$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8459d6b7-9921-377d-9ff3-77a8736c9a39.roa File: 8459d6b7-9921-377d-9ff3-77a8736c9a39.roa (raw, json) Hash identifier: DITOvqg30uUVInj0X6D1ievtRi/DRD2lLfI/9/2uXyU= Subject key identifier: 35:87:20:28:4F:F7:3F:91:1E:E9:8C:E7:89:58:2D:39:AF:50:FF:26 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849244E9979190EFD63284635B0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8459d6b7-9921-377d-9ff3-77a8736c9a39.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 22773 IP address blocks: 2001:578:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:99:79:19:0e:fd:63:28:46:35:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=c72e7351-d0b8-43fe-9e3f-2f11830928fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:9a:78:64:57:66:78:70:df:2d:f5:f9:99: 68:7f:63:09:62:0f:5c:ef:1e:d0:23:a0:28:8c:e1: 65:cc:20:e4:77:30:0b:d9:22:0e:30:b0:de:f2:5b: 64:a3:db:fe:d8:80:28:c7:ef:21:89:65:d8:c5:6c: 15:3c:f9:de:af:b1:5b:27:06:44:f2:db:7f:c2:d2: d6:51:64:47:7c:a1:6f:aa:26:57:b2:ee:82:a6:6b: 3b:85:99:69:f4:21:62:0d:20:33:f0:41:cf:a6:2c: 54:72:fb:6e:54:42:03:e6:ba:58:9a:b2:71:e6:45: 2e:bd:77:b4:bb:12:a6:9d:d7:5a:87:3c:de:96:a6: ca:3f:99:0a:25:a6:05:78:12:ee:e9:45:f0:0c:79: 1d:c9:44:4b:f9:9b:19:0d:d0:39:88:40:87:3f:a5: 94:72:47:83:00:7e:43:2f:00:b6:95:b9:5e:20:56: b3:75:58:07:13:af:e6:8d:49:aa:60:bc:af:4b:61: b5:fe:dc:d7:5a:05:69:c1:ce:10:e8:a6:65:0b:be: 3c:cb:53:d6:38:7c:77:08:f8:f0:2f:4c:ac:fd:69: 50:d4:40:df:a9:9f:b4:b9:98:67:1f:b8:fb:30:58: c2:1d:43:a2:ad:11:61:24:8c:95:8f:0c:24:6a:80: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:87:20:28:4F:F7:3F:91:1E:E9:8C:E7:89:58:2D:39:AF:50:FF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8459d6b7-9921-377d-9ff3-77a8736c9a39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ba:3c:46:59:0d:33:d7:73:37:2f:cf:5c:99:48:df:9b:1b: 9f:7e:d9:a2:69:31:82:9b:3b:09:07:a0:1f:00:87:3a:64:4a: f1:3e:24:35:29:43:8f:38:22:18:22:65:12:40:c0:19:ce:fc: 0f:57:aa:b4:c9:81:d9:04:df:bd:79:52:f3:28:14:dc:12:5d: 24:0f:5a:34:89:cb:e5:cd:93:ca:dc:fd:3a:02:ef:8f:35:a2: c4:a6:e5:71:0e:39:63:48:c9:c5:a8:93:67:91:69:ba:cd:d3: 45:47:55:af:29:b8:8b:eb:41:67:80:31:52:e2:13:c7:89:b1: 92:9f:a6:a5:6c:48:44:1f:9b:4a:c7:2c:e5:28:51:32:32:15: 92:c1:09:0f:a3:a1:ff:ea:22:ba:f3:82:b3:73:d4:91:7b:de: f5:b2:ce:f2:a4:d3:c5:ad:32:fd:bc:ca:1c:86:0a:a6:46:1d: 95:af:8f:a8:13:fc:10:43:77:e8:8e:30:24:95:71:72:63:30: 9a:a2:c6:51:9b:f1:6e:c3:d7:c3:be:5a:0b:2f:2d:f4:dd:f4: 2b:cd:e0:28:04:63:15:2a:c4:3a:9a:fd:a6:c3:14:ff:a8:61: af:b6:7b:cc:34:27:3e:bb:cf:57:f9:c4:d3:60:34:55:33:4d: 1f:4b:b9:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkkTpl5GQ79YyhGNbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YzcyZTczNTEtZDBiOC00M2ZlLTllM2YtMmYxMTgzMDkyOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8+aeGRXZnhw3y31+Zlof2MJYg9c7x7QI6Ao jOFlzCDkdzAL2SIOMLDe8ltko9v+2IAox+8hiWXYxWwVPPner7FbJwZE8tt/wtLW UWRHfKFvqiZXsu6Cpms7hZlp9CFiDSAz8EHPpixUcvtuVEID5rpYmrJx5kUuvXe0 uxKmnddahzzelqbKP5kKJaYFeBLu6UXwDHkdyURL+ZsZDdA5iECHP6WUckeDAH5D LwC2lbleIFazdVgHE6/mjUmqYLyvS2G1/tzXWgVpwc4Q6KZlC748y1PWOHx3CPjw L0ys/WlQ1EDfqZ+0uZhnH7j7MFjCHUOirRFhJIyVjwwkaoDniQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDWHIChP9z+RHumM54lYLTmvUP8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODQ1OWQ2YjctOTkyMS0z NzdkLTlmZjMtNzdhODczNmM5YTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIu6PEZZDTPXczcvz1yZSN+bG59+2aJpMYKbOwkHoB8AhzpkSvE+ JDUpQ484IhgiZRJAwBnO/A9XqrTJgdkE3715UvMoFNwSXSQPWjSJy+XNk8rc/ToC 7481osSm5XEOOWNIycWok2eRabrN00VHVa8puIvrQWeAMVLiE8eJsZKfpqVsSEQf m0rHLOUoUTIyFZLBCQ+jof/qIrrzgrNz1JF73vWyzvKk08WtMv28yhyGCqZGHZWv j6gT/BBDd+iOMCSVcXJjMJqixlGb8W7D18O+WgsvLfTd9CvN4CgEYxUqxDqa/abD FP+oYa+2e8w0Jz67z1f5xNNgNFUzTR9LuXA= -----END CERTIFICATE-----Generated at Sun Apr 6 15:59:29 2025 by rpki-client