0:1b:18:e6:44:08:05:71:d9:50:8b:12: 6d:0a:c2:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmo2ZEB6/HAN6gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk ZTRjODA0MjQtNGMzMy00YTM3LTljNzUtOWVlYmFkNDc2MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEqRVwb04wq4vNzH+s60t0hw27jgqliSyMrl RdsFWJd024LSgrla3HNr2m5bP+OwjgvVJUiwFgIoZ7WSEHphL4WtF8ClZaRvXViZ JHRazQ3qmy8jizhEuKNvH6J2DfkThppBdH+eqoSd/G2joTf8OrAbXPnLtJmJubsx qpnsmPBD6Rc0lAbZQ0jiB6SvzrYxbbCPpWAFCUpEE45AAGWPtHlTHmKX2ZArXNjf wZc8U+urClD4VZiGIcl8NApXKRfBNJGYHURVqJHw+fOHYlaJxhOTiGKV80mLjNkn ydPU9+mRjiUzO34QmMsKF5TeDm09nLZ93pQjfnqsscskXukSTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/asrVvMnV8yIGZdGosH82fZ8hWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDM5MWViYzEtOWQ1OS0z ODM3LTk0YjUtNjNlY2YxMjAzMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+6ilgBwJbiQNRy+HHrlQD96d9PdUNYMQYv66dgQE6D+erNF8ohSSnm VROQXbB3Ucl+rb0JT0dUQvJUkfJJ1aoNZKCMqghFbVkhMGx3+szBfFTm+4JDT3sD 3ueBB0/rnYD5KbEpzbFflOrqGGcQLE1qvi6duT3YipVYZBVVo3e23o5I+Q9ivhDT Av0BS2dM+fb9rLU0PRNhP2F4vs1xTYR0dcH5JmiX6LcArjLSuqP6c/zNHa0/nTET eAlwjb1D6nLIW2BoJS/MYXd4eFM9yRIZ2bP2aj0oWOcj0oG4XuMkaXlNjLTnkkcX +lNQ/qQXzsAbGOZECAVx2VCLEm0KwkM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:08 2025 by rpki-client