$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa File: 98581b07-31ae-380b-9152-29fa36e9ac7c.roa (raw, json) Hash identifier: Si+iWPCe3mFwTZY309kx7NK3a/su9xCbJdMSTe3EdU0= Subject key identifier: 59:82:50:71:87:B3:37:9B:4C:18:1B:76:D9:F2:B8:23:ED:EC:9F:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858482D5A9C8B82C80BEEFD083300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 22773 IP address blocks: 72.219.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:9c:8b:82:c8:0b:ee:fd:08:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=1d5a0f45-bca9-40df-ae4f-11640844c596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:fa:f3:e4:22:50:c5:fb:fc:1e:bd:0d:17: 34:4e:2f:e9:89:76:58:11:d9:87:21:b0:ac:ab:c1: 10:e1:1b:39:bb:6a:d9:b7:61:35:e4:21:c7:08:bc: c1:09:31:e8:87:30:ac:fa:12:f5:ee:de:f4:74:3e: 7a:68:c4:a9:ed:f5:25:c1:8e:4e:59:cf:14:80:af: 2a:f3:77:2c:b5:b8:ba:84:a7:4f:65:cc:2a:1a:e6: 53:1a:fc:7a:0f:05:d9:fa:39:14:d6:dd:bc:6f:24: 61:aa:46:69:fc:d8:69:b5:63:f7:d1:d4:01:b1:5c: 89:6b:6b:35:92:e0:77:86:29:29:cc:cc:4c:e2:d6: 83:6a:3d:00:d3:ef:c9:65:1f:3d:8b:f7:54:18:69: 88:4e:bc:8b:14:db:30:49:eb:f3:4d:45:95:db:46: ea:84:b0:15:d1:71:08:0e:d7:ae:1b:8b:e7:66:4f: f7:d7:43:29:5d:ee:26:56:81:7a:1e:4b:40:e1:14: 3e:1a:16:9e:e5:27:35:da:95:cc:46:99:e4:2d:29: 88:49:b4:f3:0e:28:27:12:b9:20:7d:92:51:8c:b4: da:84:1c:15:b0:59:27:82:74:d7:bd:f0:67:5c:6e: 84:e0:d6:96:cd:5b:3e:e6:6f:ff:21:1c:69:c6:09: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:82:50:71:87:B3:37:9B:4C:18:1B:76:D9:F2:B8:23:ED:EC:9F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98581b07-31ae-380b-9152-29fa36e9ac7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:27:70:2b:9f:fe:79:b0:3d:1c:be:d7:44:da:3c:87:92:ad: 89:7d:56:d6:d9:99:bc:33:2e:7e:3d:15:f9:0a:0f:71:a3:05: 46:ab:36:c9:29:3a:fc:66:c7:a3:8f:79:58:76:25:f8:59:f3: 48:2d:8b:06:bb:26:a3:52:83:71:13:69:79:ee:7a:32:3c:b7: 13:5a:c5:ac:b7:72:2b:bd:fe:02:75:ad:02:d7:ed:db:61:de: b4:4c:82:b6:79:66:17:2c:9b:d4:e9:8d:b6:a8:6c:f2:06:23: 17:85:34:8a:c5:b0:e9:d6:34:36:0b:c0:b9:7c:60:39:0b:f8: b6:c1:7d:e9:eb:5e:a0:84:aa:2d:97:b2:73:31:e7:ce:9a:22: 1a:a4:e7:26:b7:cf:0b:0b:cb:fd:cb:06:14:f8:b9:e9:d1:f6: 19:51:67:10:06:08:81:b4:1d:ed:28:5f:75:ec:87:15:77:59: 41:47:98:6b:1b:14:f0:53:6b:ef:39:9d:7e:51:9a:69:76:67: 62:66:43:15:1e:f8:ba:f7:81:6c:8e:3e:b9:f4:17:d0:59:ca: c5:8d:f6:2a:1d:92:f1:2b:f4:f3:d7:0a:9c:5f:9d:9f:2c:dc: 00:9f:28:e3:5e:7c:7f:70:40:f1:1b:78:05:83:a9:e8:28:a7: 3b:c7:84:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWpyLgsgL7v0IMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk MWQ1YTBmNDUtYmNhOS00MGRmLWFlNGYtMTE2NDA4NDRjNTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaj68+QiUMX7/B69DRc0Ti/piXZYEdmHIbCs q8EQ4Rs5u2rZt2E15CHHCLzBCTHohzCs+hL17t70dD56aMSp7fUlwY5OWc8UgK8q 83cstbi6hKdPZcwqGuZTGvx6DwXZ+jkU1t28byRhqkZp/NhptWP30dQBsVyJa2s1 kuB3hikpzMxM4taDaj0A0+/JZR89i/dUGGmITryLFNswSevzTUWV20bqhLAV0XEI DteuG4vnZk/310MpXe4mVoF6HktA4RQ+Ghae5Sc12pXMRpnkLSmISbTzDignErkg fZJRjLTahBwVsFkngnTXvfBnXG6E4NaWzVs+5m//IRxpxgnjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmCUHGHszebTBgbdtnyuCPt7J8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTg1ODFiMDctMzFhZS0z ODBiLTkxNTItMjlmYTM2ZTlhYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcncCuf/nmwPRy+10TaPIeSrYl9VtbZmbwzLn49FfkKD3GjBUarNskp Ovxmx6OPeVh2JfhZ80gtiwa7JqNSg3ETaXnuejI8txNaxay3ciu9/gJ1rQLX7dth 3rRMgrZ5Zhcsm9TpjbaobPIGIxeFNIrFsOnWNDYLwLl8YDkL+LbBfenrXqCEqi2X snMx586aIhqk5ya3zwsLy/3LBhT4uenR9hlRZxAGCIG0He0oX3XshxV3WUFHmGsb FPBTa+85nX5Rmml2Z2JmQxUe+Lr3gWyOPrn0F9BZysWN9iodkvEr9PPXCpxfnZ8s 3ACfKONefH9wQPEbeAWDqegopzvHhDs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:15 2025 by rpki-client