$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33b4ae86-d863-3917-937e-8e9f0c244ad4.roa File: 33b4ae86-d863-3917-937e-8e9f0c244ad4.roa (raw, json) Hash identifier: euKKjEUznD6uCTVTeQlpIiVPzD0Oajj30gNXTJVW2RM= Subject key identifier: CF:DB:D8:C6:BB:F1:80:7A:CB:12:D1:A7:5E:14:48:C3:AE:5B:6A:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848DA71049F5E98DBF65169AA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33b4ae86-d863-3917-937e-8e9f0c244ad4.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 22773 IP address blocks: 2001:579:d2c4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:04:9f:5e:98:db:f6:51:69:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=ced414e3-cf14-4c28-8695-f969da2ea804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:c2:7d:64:6e:59:1b:39:ce:d9:43:b0:cc: 40:4f:fa:2c:65:c1:ed:f7:9b:6f:69:a0:f0:35:18: 60:61:fc:c6:cc:9b:ee:a6:34:69:26:b6:f0:8e:b1: 04:c6:aa:fa:99:23:8c:a5:84:07:cc:bb:bd:c9:85: 14:6b:4a:e5:ee:f4:ae:38:be:df:92:5f:fa:5e:ab: d6:63:6e:45:7a:9c:91:af:28:b7:de:0b:22:19:7e: dc:52:36:6e:3b:e1:e6:7b:9c:19:2f:fc:eb:91:af: 09:ca:85:9b:80:b8:d0:ff:2f:b5:b6:36:4b:62:67: e0:45:79:bb:ef:23:bb:81:bf:da:15:dc:bd:c8:6b: f6:03:70:6a:36:37:1c:da:2b:05:56:4e:12:ac:f1: e6:e9:2a:e9:2b:cd:13:4f:45:66:55:8a:f1:5d:0c: da:2b:8e:49:58:10:eb:9c:38:64:9e:7d:93:a7:87: e8:ee:63:6e:46:1e:27:7e:91:54:33:d5:a0:23:42: eb:0e:16:4a:cd:14:1e:30:b1:76:0e:b1:7a:3f:60: c9:65:98:72:00:27:93:61:50:c0:76:04:2e:db:3a: af:bc:38:39:a3:f0:0d:6f:2c:a4:f8:c2:c6:b2:26: d7:12:75:d5:79:f0:41:7b:e1:1f:9b:12:e9:0a:f5: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DB:D8:C6:BB:F1:80:7A:CB:12:D1:A7:5E:14:48:C3:AE:5B:6A:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33b4ae86-d863-3917-937e-8e9f0c244ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:d2c4::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0b:61:f8:c1:26:4c:44:b1:68:1c:88:4d:05:09:1f:70:82: 31:f0:92:d9:e3:68:e3:08:a8:04:c7:e6:bd:aa:5d:5e:30:48: 53:54:39:3a:c6:b0:78:36:08:84:e7:e1:2a:2c:a2:08:13:39: 3e:ba:f7:ce:d4:3d:5b:c8:7c:9e:f6:e4:f7:5e:e4:2d:21:62: ab:b9:e4:ce:cc:22:5b:5c:68:b8:7b:52:e4:9c:d4:6f:e5:09: e6:68:b6:f8:4f:95:ee:70:c3:84:c9:e3:93:ff:a5:86:4f:ce: 0c:48:8e:8d:36:00:fe:b7:c9:8d:a5:9e:57:0c:c4:dc:a8:f5: 5b:46:09:fb:65:9e:59:1d:8d:38:56:ad:98:8a:5c:40:4c:c7: 39:57:2a:d6:7e:62:02:48:a9:fb:c5:26:57:d9:1a:bf:7e:87: bc:74:45:11:79:df:53:49:b3:ae:4c:ad:ae:db:da:de:b8:f2: 3c:f7:9c:b1:a8:be:75:3e:a2:21:5e:b1:bf:8b:9b:7a:12:0e: 52:e7:25:13:30:12:25:86:fa:0b:3d:e8:dd:c8:f6:a4:0d:78: 5e:d0:67:80:24:de:d1:ad:36:ba:69:77:86:b1:0a:79:f3:0b: 24:7a:19:14:89:be:16:18:36:f3:de:e3:38:58:f3:b9:35:a5: 57:c9:ea:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjacQSfXpjb9lFpqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk Y2VkNDE0ZTMtY2YxNC00YzI4LTg2OTUtZjk2OWRhMmVhODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCfCfWRuWRs5ztlDsMxAT/osZcHt95tvaaDw NRhgYfzGzJvupjRpJrbwjrEExqr6mSOMpYQHzLu9yYUUa0rl7vSuOL7fkl/6XqvW Y25FepyRryi33gsiGX7cUjZuO+Hme5wZL/zrka8JyoWbgLjQ/y+1tjZLYmfgRXm7 7yO7gb/aFdy9yGv2A3BqNjcc2isFVk4SrPHm6SrpK80TT0VmVYrxXQzaK45JWBDr nDhknn2Tp4fo7mNuRh4nfpFUM9WgI0LrDhZKzRQeMLF2DrF6P2DJZZhyACeTYVDA dgQu2zqvvDg5o/ANbyyk+MLGsibXEnXVefBBe+EfmxLpCvU1fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM/b2Ma78YB6yxLRp14USMOuW2rBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNiNGFlODYtZDg2My0z OTE3LTkzN2UtOGU5ZjBjMjQ0YWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFedLE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIoLYfjBJkxEsWgciE0FCR9wgjHwktnjaOMIqATH5r2qXV4wSFNU OTrGsHg2CITn4SosoggTOT66987UPVvIfJ725Pde5C0hYqu55M7MIltcaLh7UuSc 1G/lCeZotvhPle5ww4TJ45P/pYZPzgxIjo02AP63yY2lnlcMxNyo9VtGCftlnlkd jThWrZiKXEBMxzlXKtZ+YgJIqfvFJlfZGr9+h7x0RRF531NJs65Mra7b2t648jz3 nLGovnU+oiFesb+Lm3oSDlLnJRMwEiWG+gs96N3I9qQNeF7QZ4Ak3tGtNrppd4ax CnnzCyR6GRSJvhYYNvPe4zhY87k1pVfJ6qo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:57 2025 by rpki-client