$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52491a44-c5eb-3daf-853e-921c4a8ada84.roa File: 52491a44-c5eb-3daf-853e-921c4a8ada84.roa (raw, json) Hash identifier: gTFU5xZHh3vDXiMjMlUxnaTUvBPulk9vmnS/HtytJUE= Subject key identifier: 2E:17:9A:31:7D:D9:11:9A:DD:F0:AA:61:76:70:B4:47:6C:DB:C3:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858491AA6AB80540E6C0B8FF03055 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52491a44-c5eb-3daf-853e-921c4a8ada84.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 22773 IP address blocks: 2001:578:8200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:ab:80:54:0e:6c:0b:8f:f0:30:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=a3548830-c1d2-4c85-91e4-c0ba2aa39e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4c:2c:1e:a5:38:f6:7c:72:1d:e4:95:0f:b8: 3b:9e:44:25:85:b7:b2:ad:c0:d4:25:f2:b6:b0:75: 0f:10:0b:ec:53:76:77:37:96:34:5b:00:03:2a:24: dc:44:0a:9b:97:52:db:1c:c0:3a:1d:cd:6b:1b:6f: 7c:9a:7c:e0:16:f5:21:9b:31:94:06:4a:92:af:1f: d4:cc:a8:b2:a6:2d:04:69:6b:b1:be:7a:82:34:b9: 4a:9b:10:8d:ad:e6:0c:e5:fc:95:31:89:00:6f:10: 5c:a7:0a:32:7d:20:e3:89:64:c7:28:a8:4d:7e:02: 98:d9:5b:d4:01:ca:6a:f0:1a:02:4c:23:a4:0a:44: 58:a9:cb:83:25:ab:46:4e:9d:9f:8e:47:06:ae:fd: 52:ea:92:11:95:c0:d3:f5:7c:c6:e7:13:7a:71:71: b7:35:29:7d:a0:95:35:e2:ba:36:57:90:4b:1b:22: 04:13:ce:9d:9d:99:2c:bb:fa:44:35:1d:62:d3:66: eb:fe:24:2a:8d:0d:6c:0c:bc:f8:4a:17:59:40:dc: 57:82:61:c9:c3:48:03:a9:0a:00:d0:0a:8c:d3:e9: 39:90:09:2b:5a:32:d6:dc:9e:ed:91:d4:67:18:74: 81:fd:a5:82:46:30:f7:fc:6e:2e:47:a1:1a:21:45: 82:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:17:9A:31:7D:D9:11:9A:DD:F0:AA:61:76:70:B4:47:6C:DB:C3:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52491a44-c5eb-3daf-853e-921c4a8ada84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:8200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c0:a0:79:c6:de:93:62:5c:20:04:c8:88:5a:3c:2c:fa:ab: 6f:7f:4f:97:b6:7d:61:ea:0e:91:07:5b:a6:3f:06:93:ce:5a: 5d:58:63:cf:75:78:fc:b8:3c:e4:84:33:50:65:37:a2:e2:05: 5b:3a:f4:21:39:41:00:c4:e8:15:0d:6e:c5:bb:c8:40:cb:6d: bd:16:c5:9d:14:bd:fc:6f:30:eb:92:7d:f9:22:46:a6:56:3e: 75:d5:dd:51:3f:c5:45:63:b5:fa:06:28:cb:41:c1:64:80:31: ee:a2:3c:1d:e3:2c:39:56:40:ac:72:0e:56:55:c8:3d:8f:ec: 2b:bb:5b:2c:3b:9d:71:0f:46:f4:90:bd:11:22:e3:7d:0f:79: 85:5e:38:a1:b8:b4:20:97:e4:91:14:ea:7e:cb:dc:db:94:15: 82:67:10:85:6e:f6:89:60:2e:a9:40:3f:f5:8e:53:39:bb:7c: f3:11:c5:6c:be:46:74:1d:92:de:aa:29:54:65:c0:fd:b1:8b: 82:16:25:9b:97:b6:7c:c5:19:41:a0:ce:86:f4:23:8b:22:3a: 25:6e:de:16:9f:3c:59:73:4c:b9:a3:dd:9a:1f:49:bd:8a:a1: de:7a:3a:78:ed:1e:0f:18:9d:5b:65:60:3c:0c:81:da:91:dd: 21:81:03:86 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkapquAVA5sC4/wMFUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YTM1NDg4MzAtYzFkMi00Yzg1LTkxZTQtYzBiYTJhYTM5ZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0wsHqU49nxyHeSVD7g7nkQlhbeyrcDUJfK2 sHUPEAvsU3Z3N5Y0WwADKiTcRAqbl1LbHMA6Hc1rG298mnzgFvUhmzGUBkqSrx/U zKiypi0EaWuxvnqCNLlKmxCNreYM5fyVMYkAbxBcpwoyfSDjiWTHKKhNfgKY2VvU Acpq8BoCTCOkCkRYqcuDJatGTp2fjkcGrv1S6pIRlcDT9XzG5xN6cXG3NSl9oJU1 4ro2V5BLGyIEE86dnZksu/pENR1i02br/iQqjQ1sDLz4ShdZQNxXgmHJw0gDqQoA 0AqM0+k5kAkrWjLW3J7tkdRnGHSB/aWCRjD3/G4uR6EaIUWC5QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC4XmjF92RGa3fCqYXZwtEds28MxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI0OTFhNDQtYzVlYi0z ZGFmLTg1M2UtOTIxYzRhOGFkYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEFeIIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJsCgecbek2JcIATIiFo8LPqrb39Pl7Z9YeoOkQdbpj8Gk85aXVhj z3V4/Lg85IQzUGU3ouIFWzr0ITlBAMToFQ1uxbvIQMttvRbFnRS9/G8w65J9+SJG plY+ddXdUT/FRWO1+gYoy0HBZIAx7qI8HeMsOVZArHIOVlXIPY/sK7tbLDudcQ9G 9JC9ESLjfQ95hV44obi0IJfkkRTqfsvc25QVgmcQhW72iWAuqUA/9Y5TObt88xHF bL5GdB2S3qopVGXA/bGLghYlm5e2fMUZQaDOhvQjiyI6JW7eFp88WXNMuaPdmh9J vYqh3no6eO0eDxidW2VgPAyB2pHdIYEDhg== -----END CERTIFICATE-----Generated at Sun Apr 6 15:58:24 2025 by rpki-client