$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fa71ee-8b45-388b-9f58-a64afccff7cc.roa File: 20fa71ee-8b45-388b-9f58-a64afccff7cc.roa (raw, json) Hash identifier: kMIBKfMdGhDuBjpX9IgKBjhpbIC4/6hPEUPw1olulEg= Subject key identifier: 49:4B:D3:43:E6:AF:19:9F:59:75:3C:6A:D3:B8:43:12:AB:0F:37:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848C150E5AA7AA01EEB22317180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fa71ee-8b45-388b-9f58-a64afccff7cc.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 22773 IP address blocks: 2001:579:1890::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:e5:aa:7a:a0:1e:eb:22:31:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=935474d3-868a-4a13-8c71-b55ca57e5a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:56:00:48:53:80:0a:b7:6d:87:3e:38:12: a5:cc:ce:56:7b:50:0d:a6:80:53:84:2b:7b:04:da: b0:c0:b1:cb:5e:cb:4f:a8:10:ba:70:69:0c:a6:74: 3d:fd:b3:ee:3e:7d:54:80:d8:c5:b9:85:b3:54:29: 27:73:2e:80:79:be:52:fe:4e:49:f4:af:8d:23:0f: 55:09:e8:b3:4d:23:62:e5:2b:35:c3:78:85:ef:2c: ac:c4:29:d7:93:2b:25:38:58:1d:76:c6:d0:db:d3: 93:0b:af:9d:9a:24:1c:1f:39:69:55:1e:92:07:ea: da:f0:5d:bc:45:22:3d:83:69:bf:6a:e5:07:ae:12: 37:1d:a8:f1:b2:ad:79:82:60:b2:0c:31:f4:3a:a2: 99:9e:fe:e6:12:88:68:61:6d:82:33:cd:33:33:c9: ef:92:6a:6d:95:e8:e8:d8:88:7f:92:03:ca:a9:6c: 97:e5:20:93:09:e5:75:cc:36:c1:43:8c:69:f5:a1: 17:09:ad:d6:84:24:86:45:76:49:12:58:30:e9:eb: 94:16:e9:70:01:e5:9a:62:e6:e8:18:ec:ca:cf:13: ad:78:9f:87:79:19:35:e6:7f:ae:51:87:90:73:76: f0:c1:20:8b:dd:9d:94:7f:38:53:33:99:3a:52:1b: 9f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:D3:43:E6:AF:19:9F:59:75:3C:6A:D3:B8:43:12:AB:0F:37:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fa71ee-8b45-388b-9f58-a64afccff7cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:1890::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:03:7e:fd:ac:22:a1:33:b6:38:1f:73:05:ef:b9:57:42:a8: f4:e7:80:70:75:93:34:5b:a4:aa:fb:46:ba:51:8c:23:dc:d0: e8:d0:3c:15:ff:65:4e:90:13:c1:c6:69:47:a7:81:28:5c:35: cc:5e:94:04:2d:a1:18:c8:2f:1e:08:10:6b:fc:25:7e:7a:bd: 13:5c:b2:6a:ee:77:94:b3:90:1f:61:bf:7f:03:ac:c6:f7:64: fb:41:8f:e8:26:11:af:36:a4:2c:78:d3:87:1f:50:52:0b:fc: f2:0b:3c:6f:15:e9:da:90:ce:51:e6:34:ad:5a:fa:93:fe:49: 33:3d:6a:e0:da:62:ba:5a:aa:fb:a4:84:6e:5b:c6:d5:dc:9a: cd:46:c7:82:6e:59:19:7a:c4:f6:f1:70:34:76:e1:b2:43:53: a2:47:45:c1:4c:dc:60:61:52:d1:ed:08:db:e9:83:66:1b:6b: ff:6f:ca:52:fd:5f:93:d7:92:5a:d9:d7:30:de:b5:71:0a:38: 7f:fa:81:30:27:6a:dc:4a:96:58:8d:8f:75:d6:d9:87:a1:43: a1:b2:c9:fd:34:4c:2c:3e:2b:8b:4e:86:a6:3a:a0:e3:39:b8: 57:b0:77:3a:f7:42:fb:0e:2d:77:ac:2c:b9:75:12:2f:b8:d2: d8:1e:00:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjBUOWqeqAe6yIxcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk OTM1NDc0ZDMtODY4YS00YTEzLThjNzEtYjU1Y2E1N2U1YTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK1WAEhTgAq3bYc+OBKlzM5We1ANpoBThCt7 BNqwwLHLXstPqBC6cGkMpnQ9/bPuPn1UgNjFuYWzVCkncy6Aeb5S/k5J9K+NIw9V CeizTSNi5Ss1w3iF7yysxCnXkyslOFgddsbQ29OTC6+dmiQcHzlpVR6SB+ra8F28 RSI9g2m/auUHrhI3Hajxsq15gmCyDDH0OqKZnv7mEohoYW2CM80zM8nvkmptlejo 2Ih/kgPKqWyX5SCTCeV1zDbBQ4xp9aEXCa3WhCSGRXZJElgw6euUFulwAeWaYubo GOzKzxOteJ+HeRk15n+uUYeQc3bwwSCL3Z2UfzhTM5k6UhufqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFElL00PmrxmfWXU8atO4QxKrDzekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjBmYTcxZWUtOGI0NS0z ODhiLTlmNTgtYTY0YWZjY2ZmN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeRiQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4Dfv2sIqEztjgfcwXvuVdCqPTngHB1kzRbpKr7RrpRjCPc0OjQ PBX/ZU6QE8HGaUengShcNcxelAQtoRjILx4IEGv8JX56vRNcsmrud5SzkB9hv38D rMb3ZPtBj+gmEa82pCx404cfUFIL/PILPG8V6dqQzlHmNK1a+pP+STM9auDaYrpa qvukhG5bxtXcms1Gx4JuWRl6xPbxcDR24bJDU6JHRcFM3GBhUtHtCNvpg2Yba/9v ylL9X5PXklrZ1zDetXEKOH/6gTAnatxKlliNj3XW2YehQ6Gyyf00TCw+K4tOhqY6 oOM5uFewdzr3QvsOLXesLLl1Ei+40tgeAEk= -----END CERTIFICATE-----Generated at Sun Apr 6 17:50:44 2025 by rpki-client