$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9875cd45-12ac-3f9e-bab7-b21f3d335c8e.roa File: 9875cd45-12ac-3f9e-bab7-b21f3d335c8e.roa (raw, json) Hash identifier: 3wjG1YUKA4N+xl4PwF4OM5PsId4HLiT8IhsTHGfRHpE= Subject key identifier: 77:F7:00:1B:D1:61:E2:FD:D4:72:CA:E9:DD:21:E5:0F:25:A9:75:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB175F95649657C072A2080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9875cd45-12ac-3f9e-bab7-b21f3d335c8e.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 33438 IP address blocks: 2001:57a:504::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:75:f9:56:49:65:7c:07:2a:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=8a1d6a44-65b1-455a-aae7-90a218859494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:23:0d:13:ae:c6:5a:68:5d:71:04:96:b9: 19:38:d1:28:4f:87:e6:ac:3c:f6:e1:9a:b9:e4:81: ce:c2:1c:79:b5:50:24:47:9c:2c:6f:4b:25:92:a6: 56:21:fb:9f:ef:de:ae:2a:fc:49:11:32:c8:56:c0: e9:78:66:58:14:7e:64:f4:e4:79:fc:8f:7b:89:84: bf:11:1f:7a:fc:34:c6:86:3f:b1:71:79:88:c6:c5: 87:27:c0:9f:34:93:f1:d9:70:9a:3d:d7:a1:f7:15: 9a:53:05:47:83:2c:14:54:6b:70:7a:3b:a5:e0:da: da:18:5c:5d:85:57:41:8a:ab:5d:79:39:2b:10:de: d8:60:af:a6:fb:73:e3:66:b6:96:f3:53:b7:58:16: a6:91:18:2a:43:48:ef:75:4e:2a:54:9f:cc:ed:0e: 11:da:a7:a0:c4:35:5e:d4:8c:f7:2a:fe:81:85:88: be:2d:70:e5:8e:af:6f:7e:f1:75:68:d0:b0:fd:c4: d2:ba:c3:b6:30:e9:f2:20:75:17:36:4f:76:d4:bc: ce:5e:de:43:da:e3:65:82:64:41:72:8e:21:f9:af: f2:6c:ff:c4:aa:60:66:21:74:29:c8:d0:1a:5e:17: a2:53:b5:6c:6c:d6:8e:65:1e:4c:76:b7:3d:86:97: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F7:00:1B:D1:61:E2:FD:D4:72:CA:E9:DD:21:E5:0F:25:A9:75:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9875cd45-12ac-3f9e-bab7-b21f3d335c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:504::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7a:cf:ea:47:61:7c:e4:61:ff:38:65:89:c4:b1:89:48:28: 56:8e:95:07:73:db:90:e1:c5:4b:16:1e:d1:5b:4a:23:3b:5e: 4e:e4:10:33:2c:f4:65:d7:f8:96:59:45:0d:c4:cc:dc:77:d8: 82:40:1f:2f:45:82:45:bb:f5:2f:67:f2:21:a0:fb:aa:7e:0d: 3f:3c:c6:e0:8b:95:ab:a7:dd:61:bc:c5:37:4e:61:9b:75:61: ee:f2:d4:9a:74:35:01:a5:e7:5c:eb:c5:1e:0d:d6:4d:f7:cd: c2:2f:51:7d:3e:38:cb:b4:85:e9:bf:40:2c:98:05:02:eb:b8: 8a:2d:58:2a:10:7b:88:77:88:06:7b:51:8b:71:6c:9e:db:9c: db:13:b3:89:e5:ea:e1:ec:7f:ee:a0:5a:44:2f:eb:a5:c2:2f: bd:ef:84:a9:93:4e:6a:a2:b4:15:d7:40:54:62:77:dd:ef:5a: eb:ee:43:7d:e1:f3:aa:48:19:44:cb:1d:9b:d4:3b:4f:ef:5a: d4:4f:f9:be:8b:8f:61:74:74:d7:91:84:c4:63:0e:e7:77:7b: ac:31:04:43:6e:76:c1:93:40:41:03:59:1e:bc:e7:5c:84:5c: bd:50:98:f4:94:95:24:1c:4e:bc:3a:d3:0b:50:d8:02:d9:c6: 1c:c2:3f:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsXX5VkllfAcqIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk OGExZDZhNDQtNjViMS00NTVhLWFhZTctOTBhMjE4ODU5NDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrsjDROuxlpoXXEElrkZONEoT4fmrDz24Zq5 5IHOwhx5tVAkR5wsb0slkqZWIfuf796uKvxJETLIVsDpeGZYFH5k9OR5/I97iYS/ ER96/DTGhj+xcXmIxsWHJ8CfNJPx2XCaPdeh9xWaUwVHgywUVGtwejul4NraGFxd hVdBiqtdeTkrEN7YYK+m+3PjZraW81O3WBamkRgqQ0jvdU4qVJ/M7Q4R2qegxDVe 1Iz3Kv6BhYi+LXDljq9vfvF1aNCw/cTSusO2MOnyIHUXNk921LzOXt5D2uNlgmRB co4h+a/ybP/EqmBmIXQpyNAaXheiU7VsbNaOZR5Mdrc9hpcEaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHf3ABvRYeL91HLK6d0h5Q8lqXXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTg3NWNkNDUtMTJhYy0z ZjllLWJhYjctYjIxZjNkMzM1YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFegUE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACd6z+pHYXzkYf84ZYnEsYlIKFaOlQdz25DhxUsWHtFbSiM7Xk7k EDMs9GXX+JZZRQ3EzNx32IJAHy9FgkW79S9n8iGg+6p+DT88xuCLlaun3WG8xTdO YZt1Ye7y1Jp0NQGl51zrxR4N1k33zcIvUX0+OMu0hem/QCyYBQLruIotWCoQe4h3 iAZ7UYtxbJ7bnNsTs4nl6uHsf+6gWkQv66XCL73vhKmTTmqitBXXQFRid93vWuvu Q33h86pIGUTLHZvUO0/vWtRP+b6Lj2F0dNeRhMRjDud3e6wxBENudsGTQEEDWR68 51yEXL1QmPSUlSQcTrw60wtQ2ALZxhzCP0Q= -----END CERTIFICATE-----Generated at Sun Apr 6 16:05:04 2025 by rpki-client