$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/add667e7-4b5a-3de3-95d1-0503d638f674.roa File: add667e7-4b5a-3de3-95d1-0503d638f674.roa (raw, json) Hash identifier: 8tVddAzZhOvAjbk2LHJfZnVIyMsw0iGrgY4Cz/Z8dPA= Subject key identifier: DD:9B:CE:90:CA:CC:32:EA:95:D1:AD:32:1F:6B:57:F0:DB:41:90:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858482D5AA27A71A4A3479C30F080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/add667e7-4b5a-3de3-95d1-0503d638f674.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 22773 IP address blocks: 2001:579:c218::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:a2:7a:71:a4:a3:47:9c:30:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=13ebc09c-61db-4f51-a4eb-fa1adc98de27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:f9:58:7c:b8:0b:12:38:36:bd:c1:30:3b: 75:ad:26:08:e0:74:21:76:d8:95:ca:0c:f6:d5:ef: 0c:13:21:d6:d2:84:de:2e:15:a6:6e:94:16:c3:d5: 65:c8:71:fa:72:57:9d:7f:89:44:c1:7a:08:77:96: 9a:1d:62:e7:7d:41:c6:9a:76:94:be:fc:24:56:19: 70:44:0e:2e:9d:5c:03:6c:74:2c:ea:a8:db:9a:84: d5:42:91:79:67:8f:81:11:44:44:28:40:66:44:84: a9:9a:5c:2a:93:8a:38:e0:b2:f6:06:1a:74:57:ee: 4c:dd:28:c2:1b:a1:cd:f1:39:14:4a:76:2b:00:9f: fd:c4:d5:03:6e:73:0e:ad:dd:88:b7:b5:7b:1a:ea: 3a:d5:94:bc:84:12:d0:12:9c:2d:34:d5:66:ee:19: b5:96:98:d2:5d:da:fb:40:3d:09:27:65:80:91:e4: 01:ef:21:26:ef:dd:dc:32:fc:96:07:7a:9e:d1:63: f1:ff:cf:89:e2:ff:c2:47:84:2c:e6:9a:9f:35:f8: a1:58:b4:58:40:12:7c:23:05:fd:64:73:35:77:58: 62:b9:89:36:af:92:dd:4d:87:0a:2a:8d:9b:9c:6f: 9d:41:e7:03:8d:f7:a3:7e:ba:79:eb:f3:6d:c7:93: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9B:CE:90:CA:CC:32:EA:95:D1:AD:32:1F:6B:57:F0:DB:41:90:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/add667e7-4b5a-3de3-95d1-0503d638f674.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:c218::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a1:ea:fe:9c:e0:87:f7:57:c2:bc:14:f7:8c:b5:7d:a5:79: 0d:f6:9c:09:fb:8e:e2:d4:c9:61:9c:81:84:56:2d:9d:1f:b3: a8:bf:d0:41:0f:2a:eb:97:b6:c2:26:23:bc:bf:78:69:1e:35: 07:13:f4:fa:01:1c:cd:c5:58:13:02:5b:74:71:d4:ea:ee:c5: 4c:47:1b:27:6c:60:6c:8d:ca:08:28:74:33:de:0b:6f:75:bb: 29:52:b0:61:59:a7:15:0e:ef:d8:a0:5c:77:61:1f:0c:c9:26: 87:61:65:3b:bf:3f:9b:82:94:26:2e:ac:70:43:d3:1a:50:19: f8:fd:8f:be:9f:cf:67:48:cf:20:8e:bb:94:1a:70:02:e9:53: c3:84:df:97:b9:98:c0:96:39:3b:e9:ba:c8:8c:f7:ed:81:f9: 22:c8:fc:0d:e3:95:38:87:aa:d9:fa:ae:67:40:89:92:46:4b: 86:2c:1d:44:0e:4b:b6:b5:2f:d7:4d:8b:73:4a:84:29:19:99: 50:37:b0:86:49:fa:b1:c3:2b:86:97:44:89:a5:bc:21:68:37: 76:96:50:55:ea:0b:7a:e8:c2:b4:63:b0:23:c0:44:7e:99:5c: 72:b4:8f:f2:0d:55:ab:26:ac:03:d3:40:a8:82:c0:f0:da:f0: 7e:8a:e7:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgtWqJ6caSjR5ww8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk MTNlYmMwOWMtNjFkYi00ZjUxLWE0ZWItZmExYWRjOThkZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodz5WHy4CxI4Nr3BMDt1rSYI4HQhdtiVygz2 1e8MEyHW0oTeLhWmbpQWw9VlyHH6cledf4lEwXoId5aaHWLnfUHGmnaUvvwkVhlw RA4unVwDbHQs6qjbmoTVQpF5Z4+BEUREKEBmRISpmlwqk4o44LL2Bhp0V+5M3SjC G6HN8TkUSnYrAJ/9xNUDbnMOrd2It7V7Guo61ZS8hBLQEpwtNNVm7hm1lpjSXdr7 QD0JJ2WAkeQB7yEm793cMvyWB3qe0WPx/8+J4v/CR4Qs5pqfNfihWLRYQBJ8IwX9 ZHM1d1hiuYk2r5LdTYcKKo2bnG+dQecDjfejfrp56/Ntx5OEyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN2bzpDKzDLqldGtMh9rV/DbQZCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWRkNjY3ZTctNGI1YS0z ZGUzLTk1ZDEtMDUwM2Q2MzhmNjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFecIY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKqh6v6c4If3V8K8FPeMtX2leQ32nAn7juLUyWGcgYRWLZ0fs6i/ 0EEPKuuXtsImI7y/eGkeNQcT9PoBHM3FWBMCW3Rx1OruxUxHGydsYGyNyggodDPe C291uylSsGFZpxUO79igXHdhHwzJJodhZTu/P5uClCYurHBD0xpQGfj9j76fz2dI zyCOu5QacALpU8OE35e5mMCWOTvpusiM9+2B+SLI/A3jlTiHqtn6rmdAiZJGS4Ys HUQOS7a1L9dNi3NKhCkZmVA3sIZJ+rHDK4aXRImlvCFoN3aWUFXqC3rowrRjsCPA RH6ZXHK0j/INVasmrAPTQKiCwPDa8H6K5zk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:54 2025 by rpki-client