$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa File: 8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa (raw, json) Hash identifier: 6CMMDV89SjpxhP5KglXkFsUGl41vzC/z0EsEU/wmxfE= Subject key identifier: 0C:A9:C0:4A:10:76:D0:9E:78:24:77:D1:3B:60:84:C1:36:CF:91:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858482D5A9CFBB20A0AE814CAA880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 22773 IP address blocks: 98.161.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:9c:fb:b2:0a:0a:e8:14:ca:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=278235e9-3eee-43cc-a58f-d574b55b32b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:13:8c:c4:67:ed:6c:dc:4a:45:59:a6:81: a3:54:ce:57:4d:31:bf:8d:dc:95:cf:f5:d3:6b:c5: 4b:48:f8:ac:3a:b7:ef:45:22:5a:13:6b:20:d8:f0: e1:21:a7:f9:8c:c6:08:2d:c0:63:47:2f:48:6c:3d: 1b:98:03:9a:72:b2:05:df:c9:cd:ef:53:f1:52:b2: f5:1d:6c:dd:3e:17:02:6a:f9:ac:82:26:c7:3f:c9: cd:03:58:f8:83:59:12:6b:1f:9a:39:56:6f:cd:1d: 0c:3b:df:e8:f6:e5:43:bf:32:ef:ed:53:90:5c:4c: 7e:b3:b1:e8:e6:15:a3:29:d4:ee:c3:0d:89:04:30: 7d:f7:11:b0:cf:5b:f4:f2:52:31:40:1e:29:ea:4c: 99:2e:f7:81:ea:85:8a:d0:3e:82:6c:20:62:d3:1f: ec:24:df:95:f4:d4:03:4b:83:f7:c8:b5:fe:8b:0f: 56:17:43:c2:dc:32:83:e1:bd:a0:3b:24:67:cd:19: a9:6e:db:01:f8:31:fb:f1:63:2d:80:e2:5b:ed:2b: c9:3a:58:d7:f2:c3:83:1c:14:36:3c:34:8b:61:33: 05:4a:83:16:84:68:45:aa:77:43:e1:62:32:e0:dc: 22:38:7b:f3:ec:58:74:50:3b:d3:be:9d:dc:87:5e: f3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A9:C0:4A:10:76:D0:9E:78:24:77:D1:3B:60:84:C1:36:CF:91:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:9a:a2:7a:35:4c:b0:bf:67:c1:70:f0:18:cc:e4:e7:75:d5: 62:9a:7c:c1:79:d1:d5:55:d8:04:fc:73:81:e0:f3:ad:a4:60: af:0b:18:4c:c4:6d:b4:ea:65:61:9e:a7:ae:91:bd:7e:ba:96: c3:5a:70:39:a5:de:a7:f3:b7:95:92:af:64:c2:82:74:61:40: e4:ec:58:42:ea:80:39:6a:3e:e7:37:a5:58:17:0d:de:bd:3f: 85:0b:8d:4c:1a:b3:1a:27:ad:c4:64:45:bc:f3:00:4b:a2:d7: 7b:07:05:50:a0:01:33:2b:e6:c4:e5:fc:71:78:a9:56:b8:df: 3f:45:1c:51:50:58:cc:1f:80:4c:18:ac:22:19:83:fc:cf:4a: 34:9d:1a:bf:98:ae:8a:32:e4:46:ed:0c:92:24:9f:c3:f4:79: 51:1e:bd:d8:77:21:39:d5:60:ba:49:62:29:ec:ed:ae:1f:d8: b4:40:d5:a3:fb:c3:2d:04:e5:68:fc:c4:89:fa:ce:d8:db:8a: fa:9c:c0:55:cd:0f:fb:c6:69:a2:d8:e0:1d:ee:c6:5f:d7:e0: 31:49:07:6e:35:5d:8a:61:96:7c:98:3c:b5:14:2b:3a:b4:68: 46:8a:2b:16:c2:cc:3d:eb:53:ac:11:39:b0:f3:4f:5b:e8:df: 2f:67:7f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWpz7sgoK6BTKqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk Mjc4MjM1ZTktM2VlZS00M2NjLWE1OGYtZDU3NGI1NWIzMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnQTjMRn7WzcSkVZpoGjVM5XTTG/jdyVz/XT a8VLSPisOrfvRSJaE2sg2PDhIaf5jMYILcBjRy9IbD0bmAOacrIF38nN71PxUrL1 HWzdPhcCavmsgibHP8nNA1j4g1kSax+aOVZvzR0MO9/o9uVDvzLv7VOQXEx+s7Ho 5hWjKdTuww2JBDB99xGwz1v08lIxQB4p6kyZLveB6oWK0D6CbCBi0x/sJN+V9NQD S4P3yLX+iw9WF0PC3DKD4b2gOyRnzRmpbtsB+DH78WMtgOJb7SvJOljX8sODHBQ2 PDSLYTMFSoMWhGhFqndD4WIy4NwiOHvz7Fh0UDvTvp3ch17zHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAypwEoQdtCeeCR30TtghME2z5GTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGE4MjE5Y2EtNjc2Ni0z ZDEyLTljYzAtMWQyMTdiZDNiNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeaono1TLC/Z8Fw8BjM5Od11WKafMF50dVV2AT8c4Hg862kYK8LGEzE bbTqZWGep66RvX66lsNacDml3qfzt5WSr2TCgnRhQOTsWELqgDlqPuc3pVgXDd69 P4ULjUwasxonrcRkRbzzAEui13sHBVCgATMr5sTl/HF4qVa43z9FHFFQWMwfgEwY rCIZg/zPSjSdGr+Yrooy5EbtDJIkn8P0eVEevdh3ITnVYLpJYins7a4f2LRA1aP7 wy0E5Wj8xIn6ztjbivqcwFXND/vGaaLY4B3uxl/X4DFJB241XYphlnyYPLUUKzq0 aEaKKxbCzD3rU6wRObDzT1vo3y9nfyE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:53 2025 by rpki-client