$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab40124f-2670-3638-b0e7-70758ddefab2.roa File: ab40124f-2670-3638-b0e7-70758ddefab2.roa (raw, json) Hash identifier: khgyWaIq5ER+1Svz35NwJ1YMYmw79pwF19et5bs8M1k= Subject key identifier: 4B:05:21:93:C4:0C:A6:66:D8:6B:8E:80:90:E3:83:5D:60:DB:39:AD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848C150EF16D25625595B7B2CB0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab40124f-2670-3638-b0e7-70758ddefab2.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 22773 IP address blocks: 2001:579:1070::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:ef:16:d2:56:25:59:5b:7b:2c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=094e464f-83da-4ce3-ac7b-0d7f9f3feece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ab:be:91:30:24:76:54:a8:04:f7:81:05:fc: 96:13:5c:cc:35:a7:4a:8f:d2:3f:ea:56:b1:6e:1c: 04:dd:db:69:18:01:ee:10:95:ee:70:46:4d:e4:ee: 1a:a9:1f:e1:60:7f:6d:63:72:ba:cd:d1:3a:21:66: 05:5c:7d:59:80:2a:04:d9:c0:38:0b:e6:8e:0b:c3: 45:03:32:6e:6d:de:ab:90:a2:6d:3f:07:f5:05:82: e0:1f:0e:4f:dd:ba:79:fa:12:c8:cd:a1:4f:94:93: c5:77:ee:db:f1:e5:7b:68:be:b5:5e:9f:12:f9:8b: a9:ae:a9:a2:c4:f7:59:f5:87:8f:b0:fd:31:c9:d0: 7f:4a:d0:95:93:95:56:5c:70:61:dd:a5:59:72:e6: fe:ca:cc:1e:0e:a6:45:06:06:86:3f:18:99:1e:f3: 73:b6:ee:03:7d:a5:c5:7b:9a:dd:80:bb:9d:17:ee: e2:26:68:83:db:ef:d4:0e:e3:12:c9:cc:f1:58:4d: f8:43:e7:dc:c2:d8:33:9b:02:a7:b5:be:5b:5e:56: 0d:7e:68:08:23:39:2a:50:41:e9:ec:c7:7f:0c:7c: 37:f5:d6:6d:d1:eb:65:12:88:d2:88:6b:81:4f:c8: 76:2f:a9:ff:5e:16:fc:df:d8:c7:6b:73:b3:e4:62: 11:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:05:21:93:C4:0C:A6:66:D8:6B:8E:80:90:E3:83:5D:60:DB:39:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab40124f-2670-3638-b0e7-70758ddefab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:1070::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0d:e7:b5:58:e6:e3:a1:a8:2a:4d:f7:d7:73:06:2b:39:ca: 2a:e5:f6:cf:20:ed:f8:e1:88:09:72:57:73:02:d5:1b:43:10: d9:e4:dc:56:40:82:5b:56:ca:8e:19:55:ab:62:c5:b5:cd:e9: f2:24:88:8b:81:11:38:ad:f4:c8:7e:e5:d5:1a:d1:ad:29:fb: 32:67:07:e1:c8:02:ee:06:be:14:a2:7f:7c:19:f0:ec:c3:5c: 15:19:f0:83:a2:8e:ce:f7:ce:f1:73:c2:8e:20:49:16:ee:7d: 2e:4e:9f:f3:17:08:5f:fc:31:59:42:ca:6e:d3:40:c5:27:b1: f7:c5:5d:33:1d:54:de:2e:3f:7d:19:b3:d3:52:75:8c:32:cb: 13:fe:d5:e9:41:31:0e:8a:a6:23:22:b4:3a:cf:e3:06:2c:fa: 73:df:66:9f:af:72:d6:da:7f:98:d5:bc:7f:44:9b:3e:56:34: 35:a4:b0:93:85:c7:52:70:05:65:d5:1a:be:53:fe:14:42:df: dd:5a:92:08:f7:e1:bb:58:dc:4a:79:d5:eb:2e:e4:d2:16:4f: 91:00:a5:18:50:d1:7d:e7:70:04:5f:8e:61:43:f0:10:ba:c5: 41:66:df:ed:2b:ef:7f:55:b4:45:10:5a:ca:09:9f:f3:40:56: f3:df:57:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjBUO8W0lYlWVt7LLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk MDk0ZTQ2NGYtODNkYS00Y2UzLWFjN2ItMGQ3ZjlmM2ZlZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjau+kTAkdlSoBPeBBfyWE1zMNadKj9I/6lax bhwE3dtpGAHuEJXucEZN5O4aqR/hYH9tY3K6zdE6IWYFXH1ZgCoE2cA4C+aOC8NF AzJubd6rkKJtPwf1BYLgHw5P3bp5+hLIzaFPlJPFd+7b8eV7aL61Xp8S+Yuprqmi xPdZ9YePsP0xydB/StCVk5VWXHBh3aVZcub+ysweDqZFBgaGPxiZHvNztu4DfaXF e5rdgLudF+7iJmiD2+/UDuMSyczxWE34Q+fcwtgzmwKntb5bXlYNfmgIIzkqUEHp 7Md/DHw39dZt0etlEojSiGuBT8h2L6n/Xhb839jHa3Oz5GIRXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEsFIZPEDKZm2GuOgJDjg11g2zmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWI0MDEyNGYtMjY3MC0z NjM4LWIwZTctNzA3NThkZGVmYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeRBw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMN57VY5uOhqCpN99dzBis5yirl9s8g7fjhiAlyV3MC1RtDENnk 3FZAgltWyo4ZVatixbXN6fIkiIuBETit9Mh+5dUa0a0p+zJnB+HIAu4GvhSif3wZ 8OzDXBUZ8IOijs73zvFzwo4gSRbufS5On/MXCF/8MVlCym7TQMUnsffFXTMdVN4u P30Zs9NSdYwyyxP+1elBMQ6KpiMitDrP4wYs+nPfZp+vctbaf5jVvH9Emz5WNDWk sJOFx1JwBWXVGr5T/hRC391akgj34btY3Ep51esu5NIWT5EApRhQ0X3ncARfjmFD 8BC6xUFm3+0r739VtEUQWsoJn/NAVvPfV0c= -----END CERTIFICATE-----Generated at Sun Apr 6 15:59:41 2025 by rpki-client