$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa File: c43593d9-a65b-3cb2-a082-f5a291790122.roa (raw, json) Hash identifier: DobAq6vhJWvhms3aueZ1msKukLK0rM30ziwR50cabjk= Subject key identifier: D3:62:6D:C2:B7:FA:44:9A:20:A9:A6:82:EA:B4:04:CD:A0:90:73:3B Certificate issuer: /CN=b1dd6e30-4099-4e09-b21a-2d586fc125f9 Certificate serial: 010D0C9F4328584897708566EF1B265A80871580 Authority key identifier: 18:3D:C5:44:87:1C:E0:02:65:B1:50:F9:D6:4F:98:D1:7F:D9:8A:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 19555 IP address blocks: 98.159.0.0/20 maxlen: 24 2620:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:85:66:ef:1b:26:5a:80:87:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1dd6e30-4099-4e09-b21a-2d586fc125f9 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=71f8b44b-42ab-4115-bf39-a2e666326506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:94:a7:18:2e:6f:09:13:5a:d5:1f:79:91: ba:5d:60:d6:ed:ca:04:90:cf:d1:0d:52:03:97:53: c1:a5:65:4e:a6:b9:07:64:f7:a7:9a:0b:8d:28:83: 5d:f3:dd:64:bd:7d:38:70:14:6d:6d:2f:27:c9:ac: 1e:60:1f:b2:28:9a:18:f9:59:ee:56:fb:ba:0c:c6: c4:79:f6:ab:fa:ca:65:d0:f2:48:fd:a6:a7:ca:b7: 24:0d:44:ce:ad:c3:ca:17:ae:30:1b:f3:82:d8:3b: b7:35:88:0a:da:41:87:2b:84:a3:b5:19:3a:54:95: 51:8e:37:10:1a:db:dc:a2:61:23:46:7a:1b:f9:9b: 98:89:9c:7e:19:0a:ef:45:02:6b:56:65:34:55:a7: 5b:17:42:98:f2:5b:2e:67:2c:7b:00:13:6f:71:0d: 0a:55:84:be:43:0d:89:a4:e5:18:ea:18:3c:b6:b6: 5a:d3:68:8e:61:f2:7a:58:39:e4:cd:1b:c0:65:1d: 4e:48:68:f3:30:48:40:36:3b:26:04:5f:96:a8:53: 76:f9:28:4a:62:3f:fd:d9:fc:56:6d:c6:2e:f0:d6: a4:cf:c0:89:0f:87:89:fe:53:15:5d:f4:a2:be:b9: 9c:e5:32:e7:b6:89:b2:c7:f6:5d:d7:a6:ca:de:d1: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:62:6D:C2:B7:FA:44:9A:20:A9:A6:82:EA:B4:04:CD:A0:90:73:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.crl X509v3 Authority Key Identifier: keyid:18:3D:C5:44:87:1C:E0:02:65:B1:50:F9:D6:4F:98:D1:7F:D9:8A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer sbgp-ipAddrBlock: critical IPv4: 98.159.0.0/20 IPv6: 2620:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:45:11:94:fe:6d:91:f8:85:da:5a:47:c6:ba:36:1c:1e:e4: 66:48:16:4e:05:43:56:14:0e:69:e8:8e:d7:fe:89:f1:99:0c: 55:5d:a9:97:55:6b:87:50:12:23:f0:7a:c9:46:c1:9c:b4:25: 80:f8:5f:be:32:ec:03:06:bf:2f:a8:ef:23:f4:49:c7:68:41: a7:43:9e:2c:0b:22:f5:e7:66:43:80:4e:e8:18:c3:6f:60:94: 1e:63:b4:c1:02:e9:9a:e9:df:00:d2:23:64:79:16:16:76:f0: 5a:06:32:63:2f:25:32:7a:e8:1b:6d:1c:55:3c:5a:d7:4f:55: c4:56:24:91:2c:3e:12:42:c2:60:7c:82:82:e4:55:11:80:00: e5:c4:f2:f1:e8:f4:32:67:e2:b3:78:3e:c9:35:79:c4:10:71: 91:45:a8:77:91:5b:31:c4:22:3a:35:16:99:be:57:3e:62:0b: f5:cd:c8:d5:84:5f:09:96:25:6b:2b:3f:40:f4:ae:46:5e:fb: 93:16:b1:4f:c5:0a:a4:52:8c:f2:a2:5e:6a:b7:70:ce:56:15: 42:99:07:b2:d5:74:3a:d4:a6:78:cc:79:b2:96:ec:3b:cb:f2: be:aa:17:f9:43:92:52:5b:06:16:35:52:85:82:3c:99:2a:8f: f1:ac:3d:62 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEiXcIVm7xsmWoCHFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFkZDZlMzAtNDA5OS00ZTA5LWIyMWEtMmQ1ODZmYzEy NWY5MB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk NzFmOGI0NGItNDJhYi00MTE1LWJmMzktYTJlNjY2MzI2NTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7eUpxgubwkTWtUfeZG6XWDW7coEkM/RDVID l1PBpWVOprkHZPenmguNKINd891kvX04cBRtbS8nyaweYB+yKJoY+VnuVvu6DMbE efar+spl0PJI/aanyrckDUTOrcPKF64wG/OC2Du3NYgK2kGHK4SjtRk6VJVRjjcQ GtvcomEjRnob+ZuYiZx+GQrvRQJrVmU0VadbF0KY8lsuZyx7ABNvcQ0KVYS+Qw2J pOUY6hg8trZa02iOYfJ6WDnkzRvAZR1OSGjzMEhANjsmBF+WqFN2+ShKYj/92fxW bcYu8Nakz8CJD4eJ/lMVXfSivrmc5TLntomyx/Zd16bK3tFFJQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNNibcK3+kSaIKmmguq0BM2gkHM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iMWRk NmUzMC00MDk5LTRlMDktYjIxYS0yZDU4NmZjMTI1ZjkvYzQzNTkzZDktYTY1Yi0z Y2IyLWEwODItZjVhMjkxNzkwMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjFkZDZlMzAtNDA5OS00ZTA5LWIy MWEtMmQ1ODZmYzEyNWY5L2IxZGQ2ZTMwLTQwOTktNGUwOS1iMjFhLTJkNTg2ZmMx MjVmOS5jcmwwHwYDVR0jBBgwFoAUGD3FRIcc4AJlsVD51k+Y0X/ZirkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iMWRkNmUzMC00MDk5LTRlMDktYjIxYS0yZDU4 NmZjMTI1ZjkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEYp8AMA8E AgACMAkDBwAmIAAoAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFEURlP5tkfiF2lpHxro2HB7kZkgWTgVD VhQOaeiO1/6J8ZkMVV2pl1Vrh1ASI/B6yUbBnLQlgPhfvjLsAwa/L6jvI/RJx2hB p0OeLAsi9edmQ4BO6BjDb2CUHmO0wQLpmunfANIjZHkWFnbwWgYyYy8lMnroG20c VTxa109VxFYkkSw+EkLCYHyCguRVEYAA5cTy8ej0Mmfis3g+yTV5xBBxkUWod5Fb McQiOjUWmb5XPmIL9c3I1YRfCZYlays/QPSuRl77kxaxT8UKpFKM8qJeardwzlYV QpkHstV0OtSmeMx5spbsO8vyvqoX+UOSUlsGFjVShYI8mSqP8aw9Yg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:43 2025 by rpki-client