$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc9cda15-d8fc-3708-a382-d2074604a7e5.roa File: cc9cda15-d8fc-3708-a382-d2074604a7e5.roa (raw, json) Hash identifier: 5DTjmPGIjAhbH65neyAnvf7rcaYTNuefDEg/lpmsXE0= Subject key identifier: 6F:2C:61:76:AC:46:DA:F2:44:D8:46:E3:58:2E:25:68:28:06:C5:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328583DCC32A6D7182DA21D111E5600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc9cda15-d8fc-3708-a382-d2074604a7e5.roa Signing time: Wed 04 May 2022 12:00:00 +0000 ROA not before: Wed 04 May 2022 12:00:00 +0000 ROA not after: Wed 05 May 2027 04:00:00 +0000 asID: 22773 IP address blocks: 2600:8804:780::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:cc:32:a6:d7:18:2d:a2:1d:11:1e:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 4 12:00:00 2022 GMT Not After : May 5 04:00:00 2027 GMT Subject: CN=95a4ca37-d08f-4fa2-9fa4-554d312e410a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:4d:57:1d:bd:57:a2:9a:a9:40:0c:4f:27: 39:99:8a:0a:c1:8f:2f:ec:2b:be:8b:9a:94:00:1b: 77:cf:8b:12:74:df:80:a3:dc:74:1e:c2:c1:2d:5c: aa:70:64:80:81:be:74:38:25:7e:6c:e9:ef:02:fe: 34:2a:ea:c2:3d:ab:d4:83:c5:b9:ca:26:8c:88:b7: 9d:53:14:44:e8:f8:0a:d1:71:56:2c:4b:58:fc:1c: c2:1f:27:af:fb:50:71:f3:18:b8:47:f3:0f:e4:9e: 86:f2:42:ff:44:a2:b8:59:1d:f4:39:39:d7:a7:3a: 9c:90:88:a3:51:2c:8b:66:83:15:04:3b:3e:5d:8f: fa:e2:26:3b:c2:b3:4a:ac:b1:47:46:54:71:9a:b3: b1:6a:02:37:50:18:00:bf:5e:ee:1d:99:66:a0:93: 3a:c4:0c:88:31:dd:73:d2:12:a0:68:93:80:e0:51: ca:8b:bc:3c:4a:11:c7:fc:c3:a9:79:62:3a:bc:2d: fb:fa:f0:bc:64:05:44:ba:e1:4b:4b:ed:2a:12:24: 58:91:a8:0a:20:1b:a7:f2:bc:e5:19:a3:9f:4b:9c: d8:9b:95:84:b5:19:98:ef:a5:27:52:73:ef:aa:d5: 8a:f0:60:0a:19:58:96:2f:02:fb:1f:cf:51:03:0f: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2C:61:76:AC:46:DA:F2:44:D8:46:E3:58:2E:25:68:28:06:C5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc9cda15-d8fc-3708-a382-d2074604a7e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8804:780::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:98:63:3b:70:36:e7:67:04:05:51:f9:ac:6c:f1:87:b1:e0: 8a:6f:de:d3:3c:1f:67:e9:a8:4b:a1:77:38:bc:54:ce:6f:05: f5:d8:51:c9:26:fb:c0:ab:65:9d:a7:57:1d:f1:88:0e:7e:3e: e5:16:53:95:ea:04:fd:85:9b:2c:37:6f:f1:dc:34:19:e4:11: 7e:f2:26:9d:24:cf:d5:25:9e:e2:25:35:c5:64:7c:c7:62:1f: 1c:8f:cd:0b:a0:2d:48:b1:e2:fd:54:87:02:91:69:f6:9b:65: 3a:ba:20:0d:1c:4b:48:12:95:ce:8f:36:46:6a:8d:c8:89:17: 08:f3:b9:f1:09:f5:a0:fd:3b:bc:f3:3f:02:69:7e:c4:ee:1a: 22:8e:19:35:32:8c:80:d1:6a:f1:76:c2:d8:ec:d8:e9:01:23: 7c:52:80:de:4d:34:f7:cb:69:25:7a:3d:e0:24:d5:a7:9d:b0: bc:b3:9e:28:ea:af:11:66:d1:c7:dd:15:1f:ea:e7:33:2c:95: f0:fd:3a:67:d0:65:f3:2d:c7:6a:74:c6:60:b1:6e:8f:40:27: 63:99:79:7e:04:19:e0:71:cd:d6:a3:c5:0f:2a:72:6c:df:8f: da:9a:48:28:e3:05:62:00:0f:f5:46:13:57:c4:7d:d6:bd:74: 04:e9:63:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3MMqbXGC2iHREeVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTIyMDUwNDEyMDAwMFoXDTI3MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk OTVhNGNhMzctZDA4Zi00ZmEyLTlmYTQtNTU0ZDMxMmU0MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmelNVx29V6KaqUAMTyc5mYoKwY8v7Cu+i5qU ABt3z4sSdN+Ao9x0HsLBLVyqcGSAgb50OCV+bOnvAv40KurCPavUg8W5yiaMiLed UxRE6PgK0XFWLEtY/BzCHyev+1Bx8xi4R/MP5J6G8kL/RKK4WR30OTnXpzqckIij USyLZoMVBDs+XY/64iY7wrNKrLFHRlRxmrOxagI3UBgAv17uHZlmoJM6xAyIMd1z 0hKgaJOA4FHKi7w8ShHH/MOpeWI6vC37+vC8ZAVEuuFLS+0qEiRYkagKIBun8rzl GaOfS5zYm5WEtRmY76UnUnPvqtWK8GAKGViWLwL7H89RAw/lWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG8sYXasRtryRNhG41guJWgoBsVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2M5Y2RhMTUtZDhmYy0z NzA4LWEzODItZDIwNzQ2MDRhN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIBAeA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFGYYztwNudnBAVR+axs8Yex4Ipv3tM8H2fpqEuhdzi8VM5vBfXY Uckm+8CrZZ2nVx3xiA5+PuUWU5XqBP2Fmyw3b/HcNBnkEX7yJp0kz9UlnuIlNcVk fMdiHxyPzQugLUix4v1UhwKRafabZTq6IA0cS0gSlc6PNkZqjciJFwjzufEJ9aD9 O7zzPwJpfsTuGiKOGTUyjIDRavF2wtjs2OkBI3xSgN5NNPfLaSV6PeAk1aedsLyz nijqrxFm0cfdFR/q5zMslfD9OmfQZfMtx2p0xmCxbo9AJ2OZeX4EGeBxzdajxQ8q cmzfj9qaSCjjBWIAD/VGE1fEfda9dATpY6k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:49 2025 by rpki-client