$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aa5ca33-4a5b-3780-b1c0-f3cfb2f5ec6e.roa File: 9aa5ca33-4a5b-3780-b1c0-f3cfb2f5ec6e.roa (raw, json) Hash identifier: PX55cNduPHHgCrXeedcPwhjZkF7Uuvc1xQSdyj+bnXI= Subject key identifier: 72:89:DE:3C:F8:B6:51:11:7B:7D:0E:38:53:05:23:53:D9:B5:D7:05 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB17A160E82359A5C3A25C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aa5ca33-4a5b-3780-b1c0-f3cfb2f5ec6e.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 63484 IP address blocks: 98.173.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:7a:16:0e:82:35:9a:5c:3a:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=7961ae77-fedc-491f-9527-1faac0d65e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:7f:c7:3f:e3:dc:97:4e:f5:55:cd:34:7f: ab:2c:d2:77:62:94:77:76:7a:48:58:10:58:b5:a2: 3a:eb:ea:ea:f4:2f:22:20:81:0b:27:cc:3a:54:98: ac:f4:ec:a1:d8:c2:da:da:35:93:88:c3:93:a5:65: af:0b:a6:5a:43:d1:b0:37:ab:06:b3:36:f3:e4:5a: 98:53:23:7a:dd:8c:2e:29:4b:8c:5f:c7:2d:6c:90: e0:af:5b:4a:88:f9:1b:83:90:9b:0d:b7:61:7a:3c: 8b:8b:d1:9f:94:63:bd:eb:c3:2e:90:f3:68:fb:97: 8d:be:08:55:93:83:12:89:6f:00:79:6a:25:ed:18: 5e:23:ff:8e:7a:09:d2:7a:d6:65:b8:ba:35:82:fd: 65:22:39:95:07:be:29:34:69:38:f2:d6:af:82:84: ef:f6:36:da:3a:d3:4e:12:eb:e1:f9:14:80:94:2c: 82:ec:fc:97:37:6f:09:1b:53:f1:fd:d8:f3:cb:bb: b5:9f:62:58:3f:02:20:df:be:5e:b6:1b:60:44:40: e9:ff:c9:0e:d1:cc:95:bc:c6:21:dd:c5:5e:e7:eb: 53:30:db:d5:af:f1:be:55:1a:6f:a1:9a:fc:66:6e: 75:e4:b9:2e:41:0c:07:69:88:2d:57:21:1f:e0:46: 49:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:89:DE:3C:F8:B6:51:11:7B:7D:0E:38:53:05:23:53:D9:B5:D7:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aa5ca33-4a5b-3780-b1c0-f3cfb2f5ec6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.173.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:49:83:db:3c:a1:8c:fe:93:28:fd:94:ac:55:c8:84:86:35: 94:f7:d9:74:97:59:a9:a7:10:08:58:9e:1c:9b:a3:cb:c5:c1: d8:29:69:bf:3f:b4:32:d0:e3:10:97:90:c2:f3:5f:c8:78:b6: f1:b1:c9:ac:62:d0:2e:b2:54:0b:fe:79:9c:75:52:4d:c5:bb: 2c:ef:4f:d8:2f:a1:c8:a4:fd:2e:33:db:1d:4a:98:09:f3:47: 26:47:40:9a:40:6f:4f:40:4a:90:54:6c:b9:3e:5f:21:5f:f0: 3d:ce:06:90:9e:cb:fe:db:31:28:60:fe:62:ea:be:5e:f7:7e: 6c:f8:12:ab:21:00:20:97:c7:fa:c2:38:65:89:e0:1e:32:8d: dc:0e:e9:ca:ca:3f:4c:03:f6:cc:a2:1a:5a:49:d4:db:c2:24: 94:9e:65:c2:63:73:f2:0f:65:03:2f:7b:f4:a2:b4:24:50:dc: 94:da:c9:9a:42:dc:9e:e1:d7:9e:3f:99:c1:d7:3e:3e:5a:05: 3f:e4:6c:bb:30:68:b8:a1:07:39:4c:d1:5c:4b:7c:d5:b4:0d: e4:47:08:90:81:4e:dd:b8:32:e5:cf:a9:fe:0d:b4:bf:ab:96: 6f:64:df:68:44:7e:53:7c:bb:c9:88:76:16:01:30:8e:08:5b: 91:11:bd:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXoWDoI1mlw6JcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk Nzk2MWFlNzctZmVkYy00OTFmLTk1MjctMWZhYWMwZDY1ZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKp/xz/j3JdO9VXNNH+rLNJ3YpR3dnpIWBBY taI66+rq9C8iIIELJ8w6VJis9Oyh2MLa2jWTiMOTpWWvC6ZaQ9GwN6sGszbz5FqY UyN63YwuKUuMX8ctbJDgr1tKiPkbg5CbDbdhejyLi9GflGO968MukPNo+5eNvghV k4MSiW8AeWol7RheI/+OegnSetZluLo1gv1lIjmVB74pNGk48tavgoTv9jbaOtNO Euvh+RSAlCyC7PyXN28JG1Px/djzy7u1n2JYPwIg375ethtgREDp/8kO0cyVvMYh 3cVe5+tTMNvVr/G+VRpvoZr8Zm515LkuQQwHaYgtVyEf4EZJGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKJ3jz4tlERe30OOFMFI1PZtdcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWFhNWNhMzMtNGE1Yi0z NzgwLWIxYzAtZjNjZmIyZjVlYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYq21MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRJg9s8oYz+kyj9lKxVyISGNZT32XSXWamnEAhYnhybo8vFwdgpab8/ tDLQ4xCXkMLzX8h4tvGxyaxi0C6yVAv+eZx1Uk3FuyzvT9gvocik/S4z2x1KmAnz RyZHQJpAb09ASpBUbLk+XyFf8D3OBpCey/7bMShg/mLqvl73fmz4EqshACCXx/rC OGWJ4B4yjdwO6crKP0wD9syiGlpJ1NvCJJSeZcJjc/IPZQMve/SitCRQ3JTayZpC 3J7h154/mcHXPj5aBT/kbLswaLihBzlM0VxLfNW0DeRHCJCBTt24MuXPqf4NtL+r lm9k32hEflN8u8mIdhYBMI4IW5ERvVM= -----END CERTIFICATE-----Generated at Sun Apr 6 16:00:14 2025 by rpki-client