$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4a3abf3-1d1b-3d2c-92cf-b2f2ed9edc73.roa File: f4a3abf3-1d1b-3d2c-92cf-b2f2ed9edc73.roa (raw, json) Hash identifier: h+AQtFOCUrW05W8aK5l0EJqBJ2pTpRKdO1rTvVZKeGg= Subject key identifier: 22:4E:19:7C:EB:AC:F1:65:54:47:D9:53:91:F3:34:59:46:8C:A8:A6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5D1A40B0B83E386817600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4a3abf3-1d1b-3d2c-92cf-b2f2ed9edc73.roa Signing time: Thu 01 May 2025 17:10:26 +0000 ROA not before: Thu 01 May 2025 17:10:26 +0000 ROA not after: Wed 30 Jul 2025 17:10:26 +0000 asID: 22773 IP address blocks: 98.188.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:d1:a4:0b:0b:83:e3:86:81:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:26 2025 GMT Not After : Jul 30 17:10:26 2025 GMT Subject: CN=2a1de793-cf62-4c0d-8646-a71e475265d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:85:0f:73:93:eb:3c:03:14:39:fa:3b:4d: c8:cb:54:1e:81:4f:60:14:15:14:6a:73:fe:43:fd: 2b:5a:e7:74:de:45:e9:bc:a2:3a:46:2d:87:03:2e: e6:8d:56:54:a1:ea:86:56:12:08:8c:db:3e:74:f4: 8b:35:50:1a:82:d3:d2:c8:9a:e9:20:dd:5c:aa:25: a6:ba:0b:e8:13:65:19:1a:be:26:bf:ad:16:75:89: 69:a3:9a:34:ef:47:5a:61:df:85:43:94:ab:14:a4: 2c:98:44:a2:2f:14:69:01:42:67:c1:f1:7d:7e:6a: 78:d0:e2:f8:46:9c:db:b8:f8:f9:00:63:8b:df:17: 48:fe:e8:61:ee:eb:10:8c:0c:83:74:dd:86:76:2e: d1:d1:7a:9e:84:79:41:ba:cd:f0:20:85:4a:13:20: ae:87:f7:97:0a:e6:fe:aa:b6:c3:2e:3e:d4:72:e1: 74:95:f8:59:ad:05:42:82:38:c7:ae:e0:80:d1:63: ef:0b:b2:54:48:eb:3c:53:b3:ee:fb:d6:d8:0a:cf: ad:df:af:ea:2f:5a:f5:73:87:0e:2e:2a:f0:b8:78: 50:b1:59:6f:d0:c3:47:15:43:c3:ed:77:1c:f3:e2: 89:39:5b:ee:fa:09:00:d4:8f:ab:e5:cf:66:8e:d2: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4E:19:7C:EB:AC:F1:65:54:47:D9:53:91:F3:34:59:46:8C:A8:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4a3abf3-1d1b-3d2c-92cf-b2f2ed9edc73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.188.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:73:b5:da:14:59:fe:f9:48:48:08:d6:3b:57:79:40:0f:6e: 81:e0:4e:93:06:f2:17:78:8a:23:39:aa:b2:66:52:5f:ca:c8: 08:e8:ba:70:15:e0:8d:38:ac:2f:68:96:d9:b3:73:82:90:bb: 56:bc:10:ec:d4:7a:be:5a:c2:09:2a:5e:9a:b3:91:e8:69:56: 15:88:23:51:c0:eb:bf:a3:b5:a9:c2:36:0e:9c:1a:7d:f1:81: 84:13:cf:86:6e:a1:4d:28:5b:0b:dd:de:28:10:44:43:18:aa: f2:f0:49:90:74:b0:ad:11:c9:28:d7:23:6d:41:9c:5d:d7:e5: 7e:cf:aa:1e:cd:5d:77:7d:aa:4f:be:a8:0b:81:c7:9c:71:37: eb:81:0b:96:47:07:b7:0b:06:7e:c2:a3:22:6f:39:05:4a:cb: f2:60:98:9d:2a:bb:bb:46:e6:30:56:9b:f5:20:1c:33:72:84: 7f:83:2f:30:59:7f:c3:0d:6a:b1:83:3d:48:88:10:89:18:7a: c2:0f:d8:77:4d:a9:07:c1:19:63:40:8c:28:4d:ef:76:4b:b0: f9:43:3e:78:6d:50:df:6a:9c:be:8d:9c:b0:0c:e9:f7:fd:74: 6c:04:39:d8:83:0c:39:b8:7a:80:50:8d:80:2f:52:c1:29:48: ad:43:14:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19dGkCwuD44aBdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAyNloXDTI1MDczMDE3MTAyNlowLzEtMCsGA1UEAxMk MmExZGU3OTMtY2Y2Mi00YzBkLTg2NDYtYTcxZTQ3NTI2NWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEuFD3OT6zwDFDn6O03Iy1QegU9gFBUUanP+ Q/0rWud03kXpvKI6Ri2HAy7mjVZUoeqGVhIIjNs+dPSLNVAagtPSyJrpIN1cqiWm ugvoE2UZGr4mv60WdYlpo5o070daYd+FQ5SrFKQsmESiLxRpAUJnwfF9fmp40OL4 RpzbuPj5AGOL3xdI/uhh7usQjAyDdN2Gdi7R0XqehHlBus3wIIVKEyCuh/eXCub+ qrbDLj7UcuF0lfhZrQVCgjjHruCA0WPvC7JUSOs8U7Pu+9bYCs+t36/qL1r1c4cO LirwuHhQsVlv0MNHFUPD7Xcc8+KJOVvu+gkA1I+r5c9mjtJnHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJOGXzrrPFlVEfZU5HzNFlGjKimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjRhM2FiZjMtMWQxYi0z ZDJjLTkyY2YtYjJmMmVkOWVkYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtztdoUWf75SEgI1jtXeUAPboHgTpMG8hd4iiM5qrJmUl/KyAjounAV 4I04rC9oltmzc4KQu1a8EOzUer5awgkqXpqzkehpVhWII1HA67+jtanCNg6cGn3x gYQTz4ZuoU0oWwvd3igQREMYqvLwSZB0sK0RySjXI21BnF3X5X7Pqh7NXXd9qk++ qAuBx5xxN+uBC5ZHB7cLBn7CoyJvOQVKy/JgmJ0qu7tG5jBWm/UgHDNyhH+DLzBZ f8MNarGDPUiIEIkYesIP2HdNqQfBGWNAjChN73ZLsPlDPnhtUN9qnL6NnLAM6ff9 dGwEOdiDDDm4eoBQjYAvUsEpSK1DFHI= -----END CERTIFICATE-----Generated at Sat May 10 04:50:25 2025 by rpki-client