$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/165e847c-7778-34d9-9e04-d55893a16efb.roa File: 165e847c-7778-34d9-9e04-d55893a16efb.roa (raw, json) Hash identifier: plDZyg+6WnC2zMfuxB80WUBbAzhd068NKR80Xh4x5Bo= Subject key identifier: 31:E8:D3:9B:31:84:2E:59:36:9D:E2:F0:5D:5A:99:73:A2:1D:67:95 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB176090E5512917CD78280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/165e847c-7778-34d9-9e04-d55893a16efb.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 33438 IP address blocks: 2001:57a:508::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:76:09:0e:55:12:91:7c:d7:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=ffbe2fe0-098a-410b-8831-c21fbc32abd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:20:95:4a:0e:28:6d:ff:69:43:94:c6:53: f1:e8:6a:72:94:43:5c:c9:98:b9:04:80:72:11:8e: 35:5d:59:a8:e4:b3:cb:f4:39:34:0e:ef:d8:9d:9e: 2a:90:81:b3:b6:8b:b6:aa:06:e8:28:76:94:f9:d2: 76:f1:61:2c:ab:22:32:6f:4f:43:bc:36:21:b7:de: bd:53:59:ea:fc:a1:93:39:28:ea:fa:9d:36:54:76: e2:48:80:4b:a6:be:ac:57:6c:54:97:bf:4d:cd:21: 57:e6:4a:53:eb:a3:dc:7a:a8:c8:ad:6e:6f:56:0f: 39:88:07:8e:ae:bb:e6:ba:13:1a:f4:85:62:b9:eb: 1a:de:ee:e7:67:51:2d:8b:31:2c:c9:c6:2c:85:ad: 8a:87:0a:eb:60:f0:18:31:99:de:b8:c8:a4:09:41: d5:34:73:0e:8c:cb:cc:ff:c5:8a:81:87:0f:83:9a: ad:f3:d7:fd:28:3d:f1:bf:8f:b2:d6:0f:a0:8e:d2: f6:c6:ea:78:f7:49:0b:00:4e:0c:b1:8a:d7:90:d6: ab:20:3c:44:73:7d:1d:ac:1a:3d:7c:c0:e7:f5:29: 54:28:de:82:e5:a4:56:76:4d:05:4e:e1:3f:cd:e5: 91:dc:9f:ba:4c:e6:b1:e5:32:23:5f:50:6f:d9:69: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E8:D3:9B:31:84:2E:59:36:9D:E2:F0:5D:5A:99:73:A2:1D:67:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/165e847c-7778-34d9-9e04-d55893a16efb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:508::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:82:c0:5a:86:d9:86:f7:fe:cd:a2:c1:5d:d5:ab:a5:4c:88: 20:16:7f:dc:67:fb:00:ac:c1:e7:9f:44:e9:eb:86:b7:5a:f1: 01:6f:c9:a5:2a:2b:3a:89:5c:37:71:a2:f0:3c:84:51:83:a2: 8a:7b:96:f5:49:a9:c7:ea:2d:c6:ed:16:a9:fb:70:c7:71:be: 82:cb:6f:ba:db:e8:de:79:93:d8:5d:ac:67:ef:07:ff:e8:9c: 6a:fa:ce:26:51:18:ff:a7:30:c2:3b:96:a7:10:d8:88:b5:95: fc:f6:d3:6c:31:bf:86:76:f9:7b:57:8c:84:64:c9:8c:86:39: 68:ff:34:87:73:36:af:f6:aa:d5:c6:ba:fc:bb:7b:ab:0b:c7: 1c:6e:e4:ca:41:b4:b4:fe:a0:46:d9:15:54:4e:93:d1:d2:f0: 59:e5:2f:e6:ec:49:9d:a3:82:58:10:99:35:3e:c4:bb:18:6f: f0:e6:99:d3:64:7c:aa:bb:6d:05:f5:78:fe:c7:33:81:82:1f: be:0c:ea:80:ea:78:1e:28:a0:30:40:66:db:17:c8:4b:e2:3c: 1a:f2:ab:48:13:e2:11:f8:5f:f1:97:0d:4b:c8:eb:d0:4e:1e: f2:d2:a2:5a:53:1c:e5:af:7e:67:db:2d:57:c3:02:2c:99:c2: d5:39:a7:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsXYJDlUSkXzXgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZmZiZTJmZTAtMDk4YS00MTBiLTg4MzEtYzIxZmJjMzJhYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivAglUoOKG3/aUOUxlPx6GpylENcyZi5BIBy EY41XVmo5LPL9Dk0Du/YnZ4qkIGztou2qgboKHaU+dJ28WEsqyIyb09DvDYht969 U1nq/KGTOSjq+p02VHbiSIBLpr6sV2xUl79NzSFX5kpT66PceqjIrW5vVg85iAeO rrvmuhMa9IViuesa3u7nZ1EtizEsycYsha2KhwrrYPAYMZneuMikCUHVNHMOjMvM /8WKgYcPg5qt89f9KD3xv4+y1g+gjtL2xup490kLAE4MsYrXkNarIDxEc30drBo9 fMDn9SlUKN6C5aRWdk0FTuE/zeWR3J+6TOax5TIjX1Bv2WlbQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDHo05sxhC5ZNp3i8F1amXOiHWeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTY1ZTg0N2MtNzc3OC0z NGQ5LTllMDQtZDU1ODkzYTE2ZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFegUI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCCwFqG2Yb3/s2iwV3Vq6VMiCAWf9xn+wCsweefROnrhrda8QFv yaUqKzqJXDdxovA8hFGDoop7lvVJqcfqLcbtFqn7cMdxvoLLb7rb6N55k9hdrGfv B//onGr6ziZRGP+nMMI7lqcQ2Ii1lfz202wxv4Z2+XtXjIRkyYyGOWj/NIdzNq/2 qtXGuvy7e6sLxxxu5MpBtLT+oEbZFVROk9HS8FnlL+bsSZ2jglgQmTU+xLsYb/Dm mdNkfKq7bQX1eP7HM4GCH74M6oDqeB4ooDBAZtsXyEviPBryq0gT4hH4X/GXDUvI 69BOHvLSolpTHOWvfmfbLVfDAiyZwtU5p24= -----END CERTIFICATE-----Generated at Sun Apr 6 15:59:40 2025 by rpki-client