$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1187695e-f6c9-3b69-a0de-60371da5a4c3.roa File: 1187695e-f6c9-3b69-a0de-60371da5a4c3.roa (raw, json) Hash identifier: 79fFF7JEo2iLbmYAVKwL2fPuO+HUwFyWiovZ3C1ifwQ= Subject key identifier: 59:DC:6C:74:AB:CA:00:F1:DC:50:EF:6E:FE:56:1C:D9:14:4B:2D:6E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848C150E5F914FEC7A076016C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1187695e-f6c9-3b69-a0de-60371da5a4c3.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 22773 IP address blocks: 2001:579:904b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:e5:f9:14:fe:c7:a0:76:01:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=d9af8426-cb88-435b-a87c-8e0a7d0fa71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bb:31:20:06:e5:e6:94:b8:b6:78:57:4e:e4: c8:c1:a1:77:83:ff:5e:bc:36:c0:3f:eb:8f:29:ed: f2:3a:e7:14:fa:81:e4:da:89:c2:be:cf:f8:60:0a: 7e:f7:fb:92:dc:87:1c:ce:bc:69:75:6c:29:27:4f: 28:dd:23:61:71:e2:09:ff:47:a0:99:a0:e9:36:4b: 23:ab:ed:3b:5b:15:b1:17:79:a9:f4:95:4d:be:3b: aa:00:68:22:80:1c:d8:fe:41:30:a1:6d:3d:5b:7e: 50:a5:e7:b7:66:b5:db:20:e0:c5:c7:1b:02:4a:72: 1a:ef:28:88:75:b6:bb:fa:f4:04:e9:cd:3f:6d:c5: f9:db:ab:0e:db:ea:d9:45:74:2e:cf:a2:8a:f1:f1: 21:f3:06:36:36:30:e9:07:7d:50:2d:89:e4:46:f7: 32:8c:5e:28:2f:d0:89:5a:6b:78:06:f3:37:ce:3f: 47:e1:0a:9c:29:b1:e3:38:7f:8a:c4:ec:75:90:6f: e3:d7:ff:64:c4:a7:e3:e7:39:2c:20:f2:60:0b:7f: 8b:a9:45:a2:fc:ec:15:dd:b6:6d:c9:4b:12:26:60: 15:f3:f6:42:78:4e:b3:e5:89:12:1f:cd:3d:46:d8: f9:9b:4c:5e:df:b2:ad:65:29:5b:57:58:ec:b2:67: 68:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DC:6C:74:AB:CA:00:F1:DC:50:EF:6E:FE:56:1C:D9:14:4B:2D:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1187695e-f6c9-3b69-a0de-60371da5a4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:904b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:82:14:9c:ed:2e:6e:2c:fe:38:ab:02:4f:67:cb:bf:d5:cf: 6e:f1:73:a0:91:80:e0:eb:33:af:89:e4:dd:44:03:10:4f:ef: e3:f4:b4:b0:20:67:35:5e:aa:6d:fa:83:7a:5f:de:4a:54:01: ce:1f:f9:3b:44:bb:88:c5:3a:b8:8a:23:c3:9e:e8:e4:f1:bb: be:03:1b:51:f3:eb:8f:b5:4a:95:bd:34:75:1a:00:f6:97:a6: f9:8f:fd:c2:d3:9d:6c:74:88:a6:85:f9:6c:77:60:82:83:25: 06:07:e8:51:27:c5:32:53:11:69:4a:ed:97:cc:f6:77:86:46: 8b:10:7b:57:af:07:8b:76:23:ac:a9:3d:0d:e9:c1:f7:73:2b: 64:8d:39:2c:36:94:ce:39:1e:c1:a6:49:29:bb:92:3f:b1:26: bc:ea:99:a6:2b:d3:0d:62:2e:68:5e:7c:60:69:6b:5a:20:f8: 91:65:73:d0:72:c4:ab:af:58:7a:81:74:eb:64:11:32:cf:0c: f4:57:44:7b:13:28:15:2f:8e:04:ba:ef:3e:d9:c3:88:54:e7: 60:e8:ed:d4:a0:26:fd:40:96:58:ef:b8:62:99:2c:aa:e8:31: c6:d6:ab:25:45:31:7d:75:ac:4c:10:01:36:d3:0f:61:99:5f: 12:71:c7:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjBUOX5FP7HoHYBbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDlhZjg0MjYtY2I4OC00MzViLWE4N2MtOGUwYTdkMGZhNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7sxIAbl5pS4tnhXTuTIwaF3g/9evDbAP+uP Ke3yOucU+oHk2onCvs/4YAp+9/uS3IcczrxpdWwpJ08o3SNhceIJ/0egmaDpNksj q+07WxWxF3mp9JVNvjuqAGgigBzY/kEwoW09W35Qpee3ZrXbIODFxxsCSnIa7yiI dba7+vQE6c0/bcX526sO2+rZRXQuz6KK8fEh8wY2NjDpB31QLYnkRvcyjF4oL9CJ Wmt4BvM3zj9H4QqcKbHjOH+KxOx1kG/j1/9kxKfj5zksIPJgC3+LqUWi/OwV3bZt yUsSJmAV8/ZCeE6z5YkSH809Rtj5m0xe37KtZSlbV1jssmdoQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFncbHSrygDx3FDvbv5WHNkUSy1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTE4NzY5NWUtZjZjOS0z YjY5LWEwZGUtNjAzNzFkYTVhNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeZBL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAiCFJztLm4s/jirAk9ny7/Vz27xc6CRgODrM6+J5N1EAxBP7+P0 tLAgZzVeqm36g3pf3kpUAc4f+TtEu4jFOriKI8Oe6OTxu74DG1Hz64+1SpW9NHUa APaXpvmP/cLTnWx0iKaF+Wx3YIKDJQYH6FEnxTJTEWlK7ZfM9neGRosQe1evB4t2 I6ypPQ3pwfdzK2SNOSw2lM45HsGmSSm7kj+xJrzqmaYr0w1iLmhefGBpa1og+JFl c9ByxKuvWHqBdOtkETLPDPRXRHsTKBUvjgS67z7Zw4hU52Do7dSgJv1AlljvuGKZ LKroMcbWqyVFMX11rEwQATbTD2GZXxJxx0g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:32 2025 by rpki-client