$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e2d5b6a-4802-3b8c-91e6-2804ef2895c7.roa File: 1e2d5b6a-4802-3b8c-91e6-2804ef2895c7.roa (raw, json) Hash identifier: IiHy8IuYJk9/3WUywJ620OSfE5LrEQFb0E086cLB5bI= Subject key identifier: A0:34:3D:D2:E2:0C:C1:FC:B0:2F:DE:E4:AE:5C:F0:E6:43:A3:51:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858482D5A98D531A55175ED690780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e2d5b6a-4802-3b8c-91e6-2804ef2895c7.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 22773 IP address blocks: 2001:579:f220::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:98:d5:31:a5:51:75:ed:69:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=638e30c3-6ea5-42e1-b8c8-614affcb2b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c1:48:91:b9:dd:50:67:dc:53:6d:fc:be:77: d2:68:98:d2:71:cd:54:e1:a9:a6:3a:3a:4b:14:88: d4:83:8f:74:a5:e4:28:82:ec:88:4d:3a:62:26:d8: 5c:a9:58:be:66:ce:fb:5b:26:de:8e:36:e1:90:50: 48:d6:62:74:4d:bf:f8:c5:e9:be:d5:00:20:21:4c: 42:98:41:0a:76:12:57:3e:fd:2d:d2:73:22:0d:3c: 6b:3f:26:b0:5c:57:b9:32:7f:d7:73:57:93:9e:5a: 10:ac:b7:db:e9:7c:72:b9:8e:2e:37:78:58:43:35: 19:36:be:57:f4:61:87:b6:9e:51:25:7b:9d:19:85: 94:7a:9e:1d:0a:92:19:84:ac:a6:c0:72:42:76:fe: f4:ba:78:c0:ab:48:0d:8d:6e:e4:3f:a1:0e:c8:13: 9c:c3:65:37:be:c3:84:10:fa:a3:37:52:ae:1d:24: 54:4f:91:dd:6c:b1:6d:a1:60:22:93:6b:7d:a8:ba: 40:31:dd:a8:05:1b:5a:50:b1:e9:ac:de:a6:73:c3: 49:46:92:b4:2a:78:25:2e:af:89:a3:94:25:83:6d: 05:19:a5:91:95:5f:12:01:10:89:3c:93:24:62:ce: a0:14:e2:6c:d7:5d:14:53:ac:3b:d8:eb:1d:58:a6: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:34:3D:D2:E2:0C:C1:FC:B0:2F:DE:E4:AE:5C:F0:E6:43:A3:51:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e2d5b6a-4802-3b8c-91e6-2804ef2895c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:f220::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:66:c8:95:67:22:73:88:0e:97:98:1f:77:4f:60:74:c3:ae: 19:66:d5:8d:e2:84:92:b3:2f:5e:08:17:4e:78:c7:83:d0:b0: c9:96:47:b3:3a:0b:80:51:31:73:8b:99:8d:70:10:40:4f:20: 84:3f:57:0e:07:ae:28:58:93:83:41:8c:94:55:b3:74:f4:44: 54:1c:04:97:4c:52:14:b2:1c:f4:d5:12:f4:9b:9f:6a:85:ef: df:12:f7:43:c3:59:94:88:44:e1:9d:84:71:53:c8:78:b8:49: ed:4b:45:df:bd:15:8a:33:e7:9d:96:78:2e:fd:d8:f4:07:b3: 6b:0d:f0:20:11:9b:9c:9f:a5:e7:05:2d:ee:01:cb:c5:7f:27: 8a:a2:11:64:95:06:ef:95:8a:88:05:ae:85:c0:20:5d:3e:9f: 43:83:38:b2:ad:c9:43:76:ec:80:6f:97:05:ed:c8:e8:17:53: 75:28:0d:eb:1b:c7:ae:a5:77:22:ce:a2:b1:70:2b:b6:12:6c: 11:bc:61:b0:d8:fd:9e:b6:e8:a1:90:cf:31:50:89:62:b2:28: a6:a4:c5:4f:6f:33:70:0b:ec:ef:ea:d0:74:ac:d2:ef:be:22: 70:16:43:3d:1a:11:99:1c:dc:7d:37:b6:4f:a6:92:c0:b1:ec: f5:b5:e1:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgtWpjVMaVRde1pB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk NjM4ZTMwYzMtNmVhNS00MmUxLWI4YzgtNjE0YWZmY2IyYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcFIkbndUGfcU238vnfSaJjScc1U4ammOjpL FIjUg490peQoguyITTpiJthcqVi+Zs77WybejjbhkFBI1mJ0Tb/4xem+1QAgIUxC mEEKdhJXPv0t0nMiDTxrPyawXFe5Mn/Xc1eTnloQrLfb6XxyuY4uN3hYQzUZNr5X 9GGHtp5RJXudGYWUep4dCpIZhKymwHJCdv70unjAq0gNjW7kP6EOyBOcw2U3vsOE EPqjN1KuHSRUT5HdbLFtoWAik2t9qLpAMd2oBRtaULHprN6mc8NJRpK0KnglLq+J o5Qlg20FGaWRlV8SARCJPJMkYs6gFOJs110UU6w72OsdWKZReQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKA0PdLiDMH8sC/e5K5c8OZDo1FhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWUyZDViNmEtNDgwMi0z YjhjLTkxZTYtMjgwNGVmMjg5NWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFefIg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAARmyJVnInOIDpeYH3dPYHTDrhlm1Y3ihJKzL14IF054x4PQsMmW R7M6C4BRMXOLmY1wEEBPIIQ/Vw4HrihYk4NBjJRVs3T0RFQcBJdMUhSyHPTVEvSb n2qF798S90PDWZSIROGdhHFTyHi4Se1LRd+9FYoz552WeC792PQHs2sN8CARm5yf pecFLe4By8V/J4qiEWSVBu+ViogFroXAIF0+n0ODOLKtyUN27IBvlwXtyOgXU3Uo Desbx66ldyLOorFwK7YSbBG8YbDY/Z626KGQzzFQiWKyKKakxU9vM3AL7O/q0HSs 0u++InAWQz0aEZkc3H03tk+mksCx7PW14Us= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:18 2025 by rpki-client