$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aee4f61c-f8f8-3ff3-ac94-5a06d838a71c.roa File: aee4f61c-f8f8-3ff3-ac94-5a06d838a71c.roa (raw, json) Hash identifier: I/USTrzfDI6Nn3J0zqzYfZhePQy0IfWjjHAC8l6xaAE= Subject key identifier: 43:95:96:4E:14:F2:3C:EB:20:B3:2F:F5:AE:68:DF:5B:D8:62:FA:5C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB17F193330C5377942E6E4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aee4f61c-f8f8-3ff3-ac94-5a06d838a71c.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 2600:880a:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:7f:19:33:30:c5:37:79:42:e6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=80a5fb6d-2eac-41fd-acb8-33cb33ed6bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f4:40:42:03:48:e6:1c:b7:a4:62:cc:01:51: d9:b3:fd:30:10:d9:90:df:c9:b5:92:32:e0:10:57: 99:9a:4d:4e:54:ea:42:ed:9d:2f:a4:b4:07:8a:86: 80:f9:af:65:d3:82:ac:d8:e6:55:dd:a6:5d:ff:cd: 3f:0a:a9:91:b1:2b:90:75:1c:7f:25:11:8a:91:39: fa:e6:c3:d7:7b:08:13:ac:c7:8d:2d:fe:42:df:be: ab:28:3b:06:33:32:ea:87:d8:e4:93:07:8d:4c:62: 3e:a0:b0:cb:06:1e:3e:83:f0:95:22:ff:bf:82:1d: 73:57:f7:28:14:fb:68:73:db:83:58:ff:fa:eb:69: 53:a2:68:3f:ee:32:12:08:64:e0:5c:d8:6f:fa:3c: e7:09:28:26:d9:8d:17:34:26:ba:a7:ed:d1:bd:a0: f3:d6:d6:b1:a3:d7:8a:fa:ce:45:54:f9:59:e0:f2: a8:9b:63:82:7f:7a:1f:ef:31:c9:60:23:50:3e:f4: 42:81:42:1b:a7:37:af:f1:7d:24:8a:d3:af:e5:98: 59:c5:ad:b1:32:5f:52:e3:6b:d7:48:17:63:a6:00: d3:2e:bb:33:c7:0e:90:65:9b:17:54:83:dc:49:85: f7:33:b9:a0:21:9b:e4:8a:d7:8d:da:0b:b1:99:3e: 37:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:95:96:4E:14:F2:3C:EB:20:B3:2F:F5:AE:68:DF:5B:D8:62:FA:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aee4f61c-f8f8-3ff3-ac94-5a06d838a71c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:4000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d6:a6:11:80:e7:29:f5:dd:62:74:fa:a6:69:e5:94:38:43: f1:c2:64:ba:96:d6:db:ae:ee:8b:bc:23:8c:78:58:1c:da:33: b5:cf:ec:47:1e:ff:61:2e:a5:ae:e2:3a:19:71:67:4c:e6:1b: 01:c4:74:c8:d3:0f:52:13:7d:fa:26:50:00:d2:dd:62:c8:30: ec:97:01:39:05:31:f6:7a:78:0b:8b:db:6c:86:e4:6e:d0:12: c2:05:c4:06:64:c2:e7:f8:ca:df:36:0c:f4:fa:b4:d8:7b:36: 85:22:61:42:fd:66:27:9a:a8:51:e0:5e:65:d5:b8:39:49:4a: 7b:1c:a3:c6:b3:4d:e5:33:64:49:03:a3:58:06:0c:d9:55:6f: e6:9b:d6:51:66:d4:ce:12:29:89:1b:46:98:2b:66:3c:bd:7a: 7f:84:72:6b:50:34:e6:88:38:01:9e:51:6c:30:0b:26:3a:97: 0e:ca:49:c8:bb:0f:3b:09:8d:66:23:2d:c7:31:27:3f:09:da: d9:c8:c5:7c:92:7b:28:8f:1b:44:eb:59:bc:1f:9c:b9:c2:12: 09:7a:c5:f4:04:d3:b7:b5:f4:16:69:6a:ff:3b:51:cb:1d:f0: 97:f4:74:b8:7b:9b:c6:2f:19:80:b0:dc:33:c8:9f:5c:28:97: 79:ac:58:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkMsX8ZMzDFN3lC5uQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ODBhNWZiNmQtMmVhYy00MWZkLWFjYjgtMzNjYjMzZWQ2YmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvRAQgNI5hy3pGLMAVHZs/0wENmQ38m1kjLg EFeZmk1OVOpC7Z0vpLQHioaA+a9l04Ks2OZV3aZd/80/CqmRsSuQdRx/JRGKkTn6 5sPXewgTrMeNLf5C376rKDsGMzLqh9jkkweNTGI+oLDLBh4+g/CVIv+/gh1zV/co FPtoc9uDWP/662lTomg/7jISCGTgXNhv+jznCSgm2Y0XNCa6p+3RvaDz1taxo9eK +s5FVPlZ4PKom2OCf3of7zHJYCNQPvRCgUIbpzev8X0kitOv5ZhZxa2xMl9S42vX SBdjpgDTLrszxw6QZZsXVIPcSYX3M7mgIZvkiteN2guxmT43BwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEOVlk4U8jzrILMv9a5o31vYYvpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWVlNGY2MWMtZjhmOC0z ZmYzLWFjOTQtNWEwNmQ4MzhhNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgCICkAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqdamEYDnKfXdYnT6pmnllDhD8cJkupbW267ui7wjjHhYHNoztc/s Rx7/YS6lruI6GXFnTOYbAcR0yNMPUhN9+iZQANLdYsgw7JcBOQUx9np4C4vbbIbk btASwgXEBmTC5/jK3zYM9Pq02Hs2hSJhQv1mJ5qoUeBeZdW4OUlKexyjxrNN5TNk SQOjWAYM2VVv5pvWUWbUzhIpiRtGmCtmPL16f4Rya1A05og4AZ5RbDALJjqXDspJ yLsPOwmNZiMtxzEnPwna2cjFfJJ7KI8bROtZvB+cucISCXrF9ATTt7X0Fmlq/ztR yx3wl/R0uHubxi8ZgLDcM8ifXCiXeaxYMg== -----END CERTIFICATE-----Generated at Sun Apr 6 17:46:46 2025 by rpki-client