$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ad9bae1-70fc-3e4e-adde-26d09dbf3041.roa File: 7ad9bae1-70fc-3e4e-adde-26d09dbf3041.roa (raw, json) Hash identifier: b9FMv+VEaZfdjkr1WkQ1TAblx4XLd6ztoLwYQxStt/M= Subject key identifier: A6:9F:70:84:FB:66:A7:C6:0F:CB:81:21:89:04:47:3E:81:26:8D:07 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858493AA3E4475477C5ECE3D1EA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ad9bae1-70fc-3e4e-adde-26d09dbf3041.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 22773 IP address blocks: 2001:57a:6201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:e4:47:54:77:c5:ec:e3:d1:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=e69c2b8a-4496-4616-89cc-a57f1eb0f47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cd:ce:2a:04:e9:29:3d:4f:eb:90:65:67:5e: dc:fc:1f:b2:64:33:4f:77:9b:d6:d4:0c:10:c5:8d: 7f:ea:58:c7:6c:66:ec:7c:dc:c9:dd:8f:02:de:40: fc:cf:5e:35:4b:25:67:1e:0a:5c:01:53:16:e1:31: 7e:f5:e6:8a:c1:1c:3b:32:28:9d:18:ed:ed:f8:2b: f5:e3:73:b8:7c:5b:42:3d:5f:c5:a4:7a:59:32:63: e1:62:30:8a:c5:53:a6:9a:06:6e:dd:e6:7f:78:5d: 5a:18:e2:e4:4b:50:9c:53:5d:e4:df:2f:3b:94:93: c0:93:a1:42:e9:4f:fe:26:13:d8:f3:04:db:84:87: d1:77:16:ad:1c:70:ee:13:97:c8:8a:d7:f6:7f:33: 44:7a:59:0c:11:49:27:71:f7:df:65:a3:e3:fa:db: e4:c2:b0:c9:1a:bd:f4:e1:0a:0b:9e:27:35:c7:d1: 3d:ae:69:0c:9f:a8:d6:c8:49:14:b5:f4:50:b5:17: a3:66:8b:8a:35:25:91:8e:27:1c:7f:eb:3e:cf:ba: f8:3b:ec:5d:6b:f0:db:04:d0:51:59:fc:87:b9:3d: b9:f9:f3:90:13:43:5a:10:7f:cd:21:8a:e1:91:dc: 8c:42:12:56:e9:7e:ce:76:4d:36:e8:7e:4a:51:28: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9F:70:84:FB:66:A7:C6:0F:CB:81:21:89:04:47:3E:81:26:8D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7ad9bae1-70fc-3e4e-adde-26d09dbf3041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:6201::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:6f:dc:e4:8b:c3:cb:88:8a:81:6c:96:72:e3:9d:d1:db:3b: a7:79:1d:c9:f0:c2:66:3c:87:c4:29:d9:16:b1:24:f6:f5:e7: 5a:7d:dd:06:84:79:6b:0f:22:23:ba:d0:c1:5d:b8:67:76:f6: 84:78:42:32:66:e4:6a:c9:ce:70:8f:82:16:b4:43:3b:f7:2b: 30:7d:2e:49:a6:3c:f8:6b:2f:a7:53:60:37:f8:46:8d:42:14: b7:4e:8a:68:d7:8b:bd:dc:04:d8:8f:e3:ed:cc:98:20:60:60: fb:f0:ec:43:09:0d:b4:bf:a2:c4:ad:5d:8d:68:48:20:b8:e8: 6d:74:70:15:32:f2:88:5e:e0:f7:cd:db:44:91:36:62:77:84: d5:61:da:14:19:b6:c8:9e:39:75:d7:c7:ae:ed:66:b8:73:9f: 07:83:c5:7f:98:2e:48:30:7a:98:68:8e:d8:cf:66:55:8d:d8: 97:a8:e4:d1:62:1b:97:ce:cb:8d:46:72:9f:8f:f9:f7:9a:91: 94:55:a1:d5:c9:be:1a:95:e6:81:8a:e6:79:c6:8b:5b:17:78: fa:2d:95:81:96:09:e2:90:ae:25:48:e6:bb:2b:43:61:c8:a6: 87:a0:82:04:89:c1:67:13:de:f0:1f:8d:76:8c:f7:0d:2f:98: c9:fe:dd:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk6o+RHVHfF7OPR6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZTY5YzJiOGEtNDQ5Ni00NjE2LTg5Y2MtYTU3ZjFlYjBmNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic3OKgTpKT1P65BlZ17c/B+yZDNPd5vW1AwQ xY1/6ljHbGbsfNzJ3Y8C3kD8z141SyVnHgpcAVMW4TF+9eaKwRw7MiidGO3t+Cv1 43O4fFtCPV/FpHpZMmPhYjCKxVOmmgZu3eZ/eF1aGOLkS1CcU13k3y87lJPAk6FC 6U/+JhPY8wTbhIfRdxatHHDuE5fIitf2fzNEelkMEUkncfffZaPj+tvkwrDJGr30 4QoLnic1x9E9rmkMn6jWyEkUtfRQtRejZouKNSWRjiccf+s+z7r4O+xda/DbBNBR WfyHuT25+fOQE0NaEH/NIYrhkdyMQhJW6X7Odk026H5KUSha2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKafcIT7ZqfGD8uBIYkERz6BJo0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2FkOWJhZTEtNzBmYy0z ZTRlLWFkZGUtMjZkMDlkYmYzMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFemIB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHdv3OSLw8uIioFslnLjndHbO6d5HcnwwmY8h8Qp2RaxJPb151p9 3QaEeWsPIiO60MFduGd29oR4QjJm5GrJznCPgha0Qzv3KzB9LkmmPPhrL6dTYDf4 Ro1CFLdOimjXi73cBNiP4+3MmCBgYPvw7EMJDbS/osStXY1oSCC46G10cBUy8ohe 4PfN20SRNmJ3hNVh2hQZtsieOXXXx67tZrhznweDxX+YLkgwephojtjPZlWN2Jeo 5NFiG5fOy41Gcp+P+feakZRVodXJvhqV5oGK5nnGi1sXePotlYGWCeKQriVI5rsr Q2HIpoegggSJwWcT3vAfjXaM9w0vmMn+3Q4= -----END CERTIFICATE-----Generated at Sun Apr 6 17:50:24 2025 by rpki-client