$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47992eb3-52c3-3c12-8077-ab4acb37d9f9.roa File: 47992eb3-52c3-3c12-8077-ab4acb37d9f9.roa (raw, json) Hash identifier: yrkrOJhSpRT4CwX7kWSi1NupLMb9COeoK799kE0gdvc= Subject key identifier: EE:D6:D4:00:A8:40:F2:D6:1C:EB:71:32:2F:F0:82:B8:40:3D:BD:FD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849244E72475E29587F10A45780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47992eb3-52c3-3c12-8077-ab4acb37d9f9.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 22773 IP address blocks: 98.163.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:72:47:5e:29:58:7f:10:a4:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=c8a2ca4a-7eea-4e10-ae49-6f386d2f1a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:19:36:66:d1:58:23:f9:9f:cb:d9:59:72: 59:c6:b0:c2:57:a5:dc:6a:f7:ad:1f:2d:b9:21:b9: e9:c8:56:3d:77:98:e9:2a:f8:f9:60:fe:f9:d5:a9: 1b:a5:3e:7b:99:c6:72:13:2b:eb:0a:70:73:3e:8d: 73:50:5e:c6:e6:6a:16:7c:1e:fc:14:db:e8:cb:af: be:4a:d9:8a:10:19:ae:d0:67:87:bf:ca:b2:a9:02: 0f:e8:16:f3:d9:6b:85:3f:00:1f:d4:49:d9:49:8c: a6:48:f0:e3:2b:ed:c5:54:66:ff:2e:30:9c:cf:04: cb:e7:fa:9c:34:8b:81:40:5c:8b:80:9d:ea:5b:e1: 3b:82:f9:51:4c:0c:94:ca:34:28:d9:b9:ca:a4:bf: ca:8f:8e:51:91:84:ca:31:73:99:c4:28:10:1f:95: ea:22:c8:7c:97:ed:85:00:e9:67:b9:36:8a:24:0c: c7:8c:06:38:9b:f6:b4:f4:da:7a:97:a5:67:e8:5c: af:11:70:69:60:73:f2:c2:9f:e8:01:b5:a0:d7:32: f1:fe:f2:f8:0f:bf:6e:8d:fc:b9:6d:7b:17:97:b5: c0:d8:c4:3c:93:eb:7b:5c:45:9d:78:73:19:b8:9d: 86:d9:c0:bf:98:f3:a8:9e:8e:40:b9:73:06:93:57: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D6:D4:00:A8:40:F2:D6:1C:EB:71:32:2F:F0:82:B8:40:3D:BD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47992eb3-52c3-3c12-8077-ab4acb37d9f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.163.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:52:a7:2e:2a:d8:33:5f:de:23:18:8b:4e:0d:b5:36:7b:d6: 4c:55:c6:c7:70:32:cd:d3:be:67:67:db:48:cd:4f:28:f9:bb: 0d:a5:75:5c:11:f5:f7:6a:8d:d7:0c:2b:88:a0:00:e1:7d:a2: 7b:89:c7:47:9b:e0:86:e3:8a:68:ef:fb:d6:53:7a:d3:be:eb: 3a:7c:26:81:24:8b:55:bb:37:48:fc:f7:69:0e:d3:d3:e9:86: 73:5c:2b:a6:59:3d:a7:3f:5b:41:2c:29:aa:5e:5e:82:72:ab: 09:9e:ff:b5:ce:4e:62:53:86:99:25:47:2a:76:24:4f:bd:13: e6:ac:74:28:b0:16:33:f1:de:fd:51:38:30:42:8a:ef:d4:02: dd:9b:83:af:28:58:db:e3:23:13:96:f6:0d:8d:f4:16:6e:cd: 0c:8c:f3:5a:a1:f7:72:56:d8:7c:58:21:93:ee:85:6c:07:af: 5f:4d:8a:96:00:6f:3d:72:ca:e1:6d:0b:07:6e:4f:b0:7a:8e: b5:a8:be:a8:cd:83:09:b5:dd:9e:2a:7c:ba:af:aa:94:0e:29: 02:65:b2:7c:b2:e1:d0:7f:4b:17:43:14:c8:9e:89:a5:b4:da: 75:cb:a7:89:cb:1c:73:31:ab:a2:9e:df:4d:0b:12:30:4e:1f: 8b:7e:50:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnJHXilYfxCkV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YzhhMmNhNGEtN2VlYS00ZTEwLWFlNDktNmYzODZkMmYxYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIEZNmbRWCP5n8vZWXJZxrDCV6XcavetHy25 IbnpyFY9d5jpKvj5YP751akbpT57mcZyEyvrCnBzPo1zUF7G5moWfB78FNvoy6++ StmKEBmu0GeHv8qyqQIP6Bbz2WuFPwAf1EnZSYymSPDjK+3FVGb/LjCczwTL5/qc NIuBQFyLgJ3qW+E7gvlRTAyUyjQo2bnKpL/Kj45RkYTKMXOZxCgQH5XqIsh8l+2F AOlnuTaKJAzHjAY4m/a09Np6l6Vn6FyvEXBpYHPywp/oAbWg1zLx/vL4D79ujfy5 bXsXl7XA2MQ8k+t7XEWdeHMZuJ2G2cC/mPOono5AuXMGk1e1TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7W1ACoQPLWHOtxMi/wgrhAPb39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDc5OTJlYjMtNTJjMy0z YzEyLTgwNzctYWI0YWNiMzdkOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZSpy4q2DNf3iMYi04NtTZ71kxVxsdwMs3Tvmdn20jNTyj5uw2ldVwR 9fdqjdcMK4igAOF9onuJx0eb4Ibjimjv+9ZTetO+6zp8JoEki1W7N0j892kO09Pp hnNcK6ZZPac/W0EsKapeXoJyqwme/7XOTmJThpklRyp2JE+9E+asdCiwFjPx3v1R ODBCiu/UAt2bg68oWNvjIxOW9g2N9BZuzQyM81qh93JW2HxYIZPuhWwHr19NipYA bz1yyuFtCwduT7B6jrWovqjNgwm13Z4qfLqvqpQOKQJlsnyy4dB/SxdDFMieiaW0 2nXLp4nLHHMxq6Ke300LEjBOH4t+UC8= -----END CERTIFICATE-----Generated at Sun Apr 6 15:59:50 2025 by rpki-client