$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f217733c-9580-35b3-ac3d-ff9328641f42.roa File: f217733c-9580-35b3-ac3d-ff9328641f42.roa (raw, json) Hash identifier: WcQ6FbaGNjRRkH3M7JM/m0KMxzI1yh89bCmgFPFrnW0= Subject key identifier: 91:4B:A8:FE:DE:A5:EB:A9:FE:8F:D0:3A:8E:70:AA:28:2A:E4:37:0E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848A830B62772D7B9E305AB88C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f217733c-9580-35b3-ac3d-ff9328641f42.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 22773 IP address blocks: 98.175.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b6:27:72:d7:b9:e3:05:ab:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=f0d61acc-c9b1-4642-8e8f-72bee2ea4477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:7c:8c:07:79:80:bb:7f:86:3b:6c:82:3e: 8f:6b:cc:0a:0f:99:a8:81:a8:3b:00:f5:2e:5a:12: 4c:0e:b6:32:28:5d:b5:a8:70:96:7c:c5:ba:5b:fe: af:35:4f:2d:7b:c3:05:2e:09:b3:fd:b0:80:b3:27: 45:ff:c5:7a:31:d3:fe:e6:15:23:1c:66:57:c7:df: 93:36:91:ad:d8:14:bf:15:d6:34:a3:30:e0:1c:bc: 8c:3c:31:4a:04:2d:7e:de:54:85:31:f5:fb:c3:18: 12:2b:fb:58:90:af:8d:5e:b5:75:db:72:88:e7:88: 2c:1e:13:e3:89:9c:dd:7a:39:40:f5:7c:42:41:92: d9:5a:d2:dc:26:c0:36:5b:9e:cf:ef:85:fe:b7:8d: 6e:0c:22:b7:84:82:a4:17:7d:f5:66:29:65:b2:8c: 95:4b:a1:b4:ae:8b:7c:6f:5d:a5:98:50:09:5b:ac: 50:31:7c:ae:89:60:d4:79:af:61:09:69:09:3b:ee: 38:9a:54:e0:f8:26:9c:6f:5d:6b:d1:56:dc:8c:cc: a5:27:5d:9e:63:da:ca:49:28:2f:b8:9a:11:c7:25: 2a:5a:21:cf:90:10:e8:5c:04:10:96:16:5f:c7:f8: df:88:21:61:18:19:de:16:4d:38:bc:11:c4:51:c8: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4B:A8:FE:DE:A5:EB:A9:FE:8F:D0:3A:8E:70:AA:28:2A:E4:37:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f217733c-9580-35b3-ac3d-ff9328641f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.175.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:da:f5:c8:45:e7:f9:0f:80:18:2d:99:84:ff:51:7f:89:aa: 61:9b:b5:f8:6b:08:aa:8b:55:40:2a:6f:2b:b0:35:49:6f:f7: 1b:e6:16:f0:aa:59:40:f5:62:c0:1b:2c:ba:7e:4a:7a:bb:23: 39:6a:f1:e0:94:23:17:72:b4:ba:e0:9b:7e:f3:36:54:89:76: 0c:3c:7c:d0:bb:bb:db:71:e7:03:7d:0a:be:87:2a:45:9c:3a: 75:8b:9e:b0:1c:86:cf:85:66:5a:9f:1e:79:bb:01:5a:87:9c: 0c:02:5e:cf:ba:dd:38:b3:47:26:d8:f2:33:f5:06:ea:fa:4f: 57:ce:96:4f:9d:c8:2b:59:70:35:ce:9b:57:6f:7e:5c:ee:b0: fc:bf:6d:1c:c9:34:39:eb:88:b3:9d:6c:7e:fb:96:2d:0b:b7: c1:77:63:1a:cb:2c:2c:21:96:d2:14:0f:19:ee:5d:40:dc:61: 24:02:5b:2e:5c:f5:bf:ca:8c:73:a0:9c:a3:7b:4b:f1:44:1b: 98:7e:c4:df:4f:4f:c0:c1:11:e8:00:d4:fd:17:78:26:f5:55: e5:87:06:18:8e:6f:19:60:c4:5d:64:10:ed:2c:79:cd:e6:c6: a5:99:c0:0b:c9:69:c1:f2:06:2c:bd:5c:1f:0b:a4:e6:db:1a: 19:03:52:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLYncte54wWriMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjBkNjFhY2MtYzliMS00NjQyLThlOGYtNzJiZWUyZWE0NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQx8jAd5gLt/hjtsgj6Pa8wKD5mogag7APUu WhJMDrYyKF21qHCWfMW6W/6vNU8te8MFLgmz/bCAsydF/8V6MdP+5hUjHGZXx9+T NpGt2BS/FdY0ozDgHLyMPDFKBC1+3lSFMfX7wxgSK/tYkK+NXrV123KI54gsHhPj iZzdejlA9XxCQZLZWtLcJsA2W57P74X+t41uDCK3hIKkF331ZillsoyVS6G0rot8 b12lmFAJW6xQMXyuiWDUea9hCWkJO+44mlTg+Cacb11r0VbcjMylJ12eY9rKSSgv uJoRxyUqWiHPkBDoXAQQlhZfx/jfiCFhGBneFk04vBHEUcjpCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFLqP7epeup/o/QOo5wqigq5DcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjIxNzczM2MtOTU4MC0z NWIzLWFjM2QtZmY5MzI4NjQxZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYq/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHa9chF5/kPgBgtmYT/UX+JqmGbtfhrCKqLVUAqbyuwNUlv9xvmFvCq WUD1YsAbLLp+Snq7Izlq8eCUIxdytLrgm37zNlSJdgw8fNC7u9tx5wN9Cr6HKkWc OnWLnrAchs+FZlqfHnm7AVqHnAwCXs+63TizRybY8jP1Bur6T1fOlk+dyCtZcDXO m1dvflzusPy/bRzJNDnriLOdbH77li0Lt8F3YxrLLCwhltIUDxnuXUDcYSQCWy5c 9b/KjHOgnKN7S/FEG5h+xN9PT8DBEegA1P0XeCb1VeWHBhiObxlgxF1kEO0sec3m xqWZwAvJacHyBiy9XB8LpObbGhkDUsw= -----END CERTIFICATE-----Generated at Sun Apr 6 16:02:03 2025 by rpki-client