$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/950de287-404a-3094-98de-d9d9c1c221fe.roa File: 950de287-404a-3094-98de-d9d9c1c221fe.roa (raw, json) Hash identifier: Iv2reSZcdk8AP3nIB5Y5lDt/7rqLcyhxi1aIx6icI8o= Subject key identifier: 85:E1:A2:92:8E:BB:17:08:68:C2:1C:B1:06:DD:93:C9:51:5C:EE:F8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB1797CAF5CCF2E7C482280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/950de287-404a-3094-98de-d9d9c1c221fe.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 98.161.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:79:7c:af:5c:cf:2e:7c:48:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=430649af-4ee7-427e-9a03-bc3ba993e006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:39:8c:1c:a2:2b:d5:e4:8f:6c:77:23:d6:e8: ab:c3:61:93:e0:38:5a:6f:41:e3:9e:20:7c:78:8d: 75:c5:1e:69:d6:bd:c3:6c:b9:9a:48:60:9a:6d:99: 10:38:94:62:b2:f5:30:89:43:57:cd:0d:75:68:7d: 33:9a:af:2e:57:98:f0:39:95:9e:ae:97:a2:db:e9: 33:8e:be:0e:18:61:59:10:5a:2d:80:dd:d8:30:1b: 90:f1:b1:43:0e:a5:c3:07:e1:b1:b4:5d:20:45:ab: 60:f5:80:84:1f:05:05:ec:af:f8:54:ee:a6:51:5d: 35:cd:bb:8f:01:44:3b:ac:94:66:e6:04:76:11:1b: f8:10:f7:ad:75:3a:b1:f2:82:d5:da:c7:0b:58:27: 0d:4c:83:d2:72:64:b2:73:b6:19:33:d9:8f:96:86: ad:53:c7:ed:c9:4f:0e:79:f8:b4:4c:c8:80:9c:a7: 61:0e:55:ef:56:bc:c8:04:d1:25:66:a1:27:01:df: 31:ac:3a:15:04:b3:58:e3:8e:6f:de:ca:e5:ca:65: 34:c0:95:0e:6b:d0:54:e7:83:b9:b4:29:c1:d4:4d: 37:e1:80:eb:ca:f2:9f:f0:3d:37:24:63:a5:fb:d8: 1a:44:57:95:f6:13:6c:54:06:8e:72:5a:28:61:19: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E1:A2:92:8E:BB:17:08:68:C2:1C:B1:06:DD:93:C9:51:5C:EE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/950de287-404a-3094-98de-d9d9c1c221fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ec:fd:37:7d:f6:5b:4c:4a:81:fd:82:e1:bf:3f:c8:d7:a0: ab:84:2a:db:fa:a0:29:2d:43:e5:04:24:5c:1a:5d:c0:8d:f4: 2c:a4:4a:95:dc:8d:29:54:9e:b3:d7:7a:6c:69:81:11:ba:e5: 60:d2:a1:49:2f:9e:14:37:d7:fb:80:63:b9:0c:76:9e:99:fe: f3:30:23:33:d1:6e:ab:e7:3b:32:b1:ec:45:fe:95:67:ad:c5: e3:1c:ac:91:31:d5:2e:19:f1:87:c4:ee:8a:39:02:8b:be:27: f5:e8:7e:19:4c:5e:7a:30:7d:c7:0d:38:e4:fe:5d:79:60:51: 6a:f5:5d:1c:7a:1f:13:f1:38:07:6b:f0:4c:e6:34:05:d2:0a: d3:3d:06:ec:05:68:1d:86:3c:f3:50:fc:ea:b7:45:ce:e2:a2: e0:76:35:f9:d5:69:74:59:50:10:f6:33:68:6e:c2:e5:af:dc: 8b:84:80:f4:8f:0f:52:32:89:32:1d:ae:7b:51:1e:a1:56:6a: f5:d3:0f:84:ae:fa:05:05:ca:2c:15:25:2e:b1:58:1a:db:6b: f0:3a:75:cd:bc:b2:fe:d9:35:3d:e3:0e:c0:b3:93:69:ee:58: 00:eb:67:2f:80:a0:06:ec:e3:4f:32:da:b8:95:c2:6c:2d:92: 7b:44:85:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXl8r1zPLnxIIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NDMwNjQ5YWYtNGVlNy00MjdlLTlhMDMtYmMzYmE5OTNlMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzmMHKIr1eSPbHcj1uirw2GT4Dhab0HjniB8 eI11xR5p1r3DbLmaSGCabZkQOJRisvUwiUNXzQ11aH0zmq8uV5jwOZWerpei2+kz jr4OGGFZEFotgN3YMBuQ8bFDDqXDB+GxtF0gRatg9YCEHwUF7K/4VO6mUV01zbuP AUQ7rJRm5gR2ERv4EPetdTqx8oLV2scLWCcNTIPScmSyc7YZM9mPloatU8ftyU8O efi0TMiAnKdhDlXvVrzIBNElZqEnAd8xrDoVBLNY445v3srlymU0wJUOa9BU54O5 tCnB1E034YDryvKf8D03JGOl+9gaRFeV9hNsVAaOclooYRn3sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXhopKOuxcIaMIcsQbdk8lRXO74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTUwZGUyODctNDA0YS0z MDk0LTk4ZGUtZDlkOWMxYzIyMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLs/Td99ltMSoH9guG/P8jXoKuEKtv6oCktQ+UEJFwaXcCN9CykSpXc jSlUnrPXemxpgRG65WDSoUkvnhQ31/uAY7kMdp6Z/vMwIzPRbqvnOzKx7EX+lWet xeMcrJEx1S4Z8YfE7oo5Aou+J/XofhlMXnowfccNOOT+XXlgUWr1XRx6HxPxOAdr 8EzmNAXSCtM9BuwFaB2GPPNQ/Oq3Rc7iouB2NfnVaXRZUBD2M2huwuWv3IuEgPSP D1IyiTIdrntRHqFWavXTD4Su+gUFyiwVJS6xWBrba/A6dc28sv7ZNT3jDsCzk2nu WADrZy+AoAbs408y2riVwmwtkntEhaU= -----END CERTIFICATE-----Generated at Tue May 13 05:19:41 2025 by rpki-client