$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f217733c-9580-35b3-ac3d-ff9328641f42.roa File: f217733c-9580-35b3-ac3d-ff9328641f42.roa (raw, json) Hash identifier: nuQipJ4VV3I8x5F+YfvgAzmofjVI3fDuLPMP26cBXws= Subject key identifier: B4:B3:1F:D1:35:8E:D9:D6:BF:21:71:96:90:44:A4:83:B5:8E:32:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858498769BDBECB44A6FE37EEE840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f217733c-9580-35b3-ac3d-ff9328641f42.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 22773 IP address blocks: 98.175.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:bd:be:cb:44:a6:fe:37:ee:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=8a2e94f8-083f-41c1-af00-1b7718ce4104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:63:15:a1:95:db:58:77:3c:48:2f:7d:75:22: 41:02:a1:57:34:58:64:0d:2a:f8:ee:6c:bc:d1:8d: 4c:c9:3b:5e:2a:4d:7d:bb:3d:c4:2d:65:29:08:df: ff:54:39:90:4a:fd:31:6f:1b:4f:62:26:d4:18:fe: fa:4a:f2:a5:a3:18:24:9e:83:51:da:16:03:0e:c5: e2:97:4b:27:c3:c0:71:13:a2:db:e3:f7:df:7c:21: 71:ce:ac:06:6b:79:8b:b9:6e:f6:91:9c:b4:6c:5b: 1c:4e:89:c7:c0:66:4c:b8:6f:35:f6:e5:df:b9:b5: 89:49:bc:dc:b1:90:de:b9:a7:6f:ee:a4:12:98:ba: 46:40:04:56:1c:32:a4:48:2e:1b:66:7d:9f:fb:bc: bc:2d:cf:b4:34:00:ed:dd:ed:be:25:e8:7c:1e:62: 2a:eb:32:f6:e1:01:30:ab:ba:cd:83:18:30:8d:38: 5a:bf:f0:53:6d:a7:e7:56:5d:ce:f6:00:51:79:91: 05:2f:5a:d9:bb:35:7e:f3:75:96:f8:1c:70:cc:4c: 54:a9:05:0b:74:38:9e:dd:0f:da:07:aa:25:9f:90: 18:c7:33:45:ba:fe:7c:5c:b4:9a:6d:07:83:f0:56: bd:ca:60:8b:d6:79:18:11:9d:e5:99:2a:79:8a:6e: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B3:1F:D1:35:8E:D9:D6:BF:21:71:96:90:44:A4:83:B5:8E:32:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f217733c-9580-35b3-ac3d-ff9328641f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.175.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:46:f0:39:8c:38:8a:aa:ca:3a:fe:35:04:c6:df:4b:81:f3: 01:ef:ef:7d:33:d7:81:ad:14:ad:6f:f4:13:7c:5b:11:6f:b8: b3:bc:dd:ef:e2:55:04:1c:56:5d:1f:29:dc:3f:eb:22:a5:4d: 13:f6:dd:d2:20:b9:a7:5b:e1:23:09:2f:0c:9d:9d:f8:59:41: 83:86:88:1d:8d:30:d6:d8:cd:3b:6b:6f:e6:7a:6c:ed:70:c7: 23:ef:0e:b8:37:4f:33:c3:42:89:52:7f:e5:b8:c4:a3:04:a2: 44:a6:4b:1c:4f:09:d6:c4:71:31:13:c1:9b:09:ef:60:64:41: 6a:fb:07:95:4c:19:03:70:52:da:c5:6a:43:d2:e1:1d:67:da: 73:6c:ba:53:7c:e1:6a:9d:5d:53:0b:7b:06:fc:d4:aa:da:c2: 9b:fb:3c:ca:17:b2:68:f2:0b:3e:57:03:56:f1:3b:66:60:5f: 41:67:db:94:37:00:11:2f:39:d2:b9:0b:dd:59:2c:7e:45:25: 23:62:34:47:ed:cf:18:07:e6:67:6a:93:42:b4:3f:3e:81:0c: 92:06:82:64:7e:5d:cc:ff:6e:1d:b0:db:af:05:c1:81:b3:f7: 4f:7b:e9:a1:47:6c:2a:c2:d5:89:77:4a:e4:0e:ee:62:29:8a: 5d:37:bb:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHab2+y0Sm/jfu6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk OGEyZTk0ZjgtMDgzZi00MWMxLWFmMDAtMWI3NzE4Y2U0MTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GMVoZXbWHc8SC99dSJBAqFXNFhkDSr47my8 0Y1MyTteKk19uz3ELWUpCN//VDmQSv0xbxtPYibUGP76SvKloxgknoNR2hYDDsXi l0snw8BxE6Lb4/fffCFxzqwGa3mLuW72kZy0bFscTonHwGZMuG819uXfubWJSbzc sZDeuadv7qQSmLpGQARWHDKkSC4bZn2f+7y8Lc+0NADt3e2+Jeh8HmIq6zL24QEw q7rNgxgwjThav/BTbafnVl3O9gBReZEFL1rZuzV+83WW+BxwzExUqQULdDie3Q/a B6oln5AYxzNFuv58XLSabQeD8Fa9ymCL1nkYEZ3lmSp5im5BHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSzH9E1jtnWvyFxlpBEpIO1jjK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjIxNzczM2MtOTU4MC0z NWIzLWFjM2QtZmY5MzI4NjQxZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYq/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1G8DmMOIqqyjr+NQTG30uB8wHv730z14GtFK1v9BN8WxFvuLO83e/i VQQcVl0fKdw/6yKlTRP23dIguadb4SMJLwydnfhZQYOGiB2NMNbYzTtrb+Z6bO1w xyPvDrg3TzPDQolSf+W4xKMEokSmSxxPCdbEcTETwZsJ72BkQWr7B5VMGQNwUtrF akPS4R1n2nNsulN84WqdXVMLewb81Krawpv7PMoXsmjyCz5XA1bxO2ZgX0Fn25Q3 ABEvOdK5C91ZLH5FJSNiNEftzxgH5mdqk0K0Pz6BDJIGgmR+Xcz/bh2w268FwYGz 90976aFHbCrC1Yl3SuQO7mIpil03u6M= -----END CERTIFICATE-----Generated at Sat Apr 26 23:08:03 2025 by rpki-client