$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae194353-f5d7-339d-8d0f-bc23a1a38ab9.roa File: ae194353-f5d7-339d-8d0f-bc23a1a38ab9.roa (raw, json) Hash identifier: flrUe11grfUVvm/BsIbl1pejZ2TtcuG0Ccp1eulVfXc= Subject key identifier: 41:4E:E4:FE:E2:61:F3:E3:5C:D3:F9:62:83:27:DE:F4:51:59:30:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848C150EEE1B3FFAC33DDF57700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae194353-f5d7-339d-8d0f-bc23a1a38ab9.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 22773 IP address blocks: 98.188.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:ee:e1:b3:ff:ac:33:dd:f5:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=52021c1c-1567-4c5d-b4c9-86ede35c9410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:31:f6:e7:db:02:e7:96:d2:31:d8:f2:81: fa:f4:00:b7:fc:e0:de:7b:fe:aa:9e:a3:97:bf:72: e5:52:1c:09:82:29:ad:54:3a:73:b9:05:e9:95:d4: 2b:7d:55:58:ad:f9:af:43:fc:6f:ba:8f:dd:f7:7d: cb:b5:c0:71:ac:50:89:47:b2:e9:e8:23:1f:be:92: 61:3f:69:36:81:97:ec:50:7c:d3:cc:6d:2e:2c:2d: 47:16:e2:0f:3e:ba:38:1d:8d:71:83:e3:d7:5d:1f: f0:91:d6:88:fc:4d:7b:b5:c6:67:35:32:2f:5e:90: 60:9c:d9:d4:69:f9:85:94:37:77:27:d9:e7:82:99: 30:2c:ad:cb:a3:8c:c4:8e:fa:04:08:50:39:ab:df: 98:3c:a7:0f:49:42:39:33:3f:0a:7d:be:cd:3b:35: d7:a9:5c:23:c6:92:2b:94:d7:08:31:30:08:14:f8: 6f:d0:d9:42:d7:7d:1e:0b:fc:fb:47:4a:65:2c:e3: 94:bb:2d:ab:eb:a0:c1:86:58:08:c8:2e:3e:5f:e1: b5:ea:ce:88:15:65:5d:35:9e:c6:10:b0:88:c1:8a: e7:83:74:8f:64:f6:61:47:cb:38:89:b7:41:31:ed: eb:de:1a:d4:38:f9:64:77:9f:76:15:8b:e0:f2:34: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4E:E4:FE:E2:61:F3:E3:5C:D3:F9:62:83:27:DE:F4:51:59:30:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae194353-f5d7-339d-8d0f-bc23a1a38ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.188.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:06:04:5b:8a:9c:4d:d7:6e:13:01:36:ed:87:59:cd:6a:f8: 88:03:b8:0e:6b:f7:ed:a0:8a:e4:dc:cf:e3:b1:c6:4d:6b:fc: 5c:7b:56:f7:e6:4b:44:d4:65:e2:5c:11:f3:95:bc:37:5d:be: 33:28:f4:56:aa:1d:a6:1b:b6:5b:6f:a5:e5:f3:be:1a:c8:0d: 6c:f6:d2:1d:8a:ba:14:a2:7e:be:1d:e6:00:eb:e0:f7:75:e3: 87:e4:36:31:aa:f4:65:65:ff:5a:d1:47:0e:81:7b:36:78:59: 63:5c:2d:85:66:a1:eb:9f:94:60:40:8c:43:c6:a0:2a:12:e2: 20:a0:36:26:80:dc:5d:4a:66:e2:a7:68:50:62:f8:5d:53:66: f6:6d:05:b7:44:2a:37:ae:74:ec:0a:22:f5:e7:9f:73:f8:66: 73:67:7b:45:2c:ba:68:49:a1:b4:f7:4f:57:2f:5a:4f:66:ca: be:0f:42:87:79:18:c0:fd:76:0e:15:bc:4e:bf:a4:83:88:ab: a1:01:11:4a:cb:d7:c4:ef:ea:65:f0:40:e7:d1:78:ed:2e:6f: c6:94:9c:a1:de:08:27:2b:9f:e0:bc:32:1e:2e:a3:09:cb:46: af:9b:58:af:7f:7e:6e:2a:1b:63:2b:02:c6:0f:c2:36:97:f8: 17:35:a0:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUO7hs/+sM931dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk NTIwMjFjMWMtMTU2Ny00YzVkLWI0YzktODZlZGUzNWM5NDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFcx9ufbAueW0jHY8oH69AC3/ODee/6qnqOX v3LlUhwJgimtVDpzuQXpldQrfVVYrfmvQ/xvuo/d933LtcBxrFCJR7Lp6CMfvpJh P2k2gZfsUHzTzG0uLC1HFuIPPro4HY1xg+PXXR/wkdaI/E17tcZnNTIvXpBgnNnU afmFlDd3J9nngpkwLK3Lo4zEjvoECFA5q9+YPKcPSUI5Mz8Kfb7NOzXXqVwjxpIr lNcIMTAIFPhv0NlC130eC/z7R0plLOOUuy2r66DBhlgIyC4+X+G16s6IFWVdNZ7G ELCIwYrng3SPZPZhR8s4ibdBMe3r3hrUOPlkd592FYvg8jRt8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFO5P7iYfPjXNP5YoMn3vRRWTABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWUxOTQzNTMtZjVkNy0z MzlkLThkMGYtYmMyM2ExYTM4YWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrwXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUGBFuKnE3XbhMBNu2HWc1q+IgDuA5r9+2giuTcz+Oxxk1r/Fx7Vvfm S0TUZeJcEfOVvDddvjMo9FaqHaYbtltvpeXzvhrIDWz20h2KuhSifr4d5gDr4Pd1 44fkNjGq9GVl/1rRRw6BezZ4WWNcLYVmoeuflGBAjEPGoCoS4iCgNiaA3F1KZuKn aFBi+F1TZvZtBbdEKjeudOwKIvXnn3P4ZnNne0UsumhJobT3T1cvWk9myr4PQod5 GMD9dg4VvE6/pIOIq6EBEUrL18Tv6mXwQOfReO0ub8aUnKHeCCcrn+C8Mh4uownL Rq+bWK9/fm4qG2MrAsYPwjaX+Bc1oHo= -----END CERTIFICATE-----Generated at Wed Apr 9 23:36:42 2025 by rpki-client