$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d898964-0fcb-32b3-b5bd-8ea81f002afc.roa File: 9d898964-0fcb-32b3-b5bd-8ea81f002afc.roa (raw, json) Hash identifier: HlEFMGh+6+GBpn6O4lGY3dy3fCJ7+Ovo3eJ00TLgimY= Subject key identifier: 20:96:68:A1:1A:6F:2C:86:E9:42:25:98:E9:C4:28:85:45:A2:2C:E0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849244E8BA055433E62EE34FA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d898964-0fcb-32b3-b5bd-8ea81f002afc.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 22773 IP address blocks: 2001:578:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8b:a0:55:43:3e:62:ee:34:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=2fda07d3-4dc9-41c2-ad91-da89300804b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:cb:0a:ff:dc:5c:1e:7d:d9:fb:28:ae:c1: 09:a8:d8:a3:2f:66:7f:84:8c:6e:6d:85:29:93:61: 1f:71:37:29:ed:e8:4f:6e:cd:ec:27:8d:72:7a:b2: 47:f4:ff:74:cd:c9:84:98:5f:3a:87:83:9f:dd:ed: 17:9d:1f:8a:8e:96:99:d5:25:84:a9:02:48:57:7d: be:16:b5:06:3f:83:c6:87:d5:6a:b0:43:94:cb:1c: 40:50:da:98:be:33:4b:c4:74:28:e8:b8:f4:ac:5c: 63:6c:85:a5:95:dd:4a:92:83:5b:3b:60:df:8a:a3: 0e:15:4f:f7:98:29:8b:8b:f1:c5:ab:cc:8e:0c:35: 34:2b:35:40:cb:8f:d4:51:eb:5a:13:ec:64:0c:1a: 2c:37:07:fa:fd:74:7c:7d:9f:f4:98:86:2e:33:69: de:9f:fb:cb:0e:a8:d5:d7:28:f5:a2:b0:f2:87:f4: 83:e5:d9:61:70:67:63:4a:8d:6a:22:36:f7:2a:0d: fd:4f:f1:5d:7b:ef:bc:fb:a7:25:05:82:25:3b:39: 89:3f:d7:1a:98:2e:e3:d7:03:bd:ab:d0:72:a5:72: 52:f3:58:e8:2b:90:8b:1d:2f:b5:7f:12:6a:41:9e: 79:0b:e4:ba:36:09:2d:d9:16:e3:bf:8f:73:fb:8c: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:68:A1:1A:6F:2C:86:E9:42:25:98:E9:C4:28:85:45:A2:2C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d898964-0fcb-32b3-b5bd-8ea81f002afc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:8f:cf:9e:28:01:44:33:43:2e:2b:06:b1:9a:b3:89:4e:13: 3c:76:47:33:eb:24:fd:28:88:80:e1:be:19:d9:78:16:67:7a: f4:d6:e4:24:4f:eb:60:05:d1:d1:a7:a5:3a:f4:2a:a2:f0:41: dd:d0:b9:8e:a4:b7:21:1f:ca:c7:0c:65:11:6b:4f:d7:7a:b9: 49:3f:f8:1f:b5:7d:1a:5e:78:8b:15:ea:29:05:45:05:6b:2a: cc:3b:82:2c:11:00:3f:4c:e2:56:3a:d7:dd:e6:6b:7d:f5:e5: c7:a8:3e:5d:bc:b6:f7:50:d9:90:a7:89:66:7f:00:4b:fd:d7: a6:7d:88:a8:00:a9:67:5e:ee:b1:3a:93:ba:d3:8a:99:67:86: eb:fe:ed:69:a4:cf:7c:a5:3d:88:23:5c:d3:4f:f1:b1:03:f8: d1:73:0b:19:83:3a:22:f3:cc:00:65:56:6d:e4:80:95:56:09: 24:74:7d:11:31:40:48:50:c4:4f:d5:18:88:8a:09:23:13:cd: 3f:dd:5d:d5:da:83:2d:b1:52:e4:47:7c:96:a0:a6:15:6c:e9: dc:e4:aa:db:5b:9d:0c:e2:83:ae:be:09:dd:91:53:e5:0f:8d: d0:23:82:67:d3:e7:2c:cc:4d:df:f4:fb:38:9a:de:74:66:33: 9f:e4:c8:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkkTougVUM+Yu40+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MmZkYTA3ZDMtNGRjOS00MWMyLWFkOTEtZGE4OTMwMDgwNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmPLCv/cXB592fsorsEJqNijL2Z/hIxubYUp k2EfcTcp7ehPbs3sJ41yerJH9P90zcmEmF86h4Of3e0XnR+KjpaZ1SWEqQJIV32+ FrUGP4PGh9VqsEOUyxxAUNqYvjNLxHQo6Lj0rFxjbIWlld1KkoNbO2DfiqMOFU/3 mCmLi/HFq8yODDU0KzVAy4/UUetaE+xkDBosNwf6/XR8fZ/0mIYuM2nen/vLDqjV 1yj1orDyh/SD5dlhcGdjSo1qIjb3Kg39T/Fde++8+6clBYIlOzmJP9camC7j1wO9 q9BypXJS81joK5CLHS+1fxJqQZ55C+S6Ngkt2Rbjv49z+4zX5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCCWaKEabyyG6UIlmOnEKIVFoizgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWQ4OTg5NjQtMGZjYi0z MmIzLWI1YmQtOGVhODFmMDAyYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIuPz54oAUQzQy4rBrGas4lOEzx2RzPrJP0oiIDhvhnZeBZnevTW 5CRP62AF0dGnpTr0KqLwQd3QuY6ktyEfyscMZRFrT9d6uUk/+B+1fRpeeIsV6ikF RQVrKsw7giwRAD9M4lY6193ma3315ceoPl28tvdQ2ZCniWZ/AEv916Z9iKgAqWde 7rE6k7rTiplnhuv+7Wmkz3ylPYgjXNNP8bED+NFzCxmDOiLzzABlVm3kgJVWCSR0 fRExQEhQxE/VGIiKCSMTzT/dXdXagy2xUuRHfJagphVs6dzkqttbnQzig66+Cd2R U+UPjdAjgmfT5yzMTd/0+zia3nRmM5/kyLc= -----END CERTIFICATE-----Generated at Sun Apr 6 16:02:20 2025 by rpki-client