$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/16de3365-b2a6-327a-a0e1-b170ea073410.roa File: 16de3365-b2a6-327a-a0e1-b170ea073410.roa (raw, json) Hash identifier: qTtEuiDz+YuX9+J/BlfUeYgfQQcJH/zDjebRbZPcRho= Subject key identifier: 95:5D:41:8A:4C:11:31:A8:AC:9A:5E:5D:B9:7A:40:D8:DD:EA:2A:73 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B24D15F35E9C844769880 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/16de3365-b2a6-327a-a0e1-b170ea073410.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 11404 IP address blocks: 98.158.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:24:d1:5f:35:e9:c8:44:76:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=1e29ba9a-3357-4b9f-8bed-b125b6d6906c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:61:40:8e:9d:03:c6:1b:10:39:78:2b:53:71: c8:ed:f8:80:d2:3b:47:7e:21:7b:b7:24:eb:5f:95: d5:7b:07:09:1d:1b:2a:48:c2:c5:39:7a:2b:3f:82: 7a:81:a0:9d:4a:8c:a2:f7:05:e0:46:52:e8:9f:31: 3a:4b:1f:b9:fa:70:2b:be:86:67:71:f7:ae:95:0e: da:1c:da:f2:46:02:b3:ec:c8:5a:26:77:4c:f1:37: 9e:2f:ad:f5:c5:3a:4d:ef:45:0d:38:6b:0a:8f:91: 31:43:5e:f1:78:08:9d:7d:b8:a8:ed:50:fe:89:04: ea:fa:7d:70:a4:b3:ec:b7:2e:40:cf:8f:79:47:43: 24:1a:99:8a:55:95:dd:5a:c2:14:6d:87:a5:cd:0b: b9:e8:78:d5:0d:ee:1e:5a:6c:51:e2:5e:60:dd:08: 99:55:39:72:10:5b:df:34:4b:b9:b5:94:75:8b:d7: f8:a0:20:b4:69:68:e1:dc:3b:31:35:1d:f2:7a:24: e0:58:dd:0f:d4:1f:0c:d6:e4:61:51:8b:49:f7:f8: 08:4c:f1:68:c3:97:ed:52:0e:81:55:fd:41:79:59: 16:c0:69:1f:3d:8c:86:84:4a:96:c3:b0:9a:b3:10: 02:be:78:7e:e6:7e:b0:df:1c:16:1d:b8:28:f0:39: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5D:41:8A:4C:11:31:A8:AC:9A:5E:5D:B9:7A:40:D8:DD:EA:2A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/16de3365-b2a6-327a-a0e1-b170ea073410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 98.158.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3b:04:46:b7:58:bf:14:39:57:68:ad:bf:f2:7f:09:1b:8f: a2:44:3b:5f:6f:c9:36:e6:cf:5c:6e:56:e5:fa:21:3a:04:fe: 7e:0f:2d:14:27:a7:c4:28:3e:eb:d6:ea:e0:14:60:ef:86:7a: d8:ea:a8:3c:4a:9d:4a:e8:d4:67:d5:4c:fc:0e:be:e7:e5:34: de:bc:aa:42:54:cf:6d:aa:e1:64:ea:8e:8c:e4:fb:8e:64:f1: 70:93:c9:c6:e3:59:f4:05:1d:77:06:14:95:27:50:ed:ce:c9: b7:25:b8:b5:24:7a:50:61:f4:0a:c4:b1:15:d0:7e:93:fd:1d: 35:9b:86:19:92:c0:77:dc:e5:fa:46:82:94:2f:25:ab:a9:16: 5c:7e:ef:b2:78:49:c2:49:dd:40:ca:e5:59:d3:05:a5:c8:1d: ac:9b:c8:d1:64:a7:68:45:19:03:a9:c3:ca:51:39:1c:90:da: 32:4e:0a:c5:d1:7f:51:eb:16:04:59:6f:6b:76:2d:48:82:58: 8b:fd:20:a9:4d:95:68:56:63:94:6a:3e:89:b2:28:c2:89:9c: 83:12:b6:df:c3:7a:63:69:f2:12:5b:c4:0f:55:3a:44:43:96: 03:5a:1d:32:ff:76:f6:fa:0b:54:3d:97:47:f2:e9:15:1b:9a: d7:75:ec:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKyTRXzXpyER2mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk MWUyOWJhOWEtMzM1Ny00YjlmLThiZWQtYjEyNWI2ZDY5MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWFAjp0DxhsQOXgrU3HI7fiA0jtHfiF7tyTr X5XVewcJHRsqSMLFOXorP4J6gaCdSoyi9wXgRlLonzE6Sx+5+nArvoZncfeulQ7a HNryRgKz7MhaJndM8TeeL631xTpN70UNOGsKj5ExQ17xeAidfbio7VD+iQTq+n1w pLPsty5Az495R0MkGpmKVZXdWsIUbYelzQu56HjVDe4eWmxR4l5g3QiZVTlyEFvf NEu5tZR1i9f4oCC0aWjh3DsxNR3yeiTgWN0P1B8M1uRhUYtJ9/gITPFow5ftUg6B Vf1BeVkWwGkfPYyGhEqWw7CasxACvnh+5n6w3xwWHbgo8DmYmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVdQYpMETGorJpeXbl6QNjd6ipzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTZkZTMzNjUtYjJhNi0z MjdhLWEwZTEtYjE3MGVhMDczNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc7BEa3WL8UOVdorb/yfwkbj6JEO19vyTbmz1xuVuX6IToE/n4PLRQn p8QoPuvW6uAUYO+GetjqqDxKnUro1GfVTPwOvuflNN68qkJUz22q4WTqjozk+45k 8XCTycbjWfQFHXcGFJUnUO3OybcluLUkelBh9ArEsRXQfpP9HTWbhhmSwHfc5fpG gpQvJaupFlx+77J4ScJJ3UDK5VnTBaXIHaybyNFkp2hFGQOpw8pRORyQ2jJOCsXR f1HrFgRZb2t2LUiCWIv9IKlNlWhWY5RqPomyKMKJnIMStt/DemNp8hJbxA9VOkRD lgNaHTL/dvb6C1Q9l0fy6RUbmtd17Po= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:01 2025 by rpki-client