$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b23854-60ff-38d8-863a-5568ac03e88a.roa File: 29b23854-60ff-38d8-863a-5568ac03e88a.roa (raw, json) Hash identifier: 2+rgU/lNywymMiCAiHRzFhediT9E+Lntup0vb0wa8QA= Subject key identifier: E9:CB:33:5B:3B:8F:39:FA:5B:95:DD:6E:E6:94:40:C8:2D:27:B9:C3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328583DCBFC566FBD7A399DDF6A9640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b23854-60ff-38d8-863a-5568ac03e88a.roa Signing time: Wed 04 May 2022 12:00:00 +0000 ROA not before: Wed 04 May 2022 12:00:00 +0000 ROA not after: Wed 05 May 2027 04:00:00 +0000 asID: 22773 IP address blocks: 98.180.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:cb:fc:56:6f:bd:7a:39:9d:df:6a:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 4 12:00:00 2022 GMT Not After : May 5 04:00:00 2027 GMT Subject: CN=0af7245a-d8f9-4e40-b73f-4a88438dfa93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:e7:bc:14:71:4e:66:95:2c:07:a3:55:04: 7f:ae:3e:13:c6:3d:c2:f9:2e:36:77:81:10:ad:33: d7:03:4d:8e:a9:60:77:3e:37:39:3a:22:de:23:81: 4e:1a:a1:c7:73:53:80:27:42:28:ce:c1:ce:09:15: 7c:25:04:27:74:57:0a:d8:a9:03:69:e1:da:99:20: df:d3:8a:31:6b:ec:1b:45:59:0f:3e:73:e8:61:d3: e4:6a:8c:f6:70:dc:47:ef:4a:66:14:e2:44:78:b5: 99:d6:71:e5:06:01:29:bf:0a:40:fb:b6:07:94:57: 94:ef:dd:55:c1:69:d6:93:0a:a2:3a:5f:97:d0:41: b7:63:26:76:96:9d:d6:fa:bc:05:7f:ba:f4:71:2e: bc:ac:a6:07:02:9a:8f:b4:e3:9a:a3:d7:72:ac:df: f0:26:c9:13:8a:eb:7c:eb:e2:fc:e3:0a:fc:34:e7: 13:e7:89:4a:7f:10:c7:6b:02:21:f6:55:1d:6e:d6: 2f:35:bf:2c:c0:2a:e4:09:4d:b2:ce:33:6e:ec:ca: 0b:16:76:ec:af:41:e4:af:d9:be:f1:eb:bf:ba:e6: b8:80:2f:6d:79:5d:06:2f:6e:2d:84:17:ac:91:24: 5c:e5:ae:71:12:8c:ac:33:ed:79:b2:ae:c5:a1:65: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CB:33:5B:3B:8F:39:FA:5B:95:DD:6E:E6:94:40:C8:2D:27:B9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b23854-60ff-38d8-863a-5568ac03e88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.180.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9b:b2:72:9c:14:d3:f7:12:6c:7b:9e:29:a2:f4:9c:c8:a8: cb:7d:1f:da:e1:64:1c:a4:ff:e2:84:29:c8:b1:28:0b:23:d9: 5c:0f:1a:43:85:41:8f:f8:f9:50:62:92:70:b3:08:bb:8b:b1: 81:e3:fb:aa:35:87:89:f4:90:6d:4d:34:4f:52:72:89:5f:4a: 97:27:fd:7b:61:4e:5c:e1:f4:58:27:21:c0:e2:c5:bc:d8:c8: 5f:6d:0a:9e:11:a7:c4:99:42:3a:0f:0e:13:6b:eb:c8:4b:01: b0:81:a6:ba:68:37:6d:ed:17:e5:a3:b3:d1:7b:f9:4b:a8:e8: 98:a9:a3:ed:c8:5d:b3:60:32:0c:06:dc:36:20:50:f6:9f:b6: 7a:48:57:44:16:d3:54:76:ba:28:bd:e9:1d:16:f3:e6:88:dd: 4e:e8:fe:3d:ef:8a:d9:0b:45:15:6d:5a:ed:c2:d4:0c:16:65: 73:19:c2:a3:13:76:c1:47:1c:13:b3:a6:9a:a1:2d:5f:63:aa: 04:20:48:b1:6a:6e:c7:b4:5a:84:31:a3:0e:db:9e:67:31:72: 04:1c:23:8e:f1:ce:70:6d:88:d0:3b:68:0b:a4:64:ff:68:05: ae:6a:fa:ed:fa:d1:2c:49:80:2f:eb:d7:13:37:0e:26:4a:88: 54:24:04:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3L/FZvvXo5nd9qlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTIyMDUwNDEyMDAwMFoXDTI3MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk MGFmNzI0NWEtZDhmOS00ZTQwLWI3M2YtNGE4ODQzOGRmYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoornvBRxTmaVLAejVQR/rj4Txj3C+S42d4EQ rTPXA02OqWB3Pjc5OiLeI4FOGqHHc1OAJ0IozsHOCRV8JQQndFcK2KkDaeHamSDf 04oxa+wbRVkPPnPoYdPkaoz2cNxH70pmFOJEeLWZ1nHlBgEpvwpA+7YHlFeU791V wWnWkwqiOl+X0EG3YyZ2lp3W+rwFf7r0cS68rKYHApqPtOOao9dyrN/wJskTiut8 6+L84wr8NOcT54lKfxDHawIh9lUdbtYvNb8swCrkCU2yzjNu7MoLFnbsr0Hkr9m+ 8eu/uua4gC9teV0GL24thBeskSRc5a5xEoysM+15sq7FoWX6zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnLM1s7jzn6W5XdbuaUQMgtJ7nDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjliMjM4NTQtNjBmZi0z OGQ4LTg2M2EtNTU2OGFjMDNlODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrTyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAObsnKcFNP3Emx7nimi9JzIqMt9H9rhZByk/+KEKcixKAsj2VwPGkOF QY/4+VBiknCzCLuLsYHj+6o1h4n0kG1NNE9ScolfSpcn/XthTlzh9FgnIcDixbzY yF9tCp4Rp8SZQjoPDhNr68hLAbCBprpoN23tF+Wjs9F7+Uuo6Jipo+3IXbNgMgwG 3DYgUPaftnpIV0QW01R2uii96R0W8+aI3U7o/j3vitkLRRVtWu3C1AwWZXMZwqMT dsFHHBOzppqhLV9jqgQgSLFqbse0WoQxow7bnmcxcgQcI47xznBtiNA7aAukZP9o Ba5q+u360SxJgC/r1xM3DiZKiFQkBFc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:47 2025 by rpki-client