$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/bb1c9c96-b755-3eab-bdc7-584ad91f77d0.roa File: bb1c9c96-b755-3eab-bdc7-584ad91f77d0.roa (raw, json) Hash identifier: PIz4kENxOprCfs9n+hxDMzy1hu4I4fQjGWv8v83v3oY= Subject key identifier: 4F:23:D9:56:05:D2:F3:27:27:01:72:01:5D:DB:12:F9:92:97:4D:A5 Certificate issuer: /CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Certificate serial: 010D0C9F432858491246C3947219401918216C00 Authority key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/bb1c9c96-b755-3eab-bdc7-584ad91f77d0.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 25816 IP address blocks: 98.142.122.0/24 maxlen: 24 98.142.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c3:94:72:19:40:19:18:21:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=d98bad1d-90ce-45e1-b585-e76dee5d87c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:09:00:f0:45:bf:39:30:c6:c4:c9:a2:b0:d6: ec:71:67:6d:ad:89:5b:e3:10:e7:0a:03:ab:9b:3e: ca:e2:ff:3f:1e:c7:40:bd:8b:a8:6d:4e:23:1a:69: 2f:b3:2f:91:c1:a0:1e:7f:1c:c0:34:44:f8:44:ef: 2f:3f:75:6a:6c:e7:2c:66:bb:74:ce:84:0e:c2:ce: 9a:fc:de:4c:e9:a1:70:5d:69:e9:1d:0e:f9:a4:83: f2:08:aa:f0:65:11:89:97:6b:ec:e1:84:f1:ba:7f: a8:93:2f:32:7f:8f:b2:43:22:94:27:49:1f:6b:8c: 42:1a:60:e4:87:ca:c2:93:62:99:5d:54:d2:92:c2: 8a:f6:91:d1:1e:7a:e3:bb:aa:48:23:74:58:4e:a4: 19:1e:2a:97:b0:4d:d6:41:b2:d3:d8:0f:f2:86:a4: c0:f1:29:6d:03:7e:08:15:9a:dd:5f:ba:63:73:86: c1:17:90:49:31:2f:d1:7f:4b:13:5f:4c:21:21:b1: a5:94:bc:6c:7b:84:b5:e5:cc:45:59:ad:f4:3a:59: 6e:5e:0f:9b:ec:0f:80:08:e8:a8:3a:86:fa:00:90: 28:99:3c:d4:d3:bc:d8:d6:ed:5a:3e:b1:e0:67:e8: b1:9d:16:1e:38:09:1d:79:01:d5:29:96:c7:8d:9c: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:23:D9:56:05:D2:F3:27:27:01:72:01:5D:DB:12:F9:92:97:4D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/bb1c9c96-b755-3eab-bdc7-584ad91f77d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl X509v3 Authority Key Identifier: keyid:D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer sbgp-ipAddrBlock: critical IPv4: 98.142.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:17:42:57:50:36:ed:e6:8c:0a:13:7d:12:1b:6e:24:29:df: 34:fb:57:bc:c1:98:f0:4a:fc:b8:6c:b8:df:bd:bc:67:b3:bc: a0:74:76:ce:db:e7:24:5b:4c:bb:8c:14:75:c7:3c:06:e2:f6: 24:b9:2a:af:77:40:dd:e9:8f:81:ae:17:b5:db:99:fa:c4:d1: 72:e9:6f:b2:d7:aa:a1:6d:c6:92:09:e6:71:69:af:97:b1:1f: 2b:27:41:d3:6b:fb:e0:f2:82:7e:ae:f9:f6:3e:52:1b:d0:69: 9c:bf:bc:ff:d1:67:78:29:26:3b:25:b6:0d:25:ac:51:68:53: 28:5e:43:18:ec:32:79:6e:48:96:2f:84:1b:e0:25:32:54:e8: 23:41:86:aa:2b:c7:a0:9e:f0:29:6d:58:51:53:6a:78:91:e2: dd:1a:bf:4d:0e:ac:1a:e4:91:f3:f3:a9:ba:16:c7:61:c1:21: fa:02:38:f3:2a:e6:f5:74:9a:a5:bb:13:06:d5:74:94:f6:02: 21:b5:ba:0a:a8:e3:1e:a5:19:5b:e0:1a:43:91:e5:49:ed:ce: 7f:d2:ed:5d:77:86:12:2c:39:51:39:9d:ef:e2:50:bf:9d:cf: 92:03:23:6c:f5:3a:ae:41:85:7f:c9:2a:10:59:05:68:e8:35: ca:b5:c1:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsOUchlAGRghbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBmYjZlZmUtZGJjMS00NWE4LWIyNjYtY2E3MmY3ZTA3 OWMyMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZDk4YmFkMWQtOTBjZS00NWUxLWI1ODUtZTc2ZGVlNWQ4N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AkA8EW/OTDGxMmisNbscWdtrYlb4xDnCgOr mz7K4v8/HsdAvYuobU4jGmkvsy+RwaAefxzANET4RO8vP3VqbOcsZrt0zoQOws6a /N5M6aFwXWnpHQ75pIPyCKrwZRGJl2vs4YTxun+oky8yf4+yQyKUJ0kfa4xCGmDk h8rCk2KZXVTSksKK9pHRHnrju6pII3RYTqQZHiqXsE3WQbLT2A/yhqTA8SltA34I FZrdX7pjc4bBF5BJMS/Rf0sTX0whIbGllLxse4S15cxFWa30OlluXg+b7A+ACOio Oob6AJAomTzU07zY1u1aPrHgZ+ixnRYeOAkdeQHVKZbHjZwHpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8j2VYF0vMnJwFyAV3bEvmSl02lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMGZi NmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdlMDc5YzIvYmIxYzljOTYtYjc1NS0z ZWFiLWJkYzctNTg0YWQ5MWY3N2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDBmYjZlZmUtZGJjMS00NWE4LWIy NjYtY2E3MmY3ZTA3OWMyLzAwZmI2ZWZlLWRiYzEtNDVhOC1iMjY2LWNhNzJmN2Uw NzljMi5jcmwwHwYDVR0jBBgwFoAU14UfqvYVcCEgV1iLHNHDvrrS9HcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcy ZjdlMDc5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYo56MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkXQldQNu3mjAoTfRIbbiQp3zT7V7zBmPBK/LhsuN+9vGezvKB0ds7b 5yRbTLuMFHXHPAbi9iS5Kq93QN3pj4GuF7XbmfrE0XLpb7LXqqFtxpIJ5nFpr5ex HysnQdNr++Dygn6u+fY+UhvQaZy/vP/RZ3gpJjsltg0lrFFoUyheQxjsMnluSJYv hBvgJTJU6CNBhqorx6Ce8CltWFFTaniR4t0av00OrBrkkfPzqboWx2HBIfoCOPMq 5vV0mqW7EwbVdJT2AiG1ugqo4x6lGVvgGkOR5Untzn/S7V13hhIsOVE5ne/iUL+d z5IDI2z1Oq5BhX/JKhBZBWjoNcq1wcU= -----END CERTIFICATE-----Generated at Fri Apr 11 21:33:16 2025 by rpki-client