$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa File: 0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa (raw, json) Hash identifier: vI10yIzb/6mkWaD6SJoZNdMjwUXGDB3g21Fg1+tdyvs= Subject key identifier: A6:9E:3A:E9:E7:7C:49:44:9B:AE:1D:D7:0A:ED:75:5E:DD:5A:76:3E Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584905B6ABB59FEDEC6915A064DC Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 98.158.240.0/20 maxlen: 20 148.64.0.0/19 maxlen: 19 168.149.128.0/18 maxlen: 18 170.176.240.0/21 maxlen: 21 199.247.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:ab:b5:9f:ed:ec:69:15:a0:64:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=dd8ccc06-24c9-463c-bda5-b31454882a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:4c:e6:4f:28:6c:65:0c:37:72:95:93:f2: 35:09:ed:b5:54:0c:ee:c1:fa:0f:5c:f6:ee:f9:73: 6f:c6:ab:c8:45:f5:15:f1:26:dd:6c:73:a3:a2:2d: f2:b4:67:cf:58:88:88:f6:de:cb:ab:a2:5e:40:d4: 98:5d:ee:bc:88:81:94:f7:8b:61:26:7d:e7:db:05: 9b:cf:6a:db:7b:39:1c:14:c7:8d:eb:2a:6d:5d:56: f1:15:1e:c0:59:4c:59:f6:8e:84:14:2e:01:69:40: 7f:03:72:34:fb:2d:7d:01:60:a3:f6:f9:16:2a:5e: c3:68:09:34:57:f2:34:76:7f:3a:73:1d:e8:fd:de: 8b:3f:c7:c0:09:36:e8:f6:70:bc:d3:80:77:46:c2: 6d:56:e9:75:79:65:93:f2:43:06:33:7d:c3:b8:c5: 4d:88:c7:16:a2:a9:85:55:e5:aa:85:97:b5:8c:ed: e9:fb:8b:b9:76:bf:59:9f:44:5a:1f:be:31:41:a1: 1e:4b:3c:09:fa:a8:b8:7b:e2:6f:06:a4:97:e8:8a: e5:c9:76:c9:a3:2a:13:67:37:aa:53:b3:83:a9:be: a9:5f:b1:66:39:de:0a:0a:c5:e8:2e:71:75:55:46: 1f:b6:ae:4c:13:54:1a:db:74:23:a3:69:96:cd:81: 72:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9E:3A:E9:E7:7C:49:44:9B:AE:1D:D7:0A:ED:75:5E:DD:5A:76:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 98.158.240.0/20 148.64.0.0/19 168.149.128.0/18 170.176.240.0/21 199.247.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ca:6e:79:4c:c1:b9:b7:0e:22:ef:4c:25:c0:a8:14:59:fa: 3d:ac:8f:65:f8:67:bf:fb:c5:b5:7c:8c:b2:3b:03:b9:e4:ac: f8:f7:ba:92:d1:ff:0c:2e:7d:2f:22:e0:bd:28:9f:da:5b:98: 43:d3:e9:97:74:1d:6b:ac:08:82:a6:f0:97:71:59:a4:92:d4: 3d:7d:1d:c4:49:e5:65:ec:eb:df:b3:5a:bb:0c:b7:92:ad:ce: 4f:74:ce:70:90:f5:01:7d:14:ec:a1:32:73:91:23:31:13:16: b1:3b:5d:f4:69:fb:e4:33:2b:3d:05:7c:c4:be:cc:67:c7:e6: 24:04:5b:5c:48:29:09:11:6d:37:8d:d2:1e:2c:c0:9b:85:21: e3:95:a9:a9:53:b8:c2:30:29:77:39:0e:df:92:59:1d:03:e4: 82:48:ec:d5:ef:f5:c6:0b:54:25:e8:5a:ad:4f:21:7f:0f:d1: af:68:73:c5:7a:42:cd:f4:39:3f:7a:f2:8d:7b:a2:3f:f9:d8: f8:8e:f9:36:80:d3:8b:d7:49:c3:73:54:b0:b7:8c:40:b8:64: c4:5a:00:ab:c2:fd:db:23:97:60:42:9d:24:c0:e6:55:83:01: d4:0a:60:de:9c:91:23:63:31:ad:d0:9b:b0:2a:f9:22:9b:bd: 28:83:e9:20 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEkFtqu1n+3saRWgZNwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ZGQ4Y2NjMDYtMjRjOS00NjNjLWJkYTUtYjMxNDU0ODgyYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9dM5k8obGUMN3KVk/I1Ce21VAzuwfoPXPbu +XNvxqvIRfUV8SbdbHOjoi3ytGfPWIiI9t7Lq6JeQNSYXe68iIGU94thJn3n2wWb z2rbezkcFMeN6yptXVbxFR7AWUxZ9o6EFC4BaUB/A3I0+y19AWCj9vkWKl7DaAk0 V/I0dn86cx3o/d6LP8fACTbo9nC804B3RsJtVul1eWWT8kMGM33DuMVNiMcWoqmF VeWqhZe1jO3p+4u5dr9Zn0RaH74xQaEeSzwJ+qi4e+JvBqSX6IrlyXbJoyoTZzeq U7ODqb6pX7FmOd4KCsXoLnF1VUYftq5ME1Qa23Qjo2mWzYFyFQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFKaeOunnfElEm64d1wrtdV7dWnY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMGU1ZGIxZjMtYjNhMS0z NTk3LTk5ZjMtMjhlYzUzM2VkM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEYp7wAwQF lEAAAwQGqJWAAwQDqrDwAwQEx/cgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGnKbnlMwbm3DiLvTCXAqBRZ +j2sj2X4Z7/7xbV8jLI7A7nkrPj3upLR/wwufS8i4L0on9pbmEPT6Zd0HWusCIKm 8JdxWaSS1D19HcRJ5WXs69+zWrsMt5Ktzk90znCQ9QF9FOyhMnORIzETFrE7XfRp ++QzKz0FfMS+zGfH5iQEW1xIKQkRbTeN0h4swJuFIeOVqalTuMIwKXc5Dt+SWR0D 5IJI7NXv9cYLVCXoWq1PIX8P0a9oc8V6Qs30OT968o17oj/52PiO+TaA04vXScNz VLC3jEC4ZMRaAKvC/dsjl2BCnSTA5lWDAdQKYN6ckSNjMa3Qm7Aq+SKbvSiD6SA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:22 2025 by rpki-client