$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb43e775-3052-3980-b89e-0a91b1979969.roa File: cb43e775-3052-3980-b89e-0a91b1979969.roa (raw, json) Hash identifier: TX0esBJXXlV5RGXSADE0XsxiLWwSawWg2LruZVavNLE= Subject key identifier: EE:83:39:39:E8:C9:E3:06:90:79:90:5D:9E:A0:6D:4F:CE:0A:4B:05 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848D0ABC08860D96917DE9CEE40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb43e775-3052-3980-b89e-0a91b1979969.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 22773 IP address blocks: 2001:579:1114::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:c0:88:60:d9:69:17:de:9c:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=1c151d17-da06-4cac-9ca0-2c3654618b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0b:a0:28:ce:5c:09:86:e7:2c:ae:09:80:44: c2:68:e2:d9:ae:94:6a:d1:bc:93:58:76:f0:5d:aa: 91:1c:67:36:59:0d:b1:b6:29:17:40:73:bd:0c:24: 3b:31:bb:7a:3f:22:18:0c:54:95:67:93:fa:ef:6b: 26:69:39:85:6c:ea:e7:a8:17:2e:fc:b1:d9:9e:35: 7c:d7:86:18:77:b8:84:94:91:3c:9e:34:0d:1e:07: b6:c4:82:ba:ef:cc:5a:74:56:54:de:5b:19:c2:c2: 3b:1c:96:3c:ca:f5:85:04:37:2b:97:87:f3:ad:37: e5:69:43:a5:2b:ff:0b:92:db:a8:f8:6a:b5:c0:1e: 79:68:ce:a1:4f:97:9c:7c:e6:e4:7d:45:6f:cd:1e: 22:72:cc:65:9b:f4:03:54:41:91:ad:17:8e:a8:41: 27:cb:0d:1d:f8:ad:5a:be:2b:67:80:09:af:ba:c9: 33:4f:3f:66:44:c3:e7:30:6d:be:9b:31:ea:08:8b: 28:74:bd:87:2e:40:40:a6:c1:e4:b3:bc:5a:3f:f4: 7f:bd:79:ac:ff:6b:23:2a:f1:a1:77:03:1d:f2:91: 04:00:54:6a:c4:a6:b1:0a:ef:50:ee:09:e7:18:a9: 4d:e1:ae:4b:f6:6a:68:66:55:9c:e0:73:18:7e:81: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:39:39:E8:C9:E3:06:90:79:90:5D:9E:A0:6D:4F:CE:0A:4B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb43e775-3052-3980-b89e-0a91b1979969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:1114::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:87:13:14:7c:0f:57:fb:f0:c1:03:d5:2d:68:e2:47:15:7f: 9d:11:c8:a7:7c:de:4b:0e:9a:bc:f7:42:b9:9b:f1:e2:c7:26: 54:fc:df:d3:bb:5b:de:18:0c:82:6d:04:de:c1:17:05:6b:c1: bc:ad:1f:50:61:11:de:d1:e6:47:5f:a5:57:77:9c:dc:9f:8c: 15:8a:f2:25:4d:74:2d:e2:84:fd:e5:3f:e7:86:77:40:ad:a7: b1:60:f1:f2:30:cb:24:c4:8f:32:a7:ad:8e:8a:ce:15:22:66: a7:19:ac:57:ee:86:d9:30:f2:76:cb:f0:06:3a:56:fc:85:91: 35:ba:ac:89:5b:fe:26:54:29:b7:13:59:a3:25:60:31:96:90: 08:ee:e1:b8:f4:4a:d3:a3:e9:cf:fe:59:a8:e2:0b:ad:0a:fc: 73:ed:10:95:17:fa:b0:07:0b:48:5f:d2:45:b3:10:34:f1:a4: 0d:7c:e3:ca:4c:45:82:7d:12:e3:58:eb:90:aa:44:42:ad:c5: 1f:dc:e0:6e:72:1c:d5:56:de:f5:8c:d6:07:41:2d:ce:8a:8d: 4c:60:a9:b5:57:6f:af:15:83:61:bd:34:84:bc:35:b9:cf:51: 6a:fb:11:3d:ec:19:fb:e0:83:a6:32:38:25:e5:23:9c:0f:ba: 38:c6:3a:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjQq8CIYNlpF96c7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MWMxNTFkMTctZGEwNi00Y2FjLTljYTAtMmMzNjU0NjE4YjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AugKM5cCYbnLK4JgETCaOLZrpRq0byTWHbw XaqRHGc2WQ2xtikXQHO9DCQ7Mbt6PyIYDFSVZ5P672smaTmFbOrnqBcu/LHZnjV8 14YYd7iElJE8njQNHge2xIK678xadFZU3lsZwsI7HJY8yvWFBDcrl4fzrTflaUOl K/8Lktuo+Gq1wB55aM6hT5ecfObkfUVvzR4icsxlm/QDVEGRrReOqEEnyw0d+K1a vitngAmvuskzTz9mRMPnMG2+mzHqCIsodL2HLkBApsHks7xaP/R/vXms/2sjKvGh dwMd8pEEAFRqxKaxCu9Q7gnnGKlN4a5L9mpoZlWc4HMYfoEedwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO6DOTnoyeMGkHmQXZ6gbU/OCksFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2I0M2U3NzUtMzA1Mi0z OTgwLWI4OWUtMGE5MWIxOTc5OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeREU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHuHExR8D1f78MED1S1o4kcVf50RyKd83ksOmrz3Qrmb8eLHJlT8 39O7W94YDIJtBN7BFwVrwbytH1BhEd7R5kdfpVd3nNyfjBWK8iVNdC3ihP3lP+eG d0Ctp7Fg8fIwyyTEjzKnrY6KzhUiZqcZrFfuhtkw8nbL8AY6VvyFkTW6rIlb/iZU KbcTWaMlYDGWkAju4bj0StOj6c/+WajiC60K/HPtEJUX+rAHC0hf0kWzEDTxpA18 48pMRYJ9EuNY65CqREKtxR/c4G5yHNVW3vWM1gdBLc6KjUxgqbVXb68Vg2G9NIS8 NbnPUWr7ET3sGfvgg6YyOCXlI5wPujjGOnA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:24 2025 by rpki-client