$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7fcff9-055e-3ad1-a504-9a01e49cfd7a.roa File: cd7fcff9-055e-3ad1-a504-9a01e49cfd7a.roa (raw, json) Hash identifier: BuqQ/Y7yPq/tDjk35Uei+5BUcQzNOolK3aO0duQRqC4= Subject key identifier: 34:F8:D8:53:86:0E:05:7A:20:A7:E4:1D:26:E2:94:52:80:AF:DD:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB171B0A71A34B362F36280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7fcff9-055e-3ad1-a504-9a01e49cfd7a.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 184.176.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:71:b0:a7:1a:34:b3:62:f3:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=91999841-daab-4acf-9b5d-4dd920418ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:10:e4:75:f5:88:38:f2:39:22:be:f4:d3: 88:1a:a8:31:13:7b:10:33:e6:3c:92:35:99:80:e7: 9e:af:c3:24:7d:dc:f1:89:5b:bc:d4:b0:ea:66:06: 47:5b:9e:28:bc:31:b5:ad:01:13:3e:90:b0:a7:0c: f7:d8:3d:a3:e4:81:49:de:a5:c8:33:46:94:96:70: de:17:f8:37:18:82:c0:1e:a1:04:38:64:3b:42:84: 82:fe:40:7a:ca:ab:e8:d5:13:ea:2d:26:ee:f7:b0: 57:87:15:b6:57:67:5a:40:88:93:b7:cc:a6:8f:9d: e5:ba:28:07:f9:1f:b4:4a:47:ab:fd:f6:9d:9d:8b: 1f:4e:78:7c:41:10:ee:30:10:32:25:63:4a:7b:32: 22:8d:c6:ba:41:d8:02:f5:e2:5b:70:63:4e:c8:99: 66:4b:32:d5:45:aa:25:95:6d:51:c4:72:39:bf:5b: f7:1e:8b:5e:1d:15:3c:d2:65:4e:1f:70:03:e4:2c: 6d:d2:ae:2f:44:2d:27:b9:8d:df:96:03:28:60:7d: 46:90:e3:5a:d2:73:c7:a0:41:e2:27:63:82:4d:e5: d2:86:83:93:85:24:e2:fa:ca:cf:e7:f0:ce:73:15: 16:38:98:f3:3e:8e:8d:2d:af:a9:28:33:e0:6e:eb: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F8:D8:53:86:0E:05:7A:20:A7:E4:1D:26:E2:94:52:80:AF:DD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7fcff9-055e-3ad1-a504-9a01e49cfd7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 184.176.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:0f:9e:f1:51:a1:1f:39:aa:38:e0:8e:63:15:f3:27:f3:d2: 71:51:2b:06:0e:23:44:d2:3d:1d:4f:62:3a:cc:0e:ce:46:0d: df:fa:bd:de:5a:6b:8d:3e:fb:76:c0:06:cf:7b:c1:a4:7c:16: aa:07:c5:fe:de:c2:63:da:a3:ac:86:03:68:b3:4c:bf:6c:eb: d4:11:24:fb:5f:6c:8c:6a:b0:12:e2:90:53:54:05:be:fb:6d: f9:58:1c:20:c1:cd:42:93:c9:e5:0a:81:e0:4f:31:98:84:3e: c0:6b:9c:42:82:26:b1:28:e0:b3:b4:82:fe:60:5f:eb:e5:e5: 8a:70:28:74:fa:61:f6:48:69:ef:09:85:5f:3e:b0:db:51:a6: d2:2e:2b:b6:7f:47:6a:61:57:0d:a9:95:47:41:30:ae:30:38: 0c:ca:ac:03:f6:c6:4f:ab:6a:97:5c:b0:fb:18:be:aa:79:76: f1:7b:92:7f:c2:a0:e6:e1:fc:cf:a4:18:c5:31:c9:ec:2d:df: d2:cd:89:56:50:9f:dc:bd:36:57:33:3f:9a:a9:be:46:23:f8: c1:23:d4:6a:5c:2f:2e:ba:aa:81:45:00:02:3d:ad:2e:4b:5b: 1c:b9:62:dc:f6:4d:ae:d5:c3:31:e4:47:5a:96:8e:16:85:a1: 54:5c:a7:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXGwpxo0s2LzYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk OTE5OTk4NDEtZGFhYi00YWNmLTliNWQtNGRkOTIwNDE4ZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w8Q5HX1iDjyOSK+9NOIGqgxE3sQM+Y8kjWZ gOeer8MkfdzxiVu81LDqZgZHW54ovDG1rQETPpCwpwz32D2j5IFJ3qXIM0aUlnDe F/g3GILAHqEEOGQ7QoSC/kB6yqvo1RPqLSbu97BXhxW2V2daQIiTt8ymj53luigH +R+0Sker/fadnYsfTnh8QRDuMBAyJWNKezIijca6QdgC9eJbcGNOyJlmSzLVRaol lW1RxHI5v1v3HoteHRU80mVOH3AD5Cxt0q4vRC0nuY3flgMoYH1GkONa0nPHoEHi J2OCTeXShoOThSTi+srP5/DOcxUWOJjzPo6NLa+pKDPgbuuU/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT42FOGDgV6IKfkHSbilFKAr93RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q3ZmNmZjktMDU1ZS0z YWQxLWE1MDQtOWEwMWU0OWNmZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuLDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0PnvFRoR85qjjgjmMV8yfz0nFRKwYOI0TSPR1PYjrMDs5GDd/6vd5a a40++3bABs97waR8FqoHxf7ewmPao6yGA2izTL9s69QRJPtfbIxqsBLikFNUBb77 bflYHCDBzUKTyeUKgeBPMZiEPsBrnEKCJrEo4LO0gv5gX+vl5YpwKHT6YfZIae8J hV8+sNtRptIuK7Z/R2phVw2plUdBMK4wOAzKrAP2xk+rapdcsPsYvqp5dvF7kn/C oObh/M+kGMUxyewt39LNiVZQn9y9NlczP5qpvkYj+MEj1GpcLy66qoFFAAI9rS5L Wxy5Ytz2Ta7VwzHkR1qWjhaFoVRcp3M= -----END CERTIFICATE-----Generated at Sun Apr 6 17:48:11 2025 by rpki-client