$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8afbf11-bf68-3ccf-8cae-b7cf0aa5320f.roa File: d8afbf11-bf68-3ccf-8cae-b7cf0aa5320f.roa (raw, json) Hash identifier: adKKYC5JAwKf38MEZPAOns8+tQZk0rX+cva5QdY2rz0= Subject key identifier: DB:7A:A6:DE:3E:B1:D7:06:60:97:1E:81:F2:32:3B:55:56:5F:85:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB17CC9CAD1CB4D6256E780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8afbf11-bf68-3ccf-8cae-b7cf0aa5320f.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 2001:579:7050::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:7c:c9:ca:d1:cb:4d:62:56:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=f8fa78e8-db7a-4f5b-8f32-6c1addb06312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:c0:17:9b:c0:ba:f1:6e:39:a8:5e:00:62: 99:4d:1d:7d:e1:04:39:1f:7f:55:2d:90:c7:20:1c: 2e:3b:84:81:4b:19:4d:69:ca:89:4b:13:ce:98:74: 34:d5:78:fc:f3:c4:a2:97:fc:ad:d0:f7:1c:15:ec: 56:c9:0e:bc:a9:5e:84:9f:1c:09:f7:27:42:98:05: 55:f0:a3:31:73:6c:18:e3:45:2f:ab:ac:ed:1d:15: bf:bd:f9:ed:82:23:2b:22:6c:ae:9c:7b:61:08:82: 4a:32:d4:47:c9:83:23:6d:ee:3f:e6:14:a2:7c:cc: aa:3e:35:6a:f3:74:28:4a:fe:80:ec:e2:00:16:a2: 24:d3:9e:50:dd:df:ab:c9:16:f8:82:b2:c8:25:85: b8:dd:b3:ea:32:08:5f:ac:0f:10:00:30:f3:da:1b: 48:b8:03:4d:c4:38:12:66:71:a1:c7:b5:64:79:ba: 33:b4:f1:1b:52:37:1e:88:2e:09:a8:e3:98:24:27: 9c:23:17:c9:e6:84:e3:14:51:0b:9c:d1:74:b6:00: d1:b4:27:c5:e9:6d:4e:00:d0:5a:01:0a:3b:97:2f: f3:84:47:bd:a4:fb:71:1f:99:46:83:9f:63:30:97: 8c:f5:00:69:ee:8e:79:4e:0d:c3:f5:fe:56:fe:96: ad:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7A:A6:DE:3E:B1:D7:06:60:97:1E:81:F2:32:3B:55:56:5F:85:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8afbf11-bf68-3ccf-8cae-b7cf0aa5320f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:7050::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f1:e6:f3:24:db:f0:fc:a4:65:c6:ad:6e:39:6b:3a:65:14: d4:c3:d9:76:4e:7f:76:72:03:1b:0d:3c:2d:c6:28:ab:78:ef: c5:60:a5:cb:bc:08:4d:4d:5f:c9:1c:dc:7b:0e:e4:13:93:0d: 0b:d8:9f:5b:6c:1a:8f:97:db:16:46:3e:01:4f:cc:4f:a7:f0: d5:a1:9f:2b:d7:9b:88:50:55:96:f3:63:cc:e4:40:2a:f4:c0: 78:28:84:da:67:ca:b1:d5:e8:33:25:c7:23:49:03:dd:57:c2: 41:90:ad:ba:24:96:c7:68:2f:03:d0:d5:9d:7c:12:9c:20:73: 14:bc:cc:3d:b9:89:8b:74:b0:16:e8:c7:cb:56:4f:cc:c2:96: 60:81:63:21:dc:e2:91:9d:f0:f3:70:b6:17:8e:62:46:fe:74: a4:ac:d1:58:a7:b4:31:84:fd:64:fb:fa:be:86:77:6a:d7:1a: 2e:99:56:e9:ac:4a:92:19:5e:84:fd:e5:ab:93:33:93:04:65: 41:40:b0:62:5e:1e:80:a2:37:c7:2e:75:43:1e:75:72:de:81: e5:e7:2f:53:c7:eb:1d:84:84:a9:7b:87:77:e6:bf:f2:17:4e: e6:2e:90:6d:57:b3:d1:78:fb:68:d3:7f:19:2e:aa:3f:48:b7: 8e:8f:e4:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsXzJytHLTWJW54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZjhmYTc4ZTgtZGI3YS00ZjViLThmMzItNmMxYWRkYjA2MzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynHAF5vAuvFuOaheAGKZTR194QQ5H39VLZDH IBwuO4SBSxlNacqJSxPOmHQ01Xj888Sil/yt0PccFexWyQ68qV6EnxwJ9ydCmAVV 8KMxc2wY40Uvq6ztHRW/vfntgiMrImyunHthCIJKMtRHyYMjbe4/5hSifMyqPjVq 83QoSv6A7OIAFqIk055Q3d+ryRb4grLIJYW43bPqMghfrA8QADDz2htIuANNxDgS ZnGhx7VkeboztPEbUjceiC4JqOOYJCecIxfJ5oTjFFELnNF0tgDRtCfF6W1OANBa AQo7ly/zhEe9pPtxH5lGg59jMJeM9QBp7o55Tg3D9f5W/patVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNt6pt4+sdcGYJcegfIyO1VWX4WQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDhhZmJmMTEtYmY2OC0z Y2NmLThjYWUtYjdjZjBhYTUzMjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeXBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABLx5vMk2/D8pGXGrW45azplFNTD2XZOf3ZyAxsNPC3GKKt478Vg pcu8CE1NX8kc3HsO5BOTDQvYn1tsGo+X2xZGPgFPzE+n8NWhnyvXm4hQVZbzY8zk QCr0wHgohNpnyrHV6DMlxyNJA91XwkGQrboklsdoLwPQ1Z18EpwgcxS8zD25iYt0 sBbox8tWT8zClmCBYyHc4pGd8PNwtheOYkb+dKSs0VintDGE/WT7+r6Gd2rXGi6Z VumsSpIZXoT95auTM5MEZUFAsGJeHoCiN8cudUMedXLegeXnL1PH6x2EhKl7h3fm v/IXTuYukG1Xs9F4+2jTfxkuqj9It46P5BE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:42 2025 by rpki-client