$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a034e1-70a3-34d7-8647-141d82220d07.roa File: 07a034e1-70a3-34d7-8647-141d82220d07.roa (raw, json) Hash identifier: cueiWtqSV7dLFO/KbErjv4dBNdafCGmHxF6qHr6HOts= Subject key identifier: 9C:9D:F7:C1:AA:4B:9E:B7:8E:B4:A7:60:F0:20:3A:C9:17:BD:EA:38 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848E16BF154531E0B279FCBC380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a034e1-70a3-34d7-8647-141d82220d07.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 19905 IP address blocks: 98.173.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:f1:54:53:1e:0b:27:9f:cb:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=53ca3d7c-2351-44a6-ae4e-8d5ed9a59996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:eb:a7:1a:9d:43:af:ab:b8:2c:ac:1c:e6:7c: 36:4d:1c:be:40:5a:9d:77:72:7e:c5:9e:32:81:6a: 28:cc:ae:9a:7e:5e:74:08:60:b4:74:5f:98:f7:77: c9:49:95:c4:c3:10:ae:8d:bd:da:9f:b5:25:6a:fb: 00:0c:ff:7e:f7:b3:fe:78:13:7a:e2:e1:f5:35:eb: 5d:80:1a:bd:32:60:cb:61:5a:63:5a:8a:4b:0a:d8: b0:b3:83:51:de:b7:ae:fb:79:bd:5d:a8:a1:11:77: 92:4e:fa:10:f5:27:fb:15:a0:6f:43:2d:1b:ce:3f: e1:29:10:21:42:32:3a:9e:68:53:6a:51:87:50:c0: 1d:f1:0d:bf:72:d5:37:91:49:31:92:cd:02:34:de: 3a:45:d8:0a:18:61:bc:35:a1:39:d5:ad:3d:a0:0c: ce:80:ae:28:3c:f2:35:7f:ce:c6:4a:10:f1:05:b6: 51:cb:03:25:14:3c:b9:ae:3f:65:98:b4:68:68:67: fc:66:66:2f:67:50:f6:11:b5:3f:d4:e1:26:bd:85: 7b:ae:0d:cf:95:bc:44:2e:53:48:7c:9b:49:a5:14: dc:04:69:2f:d0:a0:82:a8:d3:9a:3f:c2:16:db:65: 18:3f:29:32:1c:f1:9d:63:16:60:a4:5f:6e:81:8a: 04:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9D:F7:C1:AA:4B:9E:B7:8E:B4:A7:60:F0:20:3A:C9:17:BD:EA:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a034e1-70a3-34d7-8647-141d82220d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.173.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8b:f1:f5:d9:3e:d7:94:eb:3f:ab:a3:cd:3a:e3:3c:7c:67: 0e:a4:de:b3:87:4b:65:ad:a3:82:71:24:2b:71:05:9e:7f:a0: e8:c8:c1:36:54:69:e5:30:6c:94:71:3c:b4:8a:a5:34:a3:41: 1c:70:7d:72:57:66:d0:bf:96:6d:c6:ec:ff:10:1d:7b:07:e6: 23:44:f5:a3:88:c4:b1:67:af:9e:ab:cb:02:4b:0e:c0:b4:4c: 4d:e7:dd:c4:78:c8:e0:9f:8e:28:39:5a:89:40:e7:62:43:b3: b2:c6:22:f1:be:30:55:8e:e7:ec:be:6b:10:f2:6b:cc:ea:bc: 92:da:d9:20:e8:e7:46:49:ef:28:f2:96:5f:97:b2:1b:42:fe: bd:07:9c:54:05:f8:9b:d8:d0:7e:c0:16:44:be:dc:fa:dd:28: c6:c2:a7:2c:8c:4d:18:31:3b:10:ad:a8:91:be:66:6f:81:5c: 85:47:df:37:20:34:b8:f7:28:70:af:0f:71:b0:33:7a:ee:de: 6a:24:c6:cf:b6:a3:74:86:ff:db:fe:a5:44:2f:24:8a:82:bb: 6a:59:a8:04:1b:d7:54:39:b3:db:28:c4:66:a6:49:84:72:be: 16:0c:59:4e:2d:66:58:04:e6:f3:df:c6:f3:92:27:68:63:e0: 44:ea:89:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha/FUUx4LJ5/Lw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NTNjYTNkN2MtMjM1MS00NGE2LWFlNGUtOGQ1ZWQ5YTU5OTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuunGp1Dr6u4LKwc5nw2TRy+QFqdd3J+xZ4y gWoozK6afl50CGC0dF+Y93fJSZXEwxCujb3an7UlavsADP9+97P+eBN64uH1Netd gBq9MmDLYVpjWopLCtiws4NR3reu+3m9XaihEXeSTvoQ9Sf7FaBvQy0bzj/hKRAh QjI6nmhTalGHUMAd8Q2/ctU3kUkxks0CNN46RdgKGGG8NaE51a09oAzOgK4oPPI1 f87GShDxBbZRywMlFDy5rj9lmLRoaGf8ZmYvZ1D2EbU/1OEmvYV7rg3PlbxELlNI fJtJpRTcBGkv0KCCqNOaP8IW22UYPykyHPGdYxZgpF9ugYoEHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyd98GqS563jrSnYPAgOskXveo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDdhMDM0ZTEtNzBhMy0z NGQ3LTg2NDctMTQxZDgyMjIwZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYq1iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmL8fXZPteU6z+ro8064zx8Zw6k3rOHS2Wto4JxJCtxBZ5/oOjIwTZU aeUwbJRxPLSKpTSjQRxwfXJXZtC/lm3G7P8QHXsH5iNE9aOIxLFnr56rywJLDsC0 TE3n3cR4yOCfjig5WolA52JDs7LGIvG+MFWO5+y+axDya8zqvJLa2SDo50ZJ7yjy ll+XshtC/r0HnFQF+JvY0H7AFkS+3PrdKMbCpyyMTRgxOxCtqJG+Zm+BXIVH3zcg NLj3KHCvD3GwM3ru3mokxs+2o3SG/9v+pUQvJIqCu2pZqAQb11Q5s9soxGamSYRy vhYMWU4tZlgE5vPfxvOSJ2hj4ETqiQw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:49 2025 by rpki-client