$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/59e57147-9f49-38b2-8cab-071b47910cf4.roa File: 59e57147-9f49-38b2-8cab-071b47910cf4.roa (raw, json) Hash identifier: aCAnk4AHJF/0st85UOFH8a7F7nF2FGyC64Blfzwkz+g= Subject key identifier: 2E:5C:84:F4:E0:B0:E9:7E:76:81:8B:31:A5:9F:DE:4F:E6:D9:B8:AF Certificate issuer: /CN=98e62aba-8b05-4785-a899-f75688a272a5 Certificate serial: 010D0C9F432858488D151E3F6B1AA2236F1C7F80 Authority key identifier: 74:7D:5D:2A:D3:27:BD:3E:FE:B1:28:14:6F:46:1F:7D:D7:1F:13:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/59e57147-9f49-38b2-8cab-071b47910cf4.roa Signing time: Wed 15 Jan 2025 08:58:25 +0000 ROA not before: Wed 15 Jan 2025 08:58:25 +0000 ROA not after: Tue 15 Apr 2025 07:58:25 +0000 asID: 23532 IP address blocks: 199.204.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:15:1e:3f:6b:1a:a2:23:6f:1c:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98e62aba-8b05-4785-a899-f75688a272a5 Validity Not Before: Jan 15 08:58:25 2025 GMT Not After : Apr 15 07:58:25 2025 GMT Subject: CN=4f821131-9635-4791-b20a-39657d5d20fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c5:e0:01:9f:b6:bf:df:65:45:18:75:3c:14: 0e:16:95:e8:57:46:ed:6d:ba:a5:43:20:1e:9b:f6: 58:ce:1e:54:24:f7:23:e6:34:9e:cd:8b:a3:6b:22: 98:65:5f:12:7a:aa:2d:17:91:98:ea:89:18:c5:0f: db:da:07:e2:f0:1c:2f:7b:18:ca:d7:0a:d2:63:8b: f0:b4:8c:99:27:3d:45:93:1b:a6:db:6c:02:50:5e: 55:5a:3d:2e:32:e7:6d:76:d7:89:f9:08:45:55:1c: 8b:bc:51:e6:7a:50:5e:ca:8e:75:33:70:23:16:96: 0d:d9:4b:d6:06:ff:06:20:8e:a5:09:28:6c:24:74: 1a:cd:4c:0d:39:3b:bf:38:96:86:e6:1a:e9:f8:61: c9:16:bf:0d:3f:25:fe:ec:60:2c:9c:e7:c1:5c:98: 44:25:e6:29:ca:a0:23:55:98:50:f1:df:d1:00:21: a4:20:83:66:20:77:c4:fc:a9:b1:8a:23:75:f2:e0: dd:58:c5:23:53:64:e0:b9:0e:8f:f3:fd:2a:1b:85: 16:fa:fc:6c:22:df:a5:e6:1e:ab:3a:cc:d3:e9:9b: 7e:ad:d9:fe:5b:ae:82:78:e3:40:08:5d:4f:d2:bf: b4:ca:43:a4:2d:cd:50:45:c6:56:32:c0:22:fd:8e: a5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5C:84:F4:E0:B0:E9:7E:76:81:8B:31:A5:9F:DE:4F:E6:D9:B8:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/59e57147-9f49-38b2-8cab-071b47910cf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.crl X509v3 Authority Key Identifier: keyid:74:7D:5D:2A:D3:27:BD:3E:FE:B1:28:14:6F:46:1F:7D:D7:1F:13:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer sbgp-ipAddrBlock: critical IPv4: 199.204.