$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af35479-f2e6-33ec-a42d-90f04a52e8c9.roa File: 3af35479-f2e6-33ec-a42d-90f04a52e8c9.roa (raw, json) Hash identifier: emXcdFrDajl0o3ILiyK7t2n3rwayijhPwz4vAgQs3+g= Subject key identifier: 27:CC:EA:F3:3C:F4:46:81:45:BD:8B:4D:2F:06:EA:5B:6F:A0:C2:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB17E9EAF77E29BD37FB080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af35479-f2e6-33ec-a42d-90f04a52e8c9.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 2001:579:f0fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:7e:9e:af:77:e2:9b:d3:7f:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=f4bb75ef-b4bc-4f87-8921-93f3e47abd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:17:62:f1:37:45:79:d3:d3:7b:1e:f0:27:5d: 66:f5:62:c8:e8:05:57:77:82:33:d7:d8:f3:a4:e6: fd:a6:19:55:cd:2e:39:9b:68:1b:63:8a:a8:b1:a2: 4e:8a:0b:20:62:1f:63:1b:46:e6:83:47:27:f2:c2: 98:03:b6:18:24:45:87:90:4b:2e:2f:43:f8:ba:32: 3c:e6:b5:5c:46:f7:a0:36:ed:66:d7:c8:d9:23:68: 4a:26:5b:fb:42:83:dd:da:6f:40:1e:37:26:ac:26: 1e:f4:37:a5:42:ef:94:a1:5f:a7:f6:28:46:0e:9a: 4b:c7:0b:b4:e6:b4:34:0d:ca:10:75:4c:0b:33:96: 3f:ca:a8:3f:2f:1e:a7:64:d6:7d:59:ae:f2:8c:78: 3c:a9:f1:04:ca:4c:14:50:2a:85:6a:9d:93:d0:bb: 7b:79:a4:e0:88:44:92:f2:7f:94:00:64:60:e3:82: 92:b8:ae:b3:aa:31:4b:8b:9f:e9:ab:e6:ab:48:79: a7:cc:9a:99:29:51:49:8b:db:3a:52:a4:98:da:0b: b6:b1:eb:13:5c:4d:f4:41:e0:05:c4:51:7d:5b:ff: b0:e7:1d:e6:63:0c:a0:c4:14:92:15:25:ec:7d:43: 44:49:fd:c2:2a:bc:17:be:17:46:40:3f:e8:29:16: 20:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CC:EA:F3:3C:F4:46:81:45:BD:8B:4D:2F:06:EA:5B:6F:A0:C2:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af35479-f2e6-33ec-a42d-90f04a52e8c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:f0fc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:22:50:a4:41:91:be:95:ae:19:23:7d:c6:b5:cb:77:29:77: dc:77:76:ce:ad:df:9d:da:72:8f:04:a5:16:d5:a4:f0:4b:40: 0f:b5:86:92:43:a8:10:b7:95:0c:5d:4f:a2:ad:b3:3c:72:3b: ce:5c:4f:c3:39:1b:37:d9:da:1c:6b:59:00:2f:75:0c:33:da: 47:2f:93:77:f2:95:ef:30:61:b3:d2:c6:f1:92:d2:d4:07:d3: 28:2e:3b:18:d5:84:00:8b:8a:16:f2:fa:99:ae:ef:dc:45:4b: 68:97:81:91:26:db:85:6c:a6:4f:86:da:36:68:22:a4:57:5c: 9e:17:96:e5:e0:98:e1:86:f4:bc:cc:b3:5d:c0:cf:ab:9f:bd: 08:95:1d:e7:f4:6a:b9:27:a4:fb:a1:96:81:52:fa:44:1b:fa: 8f:a4:fb:ac:a5:59:03:53:a4:0b:ec:bb:bf:b8:66:7e:54:77: bf:6f:77:39:6f:db:6e:61:3b:d3:08:8c:ad:bc:5f:52:59:9f: cf:11:be:da:87:bd:f9:a5:e0:00:2e:33:15:12:e8:ac:ad:7c: 07:d5:e6:f2:63:d2:77:a5:98:b2:a8:a2:a2:48:c8:ac:23:b6: 5d:27:fc:3a:5c:94:7e:f8:34:de:22:ad:d5:2a:28:69:4e:d6: f5:d7:27:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsX6er3fim9N/sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZjRiYjc1ZWYtYjRiYy00Zjg3LTg5MjEtOTNmM2U0N2FiZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Rdi8TdFedPTex7wJ11m9WLI6AVXd4Iz19jz pOb9phlVzS45m2gbY4qosaJOigsgYh9jG0bmg0cn8sKYA7YYJEWHkEsuL0P4ujI8 5rVcRvegNu1m18jZI2hKJlv7QoPd2m9AHjcmrCYe9DelQu+UoV+n9ihGDppLxwu0 5rQ0DcoQdUwLM5Y/yqg/Lx6nZNZ9Wa7yjHg8qfEEykwUUCqFap2T0Lt7eaTgiESS 8n+UAGRg44KSuK6zqjFLi5/pq+arSHmnzJqZKVFJi9s6UqSY2gu2sesTXE30QeAF xFF9W/+w5x3mYwygxBSSFSXsfUNESf3CKrwXvhdGQD/oKRYgRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCfM6vM89EaBRb2LTS8G6ltvoMIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FmMzU0NzktZjJlNi0z M2VjLWE0MmQtOTBmMDRhNTJlOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFefD8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAgiUKRBkb6Vrhkjfca1y3cpd9x3ds6t353aco8EpRbVpPBLQA+1 hpJDqBC3lQxdT6KtszxyO85cT8M5GzfZ2hxrWQAvdQwz2kcvk3fyle8wYbPSxvGS 0tQH0yguOxjVhACLihby+pmu79xFS2iXgZEm24Vspk+G2jZoIqRXXJ4XluXgmOGG 9LzMs13Az6ufvQiVHef0arknpPuhloFS+kQb+o+k+6ylWQNTpAvsu7+4Zn5Ud79v dzlv225hO9MIjK28X1JZn88RvtqHvfml4AAuMxUS6KytfAfV5vJj0nelmLKooqJI yKwjtl0n/DpclH74NN4irdUqKGlO1vXXJ+I= -----END CERTIFICATE-----Generated at Sun Apr 6 16:02:02 2025 by rpki-client