$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/320788ea-4949-3a17-896e-9e7914e1016f.roa File: 320788ea-4949-3a17-896e-9e7914e1016f.roa (raw, json) Hash identifier: 5KQTcZKjW/AoU2Cpxj5w1BXmzyaKVhz4O7K3jHYHIx0= Subject key identifier: 95:28:41:50:1E:6A:A5:57:4C:29:18:FE:7F:64:2F:B8:5C:FC:8D:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328583DCC37F16EA6C8CB19900B7B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/320788ea-4949-3a17-896e-9e7914e1016f.roa Signing time: Wed 04 May 2022 12:00:00 +0000 ROA not before: Wed 04 May 2022 12:00:00 +0000 ROA not after: Wed 05 May 2027 04:00:00 +0000 asID: 22773 IP address blocks: 2001:579:e208::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:cc:37:f1:6e:a6:c8:cb:19:90:0b:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 4 12:00:00 2022 GMT Not After : May 5 04:00:00 2027 GMT Subject: CN=1832d478-1cec-4181-9a56-cca6c74f61aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b4:c3:f5:01:79:ed:74:83:64:2f:27:9f:e7: 20:0b:08:28:71:48:1a:c2:d5:a7:ef:80:1d:88:69: 09:cb:e0:a5:05:31:0f:3c:01:0f:11:18:d9:f9:cc: a7:e2:16:12:81:21:3f:ce:dc:89:f0:07:6b:27:e9: 98:3a:ea:f2:c1:73:65:79:39:9b:fc:e3:56:62:32: 21:e8:b8:9f:15:71:cd:f5:e3:00:ad:13:66:34:68: 62:53:dc:bb:ad:9d:ba:f9:64:30:83:f1:67:99:87: 60:48:ae:f9:35:fa:e6:28:80:b7:d1:5a:df:dc:e1: 6b:bd:7b:2e:65:32:47:59:f3:e1:c3:44:75:68:a1: 18:f0:80:8d:3f:ac:63:bd:0d:02:fb:a5:b1:98:58: 87:91:5b:03:a9:ab:cb:77:0c:36:f4:4f:e3:61:61: e6:7a:6f:3e:9c:98:a4:6c:53:53:08:20:14:d4:d1: b1:1a:06:65:59:5b:98:02:58:1f:8b:08:1d:f7:3b: c6:5e:c3:e6:f2:6a:3d:81:9a:81:06:91:85:97:69: eb:94:f1:c9:7f:2e:11:68:d1:80:80:a3:29:90:bc: 47:77:ab:53:fe:31:da:1b:0d:3b:8d:ac:08:fc:2b: 01:2f:41:05:26:af:87:6c:4e:5b:d6:33:d0:ce:b2: 20:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:28:41:50:1E:6A:A5:57:4C:29:18:FE:7F:64:2F:B8:5C:FC:8D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/320788ea-4949-3a17-896e-9e7914e1016f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:e208::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2e:07:11:03:70:eb:1c:d3:de:02:84:d8:9b:7a:e2:b7:93: 11:02:49:b7:a7:5c:53:45:9d:a8:3a:c4:aa:04:e9:fd:10:28: 24:57:6d:7d:65:17:ae:3c:6e:ce:f8:90:b1:8c:98:e2:44:5e: 8a:09:2d:6b:01:7c:07:d2:2b:de:bb:6f:da:2c:a6:8d:ec:82: ab:0a:f2:44:f1:2a:ae:c2:12:34:cc:5c:d0:00:58:55:9c:8c: dc:84:e8:a6:94:6b:90:9a:c0:41:e0:9a:60:d6:8d:d9:07:b1: 4e:fe:08:7e:06:19:27:fe:06:e7:bf:9e:92:5a:eb:3f:16:e4: 25:09:f2:06:4d:60:a9:c9:7a:8c:09:ea:03:81:e2:4e:a8:02: 36:14:5b:47:e7:fc:da:c0:d8:74:63:01:56:dd:92:8d:63:a6: 76:e2:40:ea:2a:20:64:85:7a:b6:2a:8c:06:dc:55:ba:a0:c7: ae:aa:b7:90:68:a5:12:4a:16:04:ec:e8:5f:b8:a2:74:49:3d: 53:1c:fe:fa:ad:ab:b8:5f:f5:fd:bf:77:5c:ba:9c:52:93:b6: 60:81:ab:85:31:0b:0e:29:72:91:12:32:e8:50:32:e9:c5:c0: ab:95:62:03:10:df:21:25:07:ca:58:29:59:11:71:bc:e7:40: 38:14:12:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3MN/FupsjLGZALewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTIyMDUwNDEyMDAwMFoXDTI3MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk MTgzMmQ0NzgtMWNlYy00MTgxLTlhNTYtY2NhNmM3NGY2MWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbTD9QF57XSDZC8nn+cgCwgocUgawtWn74Ad iGkJy+ClBTEPPAEPERjZ+cyn4hYSgSE/ztyJ8AdrJ+mYOurywXNleTmb/ONWYjIh 6LifFXHN9eMArRNmNGhiU9y7rZ26+WQwg/FnmYdgSK75NfrmKIC30Vrf3OFrvXsu ZTJHWfPhw0R1aKEY8ICNP6xjvQ0C+6WxmFiHkVsDqavLdww29E/jYWHmem8+nJik bFNTCCAU1NGxGgZlWVuYAlgfiwgd9zvGXsPm8mo9gZqBBpGFl2nrlPHJfy4RaNGA gKMpkLxHd6tT/jHaGw07jawI/CsBL0EFJq+HbE5b1jPQzrIgIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJUoQVAeaqVXTCkY/n9kL7hc/I3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzIwNzg4ZWEtNDk0OS0z YTE3LTg5NmUtOWU3OTE0ZTEwMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeeII MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUuBxEDcOsc094ChNibeuK3kxECSbenXFNFnag6xKoE6f0QKCRX bX1lF648bs74kLGMmOJEXooJLWsBfAfSK967b9ospo3sgqsK8kTxKq7CEjTMXNAA WFWcjNyE6KaUa5CawEHgmmDWjdkHsU7+CH4GGSf+Bue/npJa6z8W5CUJ8gZNYKnJ eowJ6gOB4k6oAjYUW0fn/NrA2HRjAVbdko1jpnbiQOoqIGSFerYqjAbcVbqgx66q t5BopRJKFgTs6F+4onRJPVMc/vqtq7hf9f2/d1y6nFKTtmCBq4UxCw4pcpESMuhQ MunFwKuVYgMQ3yElB8pYKVkRcbznQDgUElI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:10 2025 by rpki-client