$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21cd0f86-82a4-38a3-880c-6e017c15bd69.roa File: 21cd0f86-82a4-38a3-880c-6e017c15bd69.roa (raw, json) Hash identifier: sjMypVkPmvKvVXF5dllYRrfJv+K3xIQvrUtghfnb6RU= Subject key identifier: B6:BB:DE:9D:9C:49:F5:E1:CF:84:9B:AB:69:6A:F1:EE:B8:B7:1C:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB171DA6620D31866587E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21cd0f86-82a4-38a3-880c-6e017c15bd69.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 184.191.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:71:da:66:20:d3:18:66:58:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=dd398d49-d0eb-41ce-b669-1d440c4f7dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:90:da:1a:87:8b:1f:40:64:ea:35:b5:49: 6c:59:58:16:ef:68:37:44:da:bf:43:f5:43:05:47: c8:9a:7e:bf:04:6e:b4:3b:81:69:41:75:6e:47:00: 6e:96:5d:18:f1:93:f2:bf:9e:7b:82:84:4d:ad:22: 46:49:de:ca:83:cb:3d:7e:ca:56:21:84:c1:5a:96: 52:94:ce:30:57:3c:15:ef:72:27:88:30:5e:44:00: 1d:ec:95:69:08:67:6a:1f:14:f9:a2:2b:24:fb:63: 44:67:9d:04:37:3c:11:aa:51:27:7b:29:97:a5:2d: 13:e5:ec:32:b3:d4:ef:72:9c:94:db:97:ca:f1:97: 84:b2:59:5c:70:03:8e:2d:12:d2:19:4e:ea:e9:49: 05:5b:65:cb:79:f9:b4:89:5c:c9:f2:ed:3b:bf:56: e9:31:62:d3:76:70:df:03:f8:98:f6:f4:b0:1c:da: 59:4c:c2:42:98:2b:30:36:1a:81:52:7e:5f:7b:e6: a0:d5:f3:19:95:00:2b:12:43:79:f2:af:a7:5c:b3: 08:15:dd:42:92:94:ee:fb:19:21:58:fe:ff:62:8e: 80:31:c1:9c:9e:23:c4:0a:eb:8d:0e:83:09:cd:f6: cc:f8:0f:42:d3:86:1e:28:4a:f4:09:c4:62:1b:01: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BB:DE:9D:9C:49:F5:E1:CF:84:9B:AB:69:6A:F1:EE:B8:B7:1C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21cd0f86-82a4-38a3-880c-6e017c15bd69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 184.191.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:12:43:36:d7:45:7f:a2:6b:bf:31:9a:2c:e7:c1:1c:01:41: 48:50:f9:b1:e0:e1:41:68:9e:3d:12:83:7a:36:02:4e:18:d2: 96:55:09:95:ec:50:c3:db:75:4e:0d:63:5d:33:06:9a:7b:4d: 73:39:91:b9:12:f4:ae:78:18:40:6c:45:18:fe:b0:24:8e:97: 39:2e:16:4c:d9:78:21:12:02:76:93:77:be:63:69:7b:e1:38: 9c:49:61:56:57:80:f9:dd:6f:47:97:38:92:c8:9f:66:a5:f8: da:70:21:2a:88:ac:d5:a8:99:a7:ec:8c:5e:1e:d1:c1:9c:ca: b9:39:93:2d:80:cb:8f:fe:ae:2d:01:01:cc:55:fc:d4:c7:c1: fb:11:93:25:5d:10:14:b7:1f:32:29:4d:3f:77:8f:68:ad:b6: 7c:4d:76:8f:8a:b0:0f:3b:5e:42:b9:21:39:aa:fa:f2:fc:bc: d0:d9:b0:2c:6c:34:40:1e:21:50:fa:dd:ef:81:dd:33:d4:09: 58:ef:47:ce:52:50:e8:2e:09:17:51:a6:d2:d9:fa:7a:49:a4: 41:04:18:b7:35:76:cc:b4:0b:6d:82:b8:7b:ee:33:1e:a3:9c: a2:72:6f:c3:a1:20:61:8d:35:59:da:92:8e:dc:2e:56:13:a4: 1e:e5:8e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXHaZiDTGGZYfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZGQzOThkNDktZDBlYi00MWNlLWI2NjktMWQ0NDBjNGY3ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWiQ2hqHix9AZOo1tUlsWVgW72g3RNq/Q/VD BUfImn6/BG60O4FpQXVuRwBull0Y8ZPyv557goRNrSJGSd7Kg8s9fspWIYTBWpZS lM4wVzwV73IniDBeRAAd7JVpCGdqHxT5oisk+2NEZ50ENzwRqlEneymXpS0T5ewy s9TvcpyU25fK8ZeEsllccAOOLRLSGU7q6UkFW2XLefm0iVzJ8u07v1bpMWLTdnDf A/iY9vSwHNpZTMJCmCswNhqBUn5fe+ag1fMZlQArEkN58q+nXLMIFd1CkpTu+xkh WP7/Yo6AMcGcniPECuuNDoMJzfbM+A9C04YeKEr0CcRiGwGTPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa73p2cSfXhz4Sbq2lq8e64txxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFjZDBmODYtODJhNC0z OGEzLTg4MGMtNmUwMTdjMTViZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuL8VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQSQzbXRX+ia78xmiznwRwBQUhQ+bHg4UFonj0Sg3o2Ak4Y0pZVCZXs UMPbdU4NY10zBpp7TXM5kbkS9K54GEBsRRj+sCSOlzkuFkzZeCESAnaTd75jaXvh OJxJYVZXgPndb0eXOJLIn2al+NpwISqIrNWomafsjF4e0cGcyrk5ky2Ay4/+ri0B AcxV/NTHwfsRkyVdEBS3HzIpTT93j2ittnxNdo+KsA87XkK5ITmq+vL8vNDZsCxs NEAeIVD63e+B3TPUCVjvR85SUOguCRdRptLZ+npJpEEEGLc1dsy0C22CuHvuMx6j nKJyb8OhIGGNNVnako7cLlYTpB7ljn8= -----END CERTIFICATE-----Generated at Fri Mar 14 10:31:38 2025 by rpki-client