$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac751bfc-e13d-329e-a7a9-fc89d4b40f4e.roa File: ac751bfc-e13d-329e-a7a9-fc89d4b40f4e.roa (raw, json) Hash identifier: U1CJPyPe3ZLcqsXE/uMBw9qnv96o0uDFdfEkWChHt18= Subject key identifier: 1D:68:F6:C3:E0:88:1D:06:4B:32:11:CE:C1:CE:BC:33:44:6F:C3:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858482D5A9FFE9A1440DCB22F1C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac751bfc-e13d-329e-a7a9-fc89d4b40f4e.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 22773 IP address blocks: 184.191.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:9f:fe:9a:14:40:dc:b2:2f:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=4c74b72a-a7b0-474f-9e11-01c4783f7b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7f:60:c4:b6:3e:04:6f:b6:41:e0:c5:d5:44: a4:c1:69:87:d0:38:31:19:86:8f:38:c4:4b:ab:7f: 2f:b0:14:37:83:4e:19:69:44:a8:ea:09:6d:2f:b2: b0:01:0e:16:d2:74:b0:02:27:47:db:30:ca:f1:ca: b3:cb:04:2b:2b:8a:f6:05:68:98:51:6c:61:dd:5c: cc:b1:af:bb:60:d1:06:c8:57:24:3f:d9:53:99:d4: 46:74:78:5f:f9:e0:e4:6d:a4:e5:43:b7:20:ed:20: 3e:9a:b6:35:7f:96:00:90:b9:30:4e:55:44:98:61: d2:69:4e:49:55:24:7c:69:61:b5:85:0f:9a:3c:94: 1b:8c:10:60:a9:4f:20:0e:9e:83:bb:24:07:30:69: 77:9d:6a:61:7c:9a:40:f3:af:6f:9a:89:8b:fa:6c: bb:6b:33:05:06:bd:7a:35:f8:cc:cf:8e:ab:a3:ce: 3c:ed:54:21:65:79:99:4c:d8:ab:67:b0:8d:b9:ee: 1a:2e:71:9c:91:c9:fc:87:12:65:8e:48:31:5c:21: 1d:19:44:cc:c0:93:e9:fc:6a:ca:7d:9f:dc:b2:15: cc:36:1c:28:3a:5b:30:ed:70:81:10:e6:4f:19:28: 81:d0:8a:08:78:8e:c7:33:58:a9:43:11:da:0e:11: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:68:F6:C3:E0:88:1D:06:4B:32:11:CE:C1:CE:BC:33:44:6F:C3:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac751bfc-e13d-329e-a7a9-fc89d4b40f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 184.191.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e9:ef:44:6d:dc:bc:fc:2d:ea:58:a5:d5:14:c1:d8:c3:c4: 39:38:0b:6c:69:08:de:ec:83:47:bf:b0:97:aa:94:7e:72:68: 8e:14:92:35:98:38:f7:97:98:71:2c:20:1d:2f:ac:e4:f1:9d: 62:e7:5e:11:c3:46:14:48:b4:15:48:53:f8:8c:9a:df:12:8e: fd:d1:ff:94:e6:3b:8a:58:1c:e0:08:fb:82:8d:a3:0e:e1:72: ce:21:48:ce:7e:ca:67:63:6b:e8:e1:37:1b:0f:c6:a5:00:78: 87:e4:78:dd:a6:b9:3f:63:6c:a9:44:d3:3e:a8:ca:88:02:c8: 47:79:ba:f9:9e:a3:90:5f:a1:f9:0f:d7:48:c4:7d:13:82:54: c1:14:be:1c:e7:6d:13:9f:f8:3f:30:e8:8e:74:7d:dd:c0:dd: 71:54:e0:94:a3:59:69:ac:aa:02:79:65:0b:5d:54:7f:6e:60: 12:86:30:5d:b7:e0:6c:50:78:63:13:97:d7:9f:eb:b9:07:f7: 06:43:a7:72:fd:2a:49:ce:20:ea:60:a7:f6:13:d4:37:76:46: 01:6e:dd:5b:2f:7a:26:5f:2f:47:75:60:59:96:8b:44:3d:50: 43:7c:92:57:2f:d6:1b:db:82:41:0e:d9:44:f5:f7:2e:da:b8: 45:ce:d3:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWp/+mhRA3LIvHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk NGM3NGI3MmEtYTdiMC00NzRmLTllMTEtMDFjNDc4M2Y3YjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA339gxLY+BG+2QeDF1USkwWmH0DgxGYaPOMRL q38vsBQ3g04ZaUSo6gltL7KwAQ4W0nSwAidH2zDK8cqzywQrK4r2BWiYUWxh3VzM sa+7YNEGyFckP9lTmdRGdHhf+eDkbaTlQ7cg7SA+mrY1f5YAkLkwTlVEmGHSaU5J VSR8aWG1hQ+aPJQbjBBgqU8gDp6DuyQHMGl3nWphfJpA869vmomL+my7azMFBr16 NfjMz46ro8487VQhZXmZTNirZ7CNue4aLnGckcn8hxJljkgxXCEdGUTMwJPp/GrK fZ/cshXMNhwoOlsw7XCBEOZPGSiB0IoIeI7HM1ipQxHaDhGEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1o9sPgiB0GSzIRzsHOvDNEb8NdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWM3NTFiZmMtZTEzZC0z MjllLWE3YTktZmM4OWQ0YjQwZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuL/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPp70Rt3Lz8LepYpdUUwdjDxDk4C2xpCN7sg0e/sJeqlH5yaI4UkjWY OPeXmHEsIB0vrOTxnWLnXhHDRhRItBVIU/iMmt8Sjv3R/5TmO4pYHOAI+4KNow7h cs4hSM5+ymdja+jhNxsPxqUAeIfkeN2muT9jbKlE0z6oyogCyEd5uvmeo5BfofkP 10jEfROCVMEUvhznbROf+D8w6I50fd3A3XFU4JSjWWmsqgJ5ZQtdVH9uYBKGMF23 4GxQeGMTl9ef67kH9wZDp3L9KknOIOpgp/YT1Dd2RgFu3VsveiZfL0d1YFmWi0Q9 UEN8klcv1hvbgkEO2UT19y7auEXO04w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:07 2025 by rpki-client