$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/817950c1-eac3-3962-8091-1ddc67dd9a0b.roa File: 817950c1-eac3-3962-8091-1ddc67dd9a0b.roa (raw, json) Hash identifier: yLiU9MxEc0BVb30e0LOPjNy7EWUypX3DoVoOPntvixQ= Subject key identifier: EF:0E:8E:82:35:56:64:8B:D5:26:30:66:33:16:E7:55:8B:66:4F:26 Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Certificate serial: 010D0C9F4328584827C53514C9EA339605FE3980 Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/817950c1-eac3-3962-8091-1ddc67dd9a0b.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 3356 IP address blocks: 144.172.72.0/24 maxlen: 24 144.172.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:35:14:c9:ea:33:96:05:fe:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=026a0b07-f457-4640-be10-a13369b3dbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:af:a6:9e:ee:0f:b1:06:2c:f5:8c:88:94:34: 22:f3:5e:02:98:9c:45:c7:2b:a0:3d:46:b6:7c:9f: 8f:7e:38:f8:65:1b:20:5e:c2:f8:ae:a0:6b:04:21: 5a:e0:64:f5:96:d2:e3:9f:5f:a8:fb:8c:48:de:c8: 05:91:c2:52:32:39:4f:a7:4e:f1:3d:60:22:3d:cb: e8:23:1d:6e:eb:80:c5:08:7f:aa:ef:dc:be:53:32: 4f:c6:6f:8c:73:96:a9:3d:af:10:95:15:c1:e5:b8: 8b:96:5f:82:80:8c:4e:77:ed:d8:49:59:d4:34:4d: 04:39:1a:2b:1e:37:ad:76:9a:28:ef:32:a4:48:06: 90:31:d2:1b:7d:18:ac:4a:e1:0f:2e:73:21:11:0e: c0:eb:4e:24:00:ba:ec:4a:67:fe:f8:85:77:10:9b: 3f:3d:cb:a5:cd:b1:d3:c6:11:6f:0c:e8:54:bb:4e: fd:d1:63:ff:cf:99:90:d6:31:d0:ad:bc:1e:04:fb: d0:b0:5c:df:19:70:ce:91:d4:28:63:d4:69:71:b0: ca:0b:83:40:8e:2d:e4:65:f5:f8:ad:bd:ed:af:85: eb:de:85:89:85:69:99:22:2e:3d:bc:b2:51:fa:39: 1a:3e:61:bb:a9:0a:ef:5f:3d:d5:fa:0c:19:b0:97: 01:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:8E:82:35:56:64:8B:D5:26:30:66:33:16:E7:55:8B:66:4F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/817950c1-eac3-3962-8091-1ddc67dd9a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl X509v3 Authority Key Identifier: keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer sbgp-ipAddrBlock: critical IPv4: 144.172.72.0/24 144.172.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8b:58:1b:01:ea:f3:24:f9:cd:68:b2:72:b1:6f:0c:2c:f2: 38:af:49:bd:26:82:95:02:a4:7e:6c:37:d6:f1:55:23:21:9e: 65:f8:6a:bb:99:91:c8:d4:48:28:c9:30:94:db:fa:ce:8f:43: 94:bc:20:1d:61:96:fe:1e:8a:ef:af:20:66:86:b4:6a:9d:83: 96:08:12:ec:84:c8:d8:ab:1b:0a:f7:48:0a:93:a2:8f:ca:0a: 16:12:27:4f:5a:18:d8:5b:04:ae:85:8c:5f:5f:c4:e0:12:d2: 7c:82:6b:57:0a:58:cc:50:b1:d7:1b:5e:ea:cc:c7:bc:8b:30: 2c:f4:84:2e:15:48:c4:27:2a:14:cc:c3:dd:63:21:6f:fa:25: 68:3e:e0:a4:18:cc:0c:01:e8:6d:23:28:40:43:4d:5a:0c:a7: 75:d5:d2:94:89:ab:6b:99:23:a9:82:b9:cc:aa:b9:af:62:bd: bd:34:99:b7:e9:02:3d:b9:2c:18:9c:47:30:b0:24:02:76:a6: 5f:0e:35:d7:64:3e:5a:48:42:47:f4:4a:d9:d6:30:40:e8:36: 4e:4c:fc:bb:42:fa:89:23:71:33:b5:c7:ea:95:41:e6:94:81: 73:6b:d2:08:4e:01:d8:36:6a:d4:42:15:9a:dd:be:34:ab:71: 2b:a9:e8:1c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgnxTUUyeozlgX+OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi OWQ3MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk MDI2YTBiMDctZjQ1Ny00NjQwLWJlMTAtYTEzMzY5YjNkYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K+mnu4PsQYs9YyIlDQi814CmJxFxyugPUa2 fJ+Pfjj4ZRsgXsL4rqBrBCFa4GT1ltLjn1+o+4xI3sgFkcJSMjlPp07xPWAiPcvo Ix1u64DFCH+q79y+UzJPxm+Mc5apPa8QlRXB5biLll+CgIxOd+3YSVnUNE0EORor Hjetdpoo7zKkSAaQMdIbfRisSuEPLnMhEQ7A604kALrsSmf++IV3EJs/PculzbHT xhFvDOhUu0790WP/z5mQ1jHQrbweBPvQsFzfGXDOkdQoY9RpcbDKC4NAji3kZfX4 rb3tr4Xr3oWJhWmZIi49vLJR+jkaPmG7qQrvXz3V+gwZsJcBmwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO8OjoI1VmSL1SYwZjMW51WLZk8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvODE3OTUwYzEtZWFjMy0z OTYyLTgwOTEtMWRkYzY3ZGQ5YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm NDEwYmI5ZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkKxIAwQA kKxwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEuLWBsB6vMk+c1osnKxbwws8jivSb0mgpUCpH5sN9bxVSMh nmX4aruZkcjUSCjJMJTb+s6PQ5S8IB1hlv4eiu+vIGaGtGqdg5YIEuyEyNirGwr3 SAqToo/KChYSJ09aGNhbBK6FjF9fxOAS0nyCa1cKWMxQsdcbXurMx7yLMCz0hC4V SMQnKhTMw91jIW/6JWg+4KQYzAwB6G0jKEBDTVoMp3XV0pSJq2uZI6mCucyqua9i vb00mbfpAj25LBicRzCwJAJ2pl8ONddkPlpIQkf0StnWMEDoNk5M/LtC+okjcTO1 x+qVQeaUgXNr0ghOAdg2atRCFZrdvjSrcSup6Bw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:25 2025 by rpki-client