$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/995d2e50-78f4-3183-8fec-b505cef14890.roa File: 995d2e50-78f4-3183-8fec-b505cef14890.roa (raw, json) Hash identifier: bt943++R+B6KpU1Hgy7kBCLMcOlUB3OyCi3XEqY60j4= Subject key identifier: 18:35:C6:86:D2:B5:F4:5A:A3:2D:B9:B7:FD:EE:A4:9D:D6:5F:9D:E1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328583DCC37D08F0FB7038A28B3B4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/995d2e50-78f4-3183-8fec-b505cef14890.roa Signing time: Wed 04 May 2022 12:00:00 +0000 ROA not before: Wed 04 May 2022 12:00:00 +0000 ROA not after: Wed 05 May 2027 04:00:00 +0000 asID: 22773 IP address blocks: 2001:579:d08c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:cc:37:d0:8f:0f:b7:03:8a:28:b3:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 4 12:00:00 2022 GMT Not After : May 5 04:00:00 2027 GMT Subject: CN=4999c749-ec56-4059-8708-78563d2a8951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:c1:90:97:e6:31:69:4b:36:78:cd:23:ff: 86:b6:b9:88:87:09:0f:e8:b5:89:40:31:b8:02:8b: 42:d3:83:6d:87:65:ee:bc:e1:a6:42:e7:0c:e4:de: 52:64:77:fa:cf:0b:47:87:12:af:8a:4f:7d:72:86: b4:3d:16:c2:71:bf:a9:07:02:e6:97:dc:d8:1b:75: f0:30:94:30:98:a1:2c:8e:fd:44:dc:49:07:8d:9f: 42:9f:f0:74:82:55:bf:de:8d:4d:5c:83:ab:14:e8: eb:a1:b3:ab:00:c8:36:3e:37:1a:62:7e:31:74:3e: c9:82:d7:1b:d5:24:94:86:0e:18:0c:21:e2:28:11: aa:8b:ef:e9:b0:53:50:c7:fd:79:82:af:a9:b5:5a: bc:55:1b:7c:d7:ff:84:dc:05:ae:9a:f8:3a:c9:3c: fd:fd:3e:c1:e1:18:71:7b:ab:21:c1:43:4a:32:c4: 74:85:5c:89:2f:a2:25:6a:dc:0b:0f:62:a8:7d:e4: 59:87:2d:dc:c6:0e:ed:8f:4d:1b:30:d8:94:78:98: 19:fa:56:cb:89:ed:3c:27:3d:bd:66:d0:6f:56:64: 46:ef:3c:63:03:1c:9b:fb:5e:74:49:11:ca:be:c6: e2:0b:2d:b5:6c:c6:d4:a4:07:27:e0:a8:c2:2e:31: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:35:C6:86:D2:B5:F4:5A:A3:2D:B9:B7:FD:EE:A4:9D:D6:5F:9D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/995d2e50-78f4-3183-8fec-b505cef14890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:d08c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f7:06:69:28:bb:73:68:86:af:90:94:00:66:5a:54:cd:48: 48:a8:f8:21:5f:26:b5:7a:e4:90:6d:3a:0d:52:2d:dd:48:ab: 5f:16:e4:98:f9:df:fa:9e:76:ed:cc:35:13:02:06:46:c2:09: 02:d3:b8:30:52:fa:83:ed:ee:a3:6d:da:14:47:85:89:cf:71: 66:3a:e3:24:bd:d0:62:b1:af:a6:e8:d1:c8:cf:10:82:83:c0: 90:b5:d5:3f:ab:51:ad:ab:ef:00:57:36:c3:64:08:cf:53:9e: 60:55:1e:06:83:b1:ef:18:5f:50:dd:d3:c2:81:4a:87:58:b3: c0:7d:b2:e7:39:bd:c4:e5:d8:e7:82:06:50:43:ca:dd:c1:fb: 17:ee:d9:48:60:f4:ea:b4:10:79:01:ab:cc:18:e2:64:1f:82: 28:a6:76:cb:95:79:35:18:2c:b7:70:53:33:9e:8a:fa:ff:3d: cd:bf:10:99:de:99:bb:6d:13:47:fa:bd:26:dd:66:61:ec:76: 12:3d:7d:41:a7:29:8b:f0:62:f9:68:18:ea:cb:8b:d7:e9:0f: 54:91:b4:9a:b7:59:04:fe:e7:19:83:fe:14:9d:42:0f:b9:97: c5:10:ff:13:4f:5f:f5:72:83:17:dd:e8:68:c1:fa:2a:79:d5: ea:0b:e4:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3MN9CPD7cDiiiztMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTIyMDUwNDEyMDAwMFoXDTI3MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk NDk5OWM3NDktZWM1Ni00MDU5LTg3MDgtNzg1NjNkMmE4OTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYHBkJfmMWlLNnjNI/+GtrmIhwkP6LWJQDG4 AotC04Nth2XuvOGmQucM5N5SZHf6zwtHhxKvik99coa0PRbCcb+pBwLml9zYG3Xw MJQwmKEsjv1E3EkHjZ9Cn/B0glW/3o1NXIOrFOjrobOrAMg2PjcaYn4xdD7Jgtcb 1SSUhg4YDCHiKBGqi+/psFNQx/15gq+ptVq8VRt81/+E3AWumvg6yTz9/T7B4Rhx e6shwUNKMsR0hVyJL6IlatwLD2KofeRZhy3cxg7tj00bMNiUeJgZ+lbLie08Jz29 ZtBvVmRG7zxjAxyb+150SRHKvsbiCy21bMbUpAcn4KjCLjEBPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBg1xobStfRaoy25t/3upJ3WX53hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTk1ZDJlNTAtNzhmNC0z MTgzLThmZWMtYjUwNWNlZjE0ODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFedCM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAL3Bmkou3Nohq+QlABmWlTNSEio+CFfJrV65JBtOg1SLd1Iq18W 5Jj53/qedu3MNRMCBkbCCQLTuDBS+oPt7qNt2hRHhYnPcWY64yS90GKxr6bo0cjP EIKDwJC11T+rUa2r7wBXNsNkCM9TnmBVHgaDse8YX1Dd08KBSodYs8B9suc5vcTl 2OeCBlBDyt3B+xfu2Uhg9Oq0EHkBq8wY4mQfgiimdsuVeTUYLLdwUzOeivr/Pc2/ EJnembttE0f6vSbdZmHsdhI9fUGnKYvwYvloGOrLi9fpD1SRtJq3WQT+5xmD/hSd Qg+5l8UQ/xNPX/Vygxfd6GjB+ip51eoL5DY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:54 2025 by rpki-client