$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66269770-5319-3f16-a601-35f3dcefcc10.roa File: 66269770-5319-3f16-a601-35f3dcefcc10.roa (raw, json) Hash identifier: iHKeemqNb0+Wgz1cjyK8bHhT7QjPo6vlfUwTGSUnSYI= Subject key identifier: 00:99:78:F9:56:CE:A4:11:F0:9E:1F:D1:32:BA:CB:4F:58:3B:3E:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849244E8B84A9F637B677D6E180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66269770-5319-3f16-a601-35f3dcefcc10.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 22773 IP address blocks: 2001:578:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8b:84:a9:f6:37:b6:77:d6:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=e4b003ee-95d2-468c-b6a6-85ee8d0f5fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:94:83:58:49:99:a1:32:c7:b4:55:10:f6:cf: de:bc:3d:5a:ed:49:e1:b2:f3:6a:6f:e3:07:82:29: 93:00:f7:cf:94:c7:06:92:2f:80:c2:62:77:77:04: 33:04:f2:23:b3:a4:47:48:e0:67:e3:76:e3:34:3e: 9c:b0:ab:d7:e1:f4:eb:9f:84:89:9a:dc:45:7a:ac: 37:98:0d:84:d8:51:e5:f9:44:af:85:f0:2e:d6:2b: 9e:50:29:02:b6:f4:55:20:a4:6e:3b:59:22:2e:d1: 70:81:20:28:0e:b5:56:0e:8f:e6:9a:e2:7a:d6:e7: 9a:c8:37:78:59:fb:44:43:3e:91:0c:00:4b:77:fd: 25:af:0e:2d:25:0a:5a:f7:fc:6b:e7:9e:85:77:d3: fa:d2:54:cb:a0:8b:1f:2d:09:66:c1:88:28:a7:d2: 33:1f:3e:84:8e:8f:12:37:be:22:b6:67:cb:f4:76: e2:17:55:a7:07:ed:e0:c2:c1:bc:66:c3:b6:0b:29: 4d:41:ca:1d:67:86:ce:cd:33:07:cb:2f:70:c9:42: 7f:6a:af:cc:48:19:9a:3b:09:fe:77:6c:94:06:55: 33:4a:34:c1:83:1c:07:2e:74:60:58:98:da:3d:8c: 62:b6:32:9f:34:f9:b2:3f:5c:43:ad:46:e3:df:ca: 9e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:99:78:F9:56:CE:A4:11:F0:9E:1F:D1:32:BA:CB:4F:58:3B:3E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66269770-5319-3f16-a601-35f3dcefcc10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e4:80:a3:9c:60:e2:e3:76:4a:63:55:ff:51:30:60:fb:a8: ef:c0:c6:e4:67:85:8e:d5:99:6f:1b:56:39:20:09:e4:17:e2: 8f:8f:ac:a9:45:b5:48:14:cc:1b:69:69:e9:d1:9c:59:16:c1: f5:03:3a:12:cb:08:8e:0d:2d:b2:58:89:b4:39:60:2b:8d:a7: 79:81:6f:46:59:14:af:1c:9d:20:3a:b9:45:df:a3:40:46:18: 05:10:b9:68:c8:4f:1e:ca:06:65:56:06:e0:01:52:c4:02:78: 4b:94:8a:c0:70:4c:46:ae:d0:7e:bd:68:93:3a:80:38:35:b5: b3:5f:c5:6d:dc:b8:3e:82:91:84:cb:dd:e9:90:17:ac:64:2a: 45:03:8a:cd:8c:0a:cf:20:73:1b:43:ba:38:b9:a7:d6:07:b0: 9d:5f:ac:d1:2f:20:ee:c7:93:1b:33:9c:ea:66:c7:4b:56:c4: 14:2a:ea:70:fe:21:31:fa:4f:21:44:ff:7c:19:14:dd:6f:9e: 07:56:68:3e:a0:03:9f:75:10:91:82:67:35:b8:91:09:e5:ce: e5:e0:ec:74:63:0f:e3:45:76:60:b6:fa:fb:7e:13:37:5e:e5: 64:31:8d:09:30:ce:60:64:88:f8:02:b1:60:76:15:5b:83:ba: 41:96:45:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkkTouEqfY3tnfW4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZTRiMDAzZWUtOTVkMi00NjhjLWI2YTYtODVlZThkMGY1ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5SDWEmZoTLHtFUQ9s/evD1a7UnhsvNqb+MH gimTAPfPlMcGki+AwmJ3dwQzBPIjs6RHSOBn43bjND6csKvX4fTrn4SJmtxFeqw3 mA2E2FHl+USvhfAu1iueUCkCtvRVIKRuO1kiLtFwgSAoDrVWDo/mmuJ61ueayDd4 WftEQz6RDABLd/0lrw4tJQpa9/xr556Fd9P60lTLoIsfLQlmwYgop9IzHz6Ejo8S N74itmfL9HbiF1WnB+3gwsG8ZsO2CylNQcodZ4bOzTMHyy9wyUJ/aq/MSBmaOwn+ d2yUBlUzSjTBgxwHLnRgWJjaPYxitjKfNPmyP1xDrUbj38qegwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFACZePlWzqQR8J4f0TK6y09YOz6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjYyNjk3NzAtNTMxOS0z ZjE2LWE2MDEtMzVmM2RjZWZjYzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnkgKOcYOLjdkpjVf9RMGD7qO/AxuRnhY7VmW8bVjkgCeQX4o+P rKlFtUgUzBtpaenRnFkWwfUDOhLLCI4NLbJYibQ5YCuNp3mBb0ZZFK8cnSA6uUXf o0BGGAUQuWjITx7KBmVWBuABUsQCeEuUisBwTEau0H69aJM6gDg1tbNfxW3cuD6C kYTL3emQF6xkKkUDis2MCs8gcxtDuji5p9YHsJ1frNEvIO7HkxsznOpmx0tWxBQq 6nD+ITH6TyFE/3wZFN1vngdWaD6gA591EJGCZzW4kQnlzuXg7HRjD+NFdmC2+vt+ Ezde5WQxjQkwzmBkiPgCsWB2FVuDukGWRQg= -----END CERTIFICATE-----Generated at Fri Mar 14 11:11:05 2025 by rpki-client