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:0b:b8:ad:44:34:8d:e3:52:1e:73:68:b9:25:8e:fa:46:eb: 70:c9:01:58:80:ff:45:7a:42:c3:c3:30:aa:ac:b4:50:09:ed: 1d:25:fb:51:4b:1b:e9:00:67:97:a9:1f:8c:f7:c2:18:16:b5: a7:84:85:62:ef:e7:19:f4:1a:88:cd:73:f7:43:ce:1c:75:d9: f1:2f:d7:e4:ae:15:8b:23:2c:15:4b:e9:01:e7:6a:37:c9:f0: 14:c3:f8:6c:af:4f:59:ff:82:23:7b:24:80:ed:9e:73:60:3b: 8d:53:0a:e3:53:42:68:e7:2c:18:08:39:f8:88:93:50:22:87: 8c:a7:ec:f3:4b:71:70:0a:6c:a0:d0:ac:67:00:d0:bf:ee:5e: a4:8b:d3:1e:2f:04:7f:5a:68:f2:73:18:fb:84:f9:5a:f4:db: 1b:4a:0b:a7:b3:d1:ea:3c:f4:ba:f3:bd:f0:bc:c7:55:ae:6f: 94:ac:d2:5d:9c:e2:f2:e5:41:4c:19:4a:12:e4:aa:1a:3c:ac: 17:65:e1:53:fc:a3:41:28:a5:71:5e:dc:f6:06:f5:6f:05:5a: f2:24:e3:58:7c:f1:d0:70:df:94:3a:ce:50:9a:8f:56:8e:46: 07:98:0f:e2:90:4a:8b:a5:e2:43:88:80:58:3a:e2:15:00:3a: ef:53:67:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNFR4/axqiI28cf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThlNjJhYmEtOGIwNS00Nzg1LWE4OTktZjc1Njg4YTI3 MmE1MB4XDTI1MDExNTA4NTgyNVoXDTI1MDQxNTA3NTgyNVowLzEtMCsGA1UEAxMk NGY4MjExMzEtOTYzNS00NzkxLWIyMGEtMzk2NTdkNWQyMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisXgAZ+2v99lRRh1PBQOFpXoV0btbbqlQyAe m/ZYzh5UJPcj5jSezYujayKYZV8SeqotF5GY6okYxQ/b2gfi8BwvexjK1wrSY4vw tIyZJz1Fkxum22wCUF5VWj0uMudtdteJ+QhFVRyLvFHmelBeyo51M3AjFpYN2UvW Bv8GII6lCShsJHQazUwNOTu/OJaG5hrp+GHJFr8NPyX+7GAsnOfBXJhEJeYpyqAj VZhQ8d/RACGkIINmIHfE/KmxiiN18uDdWMUjU2TguQ6P8/0qG4UW+vxsIt+l5h6r OszT6Zt+rdn+W66CeONACF1P0r+0ykOkLc1QRcZWMsAi/Y6lywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5chPTgsOl+doGLMaWf3k/m2bivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGU2 MmFiYS04YjA1LTQ3ODUtYTg5OS1mNzU2ODhhMjcyYTUvNTllNTcxNDctOWY0OS0z OGIyLThjYWItMDcxYjQ3OTEwY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThlNjJhYmEtOGIwNS00Nzg1LWE4 OTktZjc1Njg4YTI3MmE1Lzk4ZTYyYWJhLThiMDUtNDc4NS1hODk5LWY3NTY4OGEy NzJhNS5jcmwwHwYDVR0jBBgwFoAUdH1dKtMnvT7+sSgUb0YffdcfE30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGU2MmFiYS04YjA1LTQ3ODUtYTg5OS1mNzU2 ODhhMjcyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwLuK1ENI3jUh5zaLkljvpG63DJAViA/0V6QsPDMKqstFAJ7R0l+1FL G+kAZ5epH4z3whgWtaeEhWLv5xn0GojNc/dDzhx12fEv1+SuFYsjLBVL6QHnajfJ 8BTD+GyvT1n/giN7JIDtnnNgO41TCuNTQmjnLBgIOfiIk1Aih4yn7PNLcXAKbKDQ rGcA0L/uXqSL0x4vBH9aaPJzGPuE+Vr02xtKC6ez0eo89LrzvfC8x1Wub5Ss0l2c 4vLlQUwZShLkqho8rBdl4VP8o0EopXFe3PYG9W8FWvIk41h88dBw35Q6zlCaj1aO RgeYD+KQSoul4kOIgFg64hUAOu9TZ4w= -----END CERTIFICATE-----Generated at Wed Feb 5 09:45:33 2025 by rpki-client