$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40167855-b5cd-3d04-a08f-b71542d676f0.roa File: 40167855-b5cd-3d04-a08f-b71542d676f0.roa (raw, json) Hash identifier: vdknw+/KYIue64WW0NoDo3DU5+EKA8RMYgXtW16qU0w= Subject key identifier: B8:12:EB:FC:FF:1E:64:37:38:26:DC:64:01:C9:7A:B1:55:33:8B:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858482D5A9D48B13A2EC30CC6FB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40167855-b5cd-3d04-a08f-b71542d676f0.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 22773 IP address blocks: 98.161.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:9d:48:b1:3a:2e:c3:0c:c6:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=02742ec8-648d-4557-8e89-b7204d0ac09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3b:93:85:97:fc:56:69:85:2c:e5:0c:04:4f: 68:7a:7f:9a:0b:ea:3d:34:04:39:65:c2:2b:59:36: f4:40:b6:58:bc:61:79:19:f1:94:ae:04:b6:84:4d: cf:fc:c9:45:65:3c:cf:c9:a7:86:55:44:e2:fa:46: c5:49:d5:86:af:00:30:a0:0e:31:4a:2b:20:1c:71: 96:c3:cd:91:90:5f:1a:e9:11:cf:55:8d:5d:00:71: 4d:e2:7f:71:74:50:7b:8c:c8:80:e3:f1:54:6b:75: 04:78:e4:5b:fb:d2:26:fa:f0:d0:d2:ee:2a:28:77: 29:69:97:39:5e:d5:06:d0:55:8f:86:7b:34:66:9f: 2d:80:7f:84:8e:54:c0:d5:67:b9:cf:85:b8:34:5b: d5:86:0a:bd:87:ff:42:e2:3f:23:32:86:dc:91:b3: 8d:c2:83:3a:48:71:c0:8e:e2:b9:60:ed:95:64:d8: 97:62:ba:ea:39:70:bf:68:b4:5d:de:21:31:45:c7: 8f:08:ff:2f:01:0a:04:9c:1e:18:f6:03:2a:ff:45: bb:4f:07:83:3b:0b:69:4c:85:83:4a:f7:70:11:a8: 14:ac:10:28:ad:a2:cd:f1:27:46:15:d1:54:22:7e: 61:1b:34:d0:69:8b:47:21:5d:6c:c0:6b:10:59:3a: 8d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:12:EB:FC:FF:1E:64:37:38:26:DC:64:01:C9:7A:B1:55:33:8B:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40167855-b5cd-3d04-a08f-b71542d676f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2b:17:2f:17:29:8c:28:e7:9a:fe:e6:4d:1f:5f:03:aa:7c: 57:6c:86:34:d3:a6:cd:d2:a1:44:34:62:b4:ae:dc:a1:25:3e: 75:90:0e:45:51:9e:c2:00:aa:9a:ea:33:31:d6:f0:e0:34:b6: 8c:68:fd:eb:b2:d9:10:03:6f:e2:de:aa:a2:86:97:55:86:89: 48:d6:21:fe:91:b9:ad:50:54:bf:33:4b:9b:d7:af:0e:53:8b: fd:66:ea:f2:ab:3a:8a:22:74:64:66:da:41:ec:b5:ad:03:88: 77:3f:76:7c:43:3f:e8:a0:2e:85:10:1f:22:2f:0f:b2:33:14: c6:ac:56:54:e7:ef:d2:1a:6f:c0:ae:81:fa:df:74:50:3f:ff: b2:ac:d4:f7:91:56:08:0c:32:34:23:76:05:f4:ae:40:99:01: f2:c6:33:44:80:0f:22:fc:4b:32:8f:73:57:11:62:9e:49:a2: 6b:5e:91:75:f7:e4:dd:d1:79:af:9d:e7:56:53:9e:45:61:11: f7:bf:b5:2b:61:31:e3:2a:80:40:49:c2:fd:ab:38:27:b5:18: db:6f:04:fe:b2:a7:2d:40:f8:12:81:fd:4d:2c:a8:33:f4:a7: 87:8a:06:5a:5a:64:3a:30:4e:1f:c8:ff:10:23:e7:b8:b1:84: 9f:c6:10:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWp1IsTouwwzG+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk MDI3NDJlYzgtNjQ4ZC00NTU3LThlODktYjcyMDRkMGFjMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjuThZf8VmmFLOUMBE9oen+aC+o9NAQ5ZcIr WTb0QLZYvGF5GfGUrgS2hE3P/MlFZTzPyaeGVUTi+kbFSdWGrwAwoA4xSisgHHGW w82RkF8a6RHPVY1dAHFN4n9xdFB7jMiA4/FUa3UEeORb+9Im+vDQ0u4qKHcpaZc5 XtUG0FWPhns0Zp8tgH+EjlTA1We5z4W4NFvVhgq9h/9C4j8jMobckbONwoM6SHHA juK5YO2VZNiXYrrqOXC/aLRd3iExRcePCP8vAQoEnB4Y9gMq/0W7TweDOwtpTIWD SvdwEagUrBAoraLN8SdGFdFUIn5hGzTQaYtHIV1swGsQWTqNFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgS6/z/HmQ3OCbcZAHJerFVM4ssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDAxNjc4NTUtYjVjZC0z ZDA0LWEwOGYtYjcxNTQyZDY3NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0rFy8XKYwo55r+5k0fXwOqfFdshjTTps3SoUQ0YrSu3KElPnWQDkVR nsIAqprqMzHW8OA0toxo/euy2RADb+LeqqKGl1WGiUjWIf6Rua1QVL8zS5vXrw5T i/1m6vKrOooidGRm2kHsta0DiHc/dnxDP+igLoUQHyIvD7IzFMasVlTn79Iab8Cu gfrfdFA//7Ks1PeRVggMMjQjdgX0rkCZAfLGM0SADyL8SzKPc1cRYp5JomtekXX3 5N3Rea+d51ZTnkVhEfe/tSthMeMqgEBJwv2rOCe1GNtvBP6ypy1A+BKB/U0sqDP0 p4eKBlpaZDowTh/I/xAj57ixhJ/GEGI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:15 2025 by rpki-client