$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a688590b-5d34-3f55-890c-b6bfafaaa88a.roa File: a688590b-5d34-3f55-890c-b6bfafaaa88a.roa (raw, json) Hash identifier: x0CC+SmajYTGF6XUuvLF18jKz9FOZASigI75iMQ+uuo= Subject key identifier: 97:C8:45:AD:C5:D7:28:3F:DA:4D:DA:53:02:08:D3:69:94:48:63:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB18129C7FB2CBBE4E5D780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a688590b-5d34-3f55-890c-b6bfafaaa88a.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 98.181.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:81:29:c7:fb:2c:bb:e4:e5:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=8dee273d-f07b-4f2f-a1c1-8ce00ee484dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:38:93:15:6f:24:08:f8:da:92:f1:08:56: c0:aa:4e:bb:79:bd:45:d3:9a:02:1e:48:86:38:f1: 60:d3:da:bf:5a:00:48:2b:5c:9c:1e:a7:37:b1:14: 5d:e8:b2:76:e6:49:52:21:6d:6f:07:21:2a:a0:c9: 65:f6:24:ec:9d:f3:07:e0:11:c0:22:0c:6c:ac:14: 8b:52:26:b1:60:31:0e:a3:3a:85:6a:8f:1a:c8:b5: 33:3e:ec:41:81:f0:a9:49:77:d6:15:bc:c9:43:a0: 22:1c:f5:ee:62:c5:8e:cd:00:55:bd:a6:6d:04:1c: 6d:ea:ba:ed:06:08:2d:ca:04:9b:e8:ea:4e:bc:70: d8:c5:4a:50:58:74:09:ee:ed:10:b4:71:6a:88:2a: 5d:f3:d4:36:61:8c:a7:d7:21:64:03:53:a3:b3:8a: b0:bb:39:be:79:40:80:64:93:da:0e:55:c9:19:69: e2:4e:e4:0a:f6:f1:d8:a2:50:ff:a5:e6:ef:9b:e1: 68:f1:a0:fa:1b:e1:33:00:3a:31:c4:1f:2f:74:fe: a6:47:a1:56:25:ed:48:69:f1:7e:f2:11:59:17:62: 0f:0b:90:c9:96:58:29:b8:63:c6:c8:e3:86:23:de: c3:d6:8b:49:e1:72:1f:5b:54:dd:f5:61:f3:ed:03: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:45:AD:C5:D7:28:3F:DA:4D:DA:53:02:08:D3:69:94:48:63:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a688590b-5d34-3f55-890c-b6bfafaaa88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.181.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d5:40:2e:c9:e6:87:75:fb:3b:65:ed:f1:8f:8b:d3:fc:ca: 49:90:f9:46:f8:48:1f:60:83:47:4a:af:9a:03:8f:6b:da:8b: 08:75:4e:bd:c0:c5:95:34:3c:c4:b3:43:be:29:2b:74:ba:48: f3:f0:3a:fa:94:24:a0:a3:b4:e0:03:dd:0f:f0:3a:0b:8e:f8: 7c:30:f3:b3:f8:c6:26:9e:05:22:05:41:36:10:05:d2:ec:29: c0:a6:a4:f5:37:10:f2:b3:39:3e:63:72:06:e8:05:b0:4f:fd: b3:07:4c:01:b5:a9:13:e8:d9:e7:ab:bb:59:21:ed:3f:53:2b: 47:61:fe:72:6d:f4:db:11:a9:e6:55:c9:c1:bc:44:5a:0d:8f: 36:c7:76:c7:70:d5:f5:7a:1e:10:f1:06:ce:70:b2:47:8c:83: 01:85:34:b6:76:e1:76:18:a1:42:a2:e8:8e:49:ac:6c:d0:72: ec:50:90:5e:01:67:87:80:5c:a3:26:c9:9e:79:08:d8:b0:b4: e6:e6:4a:d7:a4:74:ca:54:02:35:98:7e:da:53:a5:7e:00:33: bf:2b:a0:b0:e3:b4:6b:16:2f:dd:dd:dd:b2:ab:2b:86:8a:c9: 92:8d:b7:d8:1c:76:d4:e6:6a:db:6a:93:57:50:91:ee:e2:16: e8:d4:ac:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsYEpx/ssu+Tl14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk OGRlZTI3M2QtZjA3Yi00ZjJmLWExYzEtOGNlMDBlZTQ4NGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WU4kxVvJAj42pLxCFbAqk67eb1F05oCHkiG OPFg09q/WgBIK1ycHqc3sRRd6LJ25klSIW1vByEqoMll9iTsnfMH4BHAIgxsrBSL UiaxYDEOozqFao8ayLUzPuxBgfCpSXfWFbzJQ6AiHPXuYsWOzQBVvaZtBBxt6rrt BggtygSb6OpOvHDYxUpQWHQJ7u0QtHFqiCpd89Q2YYyn1yFkA1Ojs4qwuzm+eUCA ZJPaDlXJGWniTuQK9vHYolD/pebvm+Fo8aD6G+EzADoxxB8vdP6mR6FWJe1IafF+ 8hFZF2IPC5DJllgpuGPGyOOGI97D1otJ4XIfW1Td9WHz7QPE9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfIRa3F1yg/2k3aUwII02mUSGPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY4ODU5MGItNWQzNC0z ZjU1LTg5MGMtYjZiZmFmYWFhODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvVQC7J5od1+ztl7fGPi9P8ykmQ+Ub4SB9gg0dKr5oDj2vaiwh1Tr3A xZU0PMSzQ74pK3S6SPPwOvqUJKCjtOAD3Q/wOguO+Hww87P4xiaeBSIFQTYQBdLs KcCmpPU3EPKzOT5jcgboBbBP/bMHTAG1qRPo2eeru1kh7T9TK0dh/nJt9NsRqeZV ycG8RFoNjzbHdsdw1fV6HhDxBs5wskeMgwGFNLZ24XYYoUKi6I5JrGzQcuxQkF4B Z4eAXKMmyZ55CNiwtObmStekdMpUAjWYftpTpX4AM78roLDjtGsWL93d3bKrK4aK yZKNt9gcdtTmattqk1dQke7iFujUrHI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:49 2025 by rpki-client