$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b2a903-3c30-388d-99a6-6c3b023b66f0.roa File: 23b2a903-3c30-388d-99a6-6c3b023b66f0.roa (raw, json) Hash identifier: mwKEKacN0WZiMsS+xuJVPbpzxCh7aIBlUtkKGt5IUfU= Subject key identifier: 1C:21:9D:7D:A2:5D:C8:A0:E9:50:F6:73:45:E8:28:82:BD:17:97:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328583E6044E2794C5E8CC44F9F0A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b2a903-3c30-388d-99a6-6c3b023b66f0.roa Signing time: Sun 26 Jun 2022 12:00:00 +0000 ROA not before: Sun 26 Jun 2022 12:00:00 +0000 ROA not after: Sun 27 Jun 2027 04:00:00 +0000 asID: 22773 IP address blocks: 98.163.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3e:60:44:e2:79:4c:5e:8c:c4:4f:9f:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 26 12:00:00 2022 GMT Not After : Jun 27 04:00:00 2027 GMT Subject: CN=77e9aac2-3b83-4c5d-893c-9bdaa52eac7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:3b:94:f9:34:b4:d0:7d:d3:7d:d1:09:6d: d6:1d:f5:b0:bf:7e:c3:5f:6a:1d:7b:03:41:25:c7: 5c:f3:a6:1e:12:31:fb:b7:55:7d:2d:c1:65:70:41: 30:4d:9e:6b:25:e0:2c:d8:7c:53:c8:42:96:ec:c3: e4:3c:1b:19:43:a0:ec:a9:ed:3a:b6:bd:5f:3e:7a: 5b:c8:98:70:72:e9:f1:86:8a:f3:ea:0d:bd:08:f0: fe:db:03:79:4f:74:9f:73:e3:9e:df:8e:8a:17:e2: c3:e7:22:3a:74:30:95:5f:ac:ea:23:d4:1a:c2:83: 7d:33:a6:51:b8:60:14:63:39:77:0e:38:48:a0:05: 0e:16:c0:32:b8:af:5d:9c:dd:d0:6a:80:a6:dd:78: d7:8b:d1:67:da:b0:96:72:6a:b5:f6:16:ef:dc:a8: 35:e6:4f:7e:b2:d0:bf:88:4d:00:3d:12:d1:96:72: f3:43:15:0e:15:d8:fc:c1:71:bf:e4:6b:45:98:a9: 9e:6e:c2:df:5d:7c:c7:15:9f:fd:e8:29:80:b2:2e: 5d:e5:b1:75:24:22:df:21:cb:b4:69:53:e2:f2:a7: 94:89:38:08:29:56:72:d9:13:4e:2f:2e:f7:85:d3: b1:22:51:00:71:c9:24:cd:25:bd:02:34:f2:0d:10: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:21:9D:7D:A2:5D:C8:A0:E9:50:F6:73:45:E8:28:82:BD:17:97:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b2a903-3c30-388d-99a6-6c3b023b66f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.163.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:61:65:64:f8:c3:48:b7:43:27:5a:5e:2f:d3:00:63:4f:53: a8:05:4a:80:30:0c:52:22:b9:c0:0c:54:fd:d2:8c:56:65:fa: c0:9d:10:7c:82:24:00:4d:24:ac:68:83:67:c8:4b:96:2a:5d: 69:73:ec:cd:f4:10:30:d8:f7:0d:e1:f0:eb:8e:72:7f:23:9c: 4f:14:6a:79:0b:fe:5b:93:c5:46:52:b6:9d:9f:f1:37:77:1e: cb:2c:c6:3f:b3:35:33:79:13:39:19:45:a5:17:71:c0:10:5a: 2b:74:bf:a5:3f:83:8d:5c:d3:be:ea:ad:6c:65:d5:ad:a9:8e: d0:96:ba:84:0c:aa:b5:76:01:96:08:f0:5a:34:c8:b3:a6:39: 6d:d5:08:3c:8c:ea:0b:a5:db:76:6c:de:53:40:93:95:32:1f: 13:d6:a5:66:3b:08:b2:86:64:3f:51:da:73:01:0e:7b:17:11: 53:3d:fb:c7:2f:dc:96:81:bf:88:b0:62:12:54:57:f1:3c:e0: 23:da:75:5d:3a:f5:72:92:d7:33:7a:a5:97:78:6a:13:ee:bb: 71:92:34:91:ff:16:da:c6:9e:58:cb:92:67:96:f2:76:2e:e0: 00:ea:2b:4e:54:e6:9c:82:b1:4d:6a:59:5a:30:80:25:99:7a: e2:67:37:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5gROJ5TF6MxE+fCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTIyMDYyNjEyMDAwMFoXDTI3MDYyNzA0MDAwMFowLzEtMCsGA1UEAxMk NzdlOWFhYzItM2I4My00YzVkLTg5M2MtOWJkYWE1MmVhYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYs7lPk0tNB9033RCW3WHfWwv37DX2odewNB Jcdc86YeEjH7t1V9LcFlcEEwTZ5rJeAs2HxTyEKW7MPkPBsZQ6Dsqe06tr1fPnpb yJhwcunxhorz6g29CPD+2wN5T3Sfc+Oe346KF+LD5yI6dDCVX6zqI9QawoN9M6ZR uGAUYzl3DjhIoAUOFsAyuK9dnN3QaoCm3XjXi9Fn2rCWcmq19hbv3Kg15k9+stC/ iE0APRLRlnLzQxUOFdj8wXG/5GtFmKmebsLfXXzHFZ/96CmAsi5d5bF1JCLfIcu0 aVPi8qeUiTgIKVZy2RNOLy73hdOxIlEAcckkzSW9AjTyDRBLbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwhnX2iXcig6VD2c0XoKIK9F5eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjNiMmE5MDMtM2MzMC0z ODhkLTk5YTYtNmMzYjAyM2I2NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5hZWT4w0i3QydaXi/TAGNPU6gFSoAwDFIiucAMVP3SjFZl+sCdEHyC JABNJKxog2fIS5YqXWlz7M30EDDY9w3h8OuOcn8jnE8UankL/luTxUZStp2f8Td3 Hsssxj+zNTN5EzkZRaUXccAQWit0v6U/g41c077qrWxl1a2pjtCWuoQMqrV2AZYI 8Fo0yLOmOW3VCDyM6gul23Zs3lNAk5UyHxPWpWY7CLKGZD9R2nMBDnsXEVM9+8cv 3JaBv4iwYhJUV/E84CPadV069XKS1zN6pZd4ahPuu3GSNJH/FtrGnljLkmeW8nYu 4ADqK05U5pyCsU1qWVowgCWZeuJnNzE= -----END CERTIFICATE-----Generated at Fri Mar 14 08:35:56 2025 by rpki-client