$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acd1437e-c718-3a38-b677-66b2e4e5d94d.roa File: acd1437e-c718-3a38-b677-66b2e4e5d94d.roa (raw, json) Hash identifier: caFh9uGvA5wP+Dv1YuSmgosUZ5R/85C0OqaMbnVTQ8w= Subject key identifier: A7:0E:2B:D2:42:2E:15:BE:87:5E:05:89:AA:36:F3:6E:53:2B:82:24 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328583DCC36C1DFED95597D553CCC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acd1437e-c718-3a38-b677-66b2e4e5d94d.roa Signing time: Wed 04 May 2022 12:00:00 +0000 ROA not before: Wed 04 May 2022 12:00:00 +0000 ROA not after: Wed 05 May 2027 04:00:00 +0000 asID: 22773 IP address blocks: 2001:57a:3a01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:cc:36:c1:df:ed:95:59:7d:55:3c:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 4 12:00:00 2022 GMT Not After : May 5 04:00:00 2027 GMT Subject: CN=c35c87a7-8364-4792-9468-bf5b97c92a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:8d:c2:ad:52:a7:61:d4:d7:7b:85:b7:08: 80:64:77:02:83:75:ee:61:af:6a:bc:93:f4:01:8b: 17:05:b4:00:46:e0:5b:0b:d0:99:f7:71:f1:9d:bc: 2e:a4:85:82:9c:8c:5a:db:6f:2e:da:e0:12:bf:98: 37:21:43:21:27:91:34:84:0b:30:3e:85:7b:c9:b6: bb:66:d1:51:d2:62:23:ec:e4:fa:bf:43:dd:6c:29: 67:9e:3b:cb:fd:a2:78:a4:69:63:23:73:89:a6:e3: f5:26:30:fe:db:6e:79:07:34:d7:7d:0c:2d:61:62: ce:7c:be:f8:05:e6:5b:87:60:71:e4:54:bc:8f:18: a8:b3:57:d1:4b:47:01:2e:36:4e:d9:26:e4:cb:c4: a0:0e:de:23:0d:fb:61:2c:0c:dd:d2:83:0a:3a:ee: 56:41:9d:a2:c2:af:1d:50:af:22:9f:63:26:9f:0c: 2d:29:29:e0:22:fb:fc:8a:57:68:46:5b:a3:31:c4: 3e:9f:68:1b:f3:9a:41:0b:80:07:7e:03:8e:29:48: 71:95:a5:8c:1d:6c:31:b4:e3:03:d6:00:88:41:54: 1d:61:df:3d:b8:cd:9f:3f:c8:be:34:95:8d:90:36: 8f:bf:d0:95:c4:26:49:f9:ea:4e:c7:19:54:d6:6a: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0E:2B:D2:42:2E:15:BE:87:5E:05:89:AA:36:F3:6E:53:2B:82:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acd1437e-c718-3a38-b677-66b2e4e5d94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:3a01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:17:ea:79:2a:a3:97:31:ce:5d:05:86:e5:46:91:e1:9d:8d: 81:ee:4e:c1:2b:aa:c9:13:9f:69:2e:fb:16:d3:bd:9e:8d:84: 6f:80:18:9e:c9:76:39:1f:8e:8d:43:5f:75:69:6d:a4:29:f9: 22:9a:24:8e:87:cf:6c:e0:58:98:bb:6f:2c:0d:cb:e7:33:40: 3a:ce:a4:5b:60:90:ea:53:1c:13:39:46:2d:4c:18:aa:1f:be: 64:63:c7:e5:d7:23:b5:1f:01:34:3a:66:d7:c8:0b:89:9f:dc: 03:e3:c3:3d:9e:fd:06:a2:ef:bd:e3:39:ed:e5:d1:ac:36:29: 3b:67:56:27:e5:9b:c7:97:60:60:ab:79:c3:4f:8b:b0:ca:a4: 3b:7d:60:2b:21:05:42:ea:36:30:8e:22:b8:66:77:f9:26:0a: fc:cb:f2:d1:d6:11:08:37:f9:06:53:fe:13:92:2b:f7:60:34: a5:cc:43:1a:4d:ae:b1:7d:6b:d3:8e:36:50:f3:69:69:82:e1: 9e:7c:c3:e8:9c:fd:a0:45:d2:22:a0:9b:ec:5e:99:43:cd:36: 63:d4:5b:67:c9:03:65:ac:38:12:aa:5e:f1:66:fb:dd:10:0f: 30:b4:18:41:a4:ea:28:3e:19:83:2d:df:aa:14:4e:22:40:f0: 0f:36:8d:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3MNsHf7ZVZfVU8zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTIyMDUwNDEyMDAwMFoXDTI3MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk YzM1Yzg3YTctODM2NC00NzkyLTk0NjgtYmY1Yjk3YzkyYTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgKNwq1Sp2HU13uFtwiAZHcCg3XuYa9qvJP0 AYsXBbQARuBbC9CZ93HxnbwupIWCnIxa228u2uASv5g3IUMhJ5E0hAswPoV7yba7 ZtFR0mIj7OT6v0PdbClnnjvL/aJ4pGljI3OJpuP1JjD+2255BzTXfQwtYWLOfL74 BeZbh2Bx5FS8jxios1fRS0cBLjZO2Sbky8SgDt4jDfthLAzd0oMKOu5WQZ2iwq8d UK8in2MmnwwtKSngIvv8ildoRlujMcQ+n2gb85pBC4AHfgOOKUhxlaWMHWwxtOMD 1gCIQVQdYd89uM2fP8i+NJWNkDaPv9CVxCZJ+epOxxlU1mrW9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKcOK9JCLhW+h14Fiao2825TK4IkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWNkMTQzN2UtYzcxOC0z YTM4LWI2NzctNjZiMmU0ZTVkOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFejoB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQX6nkqo5cxzl0FhuVGkeGdjYHuTsErqskTn2ku+xbTvZ6NhG+A GJ7Jdjkfjo1DX3VpbaQp+SKaJI6Hz2zgWJi7bywNy+czQDrOpFtgkOpTHBM5Ri1M GKofvmRjx+XXI7UfATQ6ZtfIC4mf3APjwz2e/Qai773jOe3l0aw2KTtnViflm8eX YGCrecNPi7DKpDt9YCshBULqNjCOIrhmd/kmCvzL8tHWEQg3+QZT/hOSK/dgNKXM QxpNrrF9a9OONlDzaWmC4Z58w+ic/aBF0iKgm+xemUPNNmPUW2fJA2WsOBKqXvFm +90QDzC0GEGk6ig+GYMt36oUTiJA8A82jSQ= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:07 2025 by rpki-client