$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d66286c-1b75-3e02-a343-191e916c9e66.roa File: 3d66286c-1b75-3e02-a343-191e916c9e66.roa (raw, json) Hash identifier: xT3oNqFCXwoKnKoouDGeJX+H2Sdd+VwOK59cf587OAc= Subject key identifier: 67:B3:CF:00:AC:95:AA:67:C5:DA:8D:CB:22:C5:10:AE:74:05:1E:E4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5B924FF7FA975511CD140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d66286c-1b75-3e02-a343-191e916c9e66.roa Signing time: Thu 01 May 2025 17:10:14 +0000 ROA not before: Thu 01 May 2025 17:10:14 +0000 ROA not after: Wed 30 Jul 2025 17:10:14 +0000 asID: 22773 IP address blocks: 98.179.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:b9:24:ff:7f:a9:75:51:1c:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:14 2025 GMT Not After : Jul 30 17:10:14 2025 GMT Subject: CN=333ce973-6e05-4232-8abb-9b09c5c91348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:89:93:1c:44:ca:66:4f:49:c5:08:b4:50:eb: 4c:87:19:02:85:34:02:89:fa:12:78:86:ca:cc:e5: 1f:27:9f:85:35:d8:20:af:dd:88:c7:80:4d:27:ce: 7c:29:e5:95:a9:19:52:e8:a1:58:9d:a8:03:53:9f: 59:47:03:75:f3:d4:8c:aa:69:05:7a:cb:43:83:fe: c1:c6:23:a8:43:4f:da:bd:6f:70:06:18:d7:ae:8c: 43:b5:09:3a:9e:78:1a:13:69:18:cf:45:33:f1:81: 2f:b2:50:f1:73:f8:51:7d:53:51:9c:94:7f:f7:2c: 57:dd:ea:ce:d2:86:7e:8d:e1:c2:cf:a6:eb:7a:48: 69:d6:51:80:34:40:76:e8:a1:8d:7b:48:0d:51:82: c9:84:52:6a:cf:d5:e7:70:a5:1e:d0:df:45:59:cb: 34:26:86:23:81:fb:1a:11:62:dd:6a:f7:a7:53:80: f4:63:91:30:25:e0:f9:8c:88:0c:0d:e7:21:c0:d0: 12:56:53:f7:30:4b:08:33:19:22:47:19:8d:f9:f1: 7c:d9:b7:a3:86:c3:30:34:23:56:e7:29:4d:42:62: 10:dc:bf:15:a1:70:83:9f:69:dd:79:50:cb:c8:78: a6:b0:1e:ee:73:99:c4:53:81:12:47:24:00:76:9a: 89:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:CF:00:AC:95:AA:67:C5:DA:8D:CB:22:C5:10:AE:74:05:1E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d66286c-1b75-3e02-a343-191e916c9e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.179.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d0:74:81:51:79:ba:78:38:20:36:8f:ff:1b:0b:cc:48:cf: 32:e9:4f:00:a0:15:92:07:9f:45:da:d0:5a:ca:4c:a7:81:e4: 7c:ac:42:7d:e7:b3:ac:4f:c0:84:29:1c:90:c1:aa:30:d6:ca: 15:37:95:12:27:1b:a6:8a:83:e3:f8:6f:47:d6:7d:30:93:c0: 07:60:16:34:81:e8:44:fd:26:59:a0:e4:c7:15:2d:39:32:e6: d4:7c:be:3a:3a:59:3c:38:4d:f7:f2:b1:31:d7:d9:5b:87:87: 09:a4:b6:3e:73:77:13:cf:47:6f:db:e2:8e:97:43:27:58:f4: 85:84:43:0d:c1:d7:b9:8b:98:2f:79:9e:67:89:38:88:e9:46: c8:fd:55:a4:4e:a2:08:8d:a1:1d:f7:9f:90:fc:5e:01:44:a1: d9:9a:77:aa:d7:e9:7e:8d:20:aa:39:a2:01:57:29:8a:62:da: b6:8a:88:cd:91:be:55:7c:ea:11:94:84:7e:a2:63:1f:60:7a: 0f:9a:6c:f9:ed:53:43:33:fc:36:d9:df:89:88:87:fc:a9:93: 69:b4:68:88:f6:be:31:b4:29:37:71:c8:8e:e0:0e:ed:4e:04: 8a:70:73:79:16:51:da:eb:31:23:75:1a:c6:24:aa:cb:26:c3: 27:a5:9c:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19bkk/3+pdVEc0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAxNFoXDTI1MDczMDE3MTAxNFowLzEtMCsGA1UEAxMk MzMzY2U5NzMtNmUwNS00MjMyLThhYmItOWIwOWM1YzkxMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YmTHETKZk9JxQi0UOtMhxkChTQCifoSeIbK zOUfJ5+FNdggr92Ix4BNJ858KeWVqRlS6KFYnagDU59ZRwN189SMqmkFestDg/7B xiOoQ0/avW9wBhjXroxDtQk6nngaE2kYz0Uz8YEvslDxc/hRfVNRnJR/9yxX3erO 0oZ+jeHCz6brekhp1lGANEB26KGNe0gNUYLJhFJqz9XncKUe0N9FWcs0JoYjgfsa EWLdavenU4D0Y5EwJeD5jIgMDechwNASVlP3MEsIMxkiRxmN+fF82bejhsMwNCNW 5ylNQmIQ3L8VoXCDn2ndeVDLyHimsB7uc5nEU4ESRyQAdpqJ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGezzwCslapnxdqNyyLFEK50BR7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Q2NjI4NmMtMWI3NS0z ZTAyLWEzNDMtMTkxZTkxNmM5ZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnQdIFRebp4OCA2j/8bC8xIzzLpTwCgFZIHn0Xa0FrKTKeB5HysQn3n s6xPwIQpHJDBqjDWyhU3lRInG6aKg+P4b0fWfTCTwAdgFjSB6ET9Jlmg5McVLTky 5tR8vjo6WTw4TffysTHX2VuHhwmktj5zdxPPR2/b4o6XQydY9IWEQw3B17mLmC95 nmeJOIjpRsj9VaROogiNoR33n5D8XgFEodmad6rX6X6NIKo5ogFXKYpi2raKiM2R vlV86hGUhH6iYx9geg+abPntU0Mz/DbZ34mIh/ypk2m0aIj2vjG0KTdxyI7gDu1O BIpwc3kWUdrrMSN1GsYkqssmwyelnGc= -----END CERTIFICATE-----Generated at Sat May 10 13:47:33 2025 by rpki-client