$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fef5aaa-ca19-3d98-aaaa-8a67fb7a17fa.roa File: 1fef5aaa-ca19-3d98-aaaa-8a67fb7a17fa.roa (raw, json) Hash identifier: 3O/256WIQoQlyAMvIgTlO05krFDBU6JVqaDz8RaOY4s= Subject key identifier: 50:7A:E6:50:5F:E5:C6:10:EF:C7:CF:2D:8E:70:91:BF:D1:F1:61:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848C150E6165C40E9608DA8B9C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fef5aaa-ca19-3d98-aaaa-8a67fb7a17fa.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 22773 IP address blocks: 2001:579:b888::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:e6:16:5c:40:e9:60:8d:a8:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=734176d7-2e70-4a4c-b0c5-aded6bc726d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:67:c9:01:5b:2a:89:77:03:cc:72:30:b9: f7:14:35:e1:e1:0a:aa:50:09:e8:ed:ad:2f:0c:f5: 60:1f:50:80:fc:f2:b7:0f:d5:8d:46:e1:61:dd:7f: c6:c9:45:e2:e8:25:8e:07:c6:fa:a8:4c:b9:cd:49: 2f:0d:42:b2:f1:b8:7c:65:f0:58:08:39:97:16:5c: d2:fe:f3:5d:fb:3b:42:c7:c9:cc:2b:6a:b4:2d:de: a9:34:43:40:50:dd:35:e8:7c:57:03:29:10:b8:95: f6:75:92:ec:7e:3e:ac:53:a5:3b:0c:ad:75:b5:2d: c4:9e:b5:3e:cc:3f:5c:fc:83:89:19:e3:58:0f:81: cc:75:48:b3:71:5b:e4:66:88:56:3c:86:f2:bf:37: ba:c8:f8:55:b4:9a:82:1f:6e:35:0a:40:11:05:12: c2:bc:69:d0:3e:2f:d8:d7:a4:ae:02:79:e8:cd:96: 37:cf:a1:52:96:32:c1:57:5c:48:4d:28:cd:d6:7b: 1a:9a:55:f9:8c:22:bb:60:22:dc:f4:be:a2:62:cb: e7:f3:ea:db:80:30:db:dc:5c:80:30:54:d9:b3:fc: 1c:56:09:5a:0f:67:61:35:15:6f:78:85:c3:c8:50: 46:35:d5:e4:6b:c6:92:4a:80:e1:87:d7:e9:d8:d8: 1a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7A:E6:50:5F:E5:C6:10:EF:C7:CF:2D:8E:70:91:BF:D1:F1:61:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fef5aaa-ca19-3d98-aaaa-8a67fb7a17fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:b888::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:22:96:79:ed:3f:08:90:84:c8:d5:f1:1f:0b:21:7b:21:c2: d4:34:09:1a:63:5c:89:1b:a5:90:19:dc:2b:14:f2:b2:09:f4: 67:80:96:61:f2:9e:57:cd:2e:9b:15:de:64:31:ec:af:60:ff: 18:3c:61:ed:30:22:fc:dc:82:e2:92:48:2f:a1:5c:84:2f:f1: 73:a7:20:c1:08:7a:f4:28:3a:79:fe:76:f7:69:b6:a3:46:ce: 04:c9:74:ab:27:20:d1:fd:de:75:5a:24:f6:29:41:96:dc:13: d4:69:58:5e:d3:c5:d7:c8:96:25:bd:9d:6a:03:13:b9:fa:2e: 71:04:4d:9f:36:fc:38:c5:b1:31:3e:16:6f:1e:e8:12:93:83: d2:7a:69:8b:36:f7:2c:24:06:1f:7f:47:a9:94:db:48:48:0c: 49:8b:e5:1e:61:58:5d:cb:24:ea:88:83:00:15:90:c5:28:99: 49:6f:9d:ca:20:20:aa:d4:28:cf:81:ab:79:c7:d3:79:7f:61: d3:9d:30:d0:a1:06:e1:cc:3d:50:d6:35:eb:da:06:13:2b:4e: ac:e6:49:4a:5b:b5:dc:93:0a:84:23:54:1a:99:43:27:6a:69: 4a:19:41:ef:81:c8:c1:74:e3:9f:64:f8:a9:68:f8:f4:e7:66: 0f:f1:99:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjBUOYWXEDpYI2oucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk NzM0MTc2ZDctMmU3MC00YTRjLWIwYzUtYWRlZDZiYzcyNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGtnyQFbKol3A8xyMLn3FDXh4QqqUAno7a0v DPVgH1CA/PK3D9WNRuFh3X/GyUXi6CWOB8b6qEy5zUkvDUKy8bh8ZfBYCDmXFlzS /vNd+ztCx8nMK2q0Ld6pNENAUN016HxXAykQuJX2dZLsfj6sU6U7DK11tS3EnrU+ zD9c/IOJGeNYD4HMdUizcVvkZohWPIbyvze6yPhVtJqCH241CkARBRLCvGnQPi/Y 16SuAnnozZY3z6FSljLBV1xITSjN1nsamlX5jCK7YCLc9L6iYsvn8+rbgDDb3FyA MFTZs/wcVglaD2dhNRVveIXDyFBGNdXka8aSSoDhh9fp2NgazQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFB65lBf5cYQ78fPLY5wkb/R8WGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWZlZjVhYWEtY2ExOS0z ZDk4LWFhYWEtOGE2N2ZiN2ExN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFebiI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUilnntPwiQhMjV8R8LIXshwtQ0CRpjXIkbpZAZ3CsU8rIJ9GeA lmHynlfNLpsV3mQx7K9g/xg8Ye0wIvzcguKSSC+hXIQv8XOnIMEIevQoOnn+dvdp tqNGzgTJdKsnINH93nVaJPYpQZbcE9RpWF7TxdfIliW9nWoDE7n6LnEETZ82/DjF sTE+Fm8e6BKTg9J6aYs29ywkBh9/R6mU20hIDEmL5R5hWF3LJOqIgwAVkMUomUlv ncogIKrUKM+Bq3nH03l/YdOdMNChBuHMPVDWNevaBhMrTqzmSUpbtdyTCoQjVBqZ QydqaUoZQe+ByMF0459k+Klo+PTnZg/xmS4= -----END CERTIFICATE-----Generated at Sun Apr 6 16:26:26 2025 by rpki-client