$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0104ff7a-9f3c-3905-80ce-c2c8bb2e4537.roa File: 0104ff7a-9f3c-3905-80ce-c2c8bb2e4537.roa (raw, json) Hash identifier: TYjYGNOHJf/Y+jX+eLyiNB2MgUmaJxKTj0ne9ERWxQc= Subject key identifier: 9A:C9:D9:DE:24:67:78:D1:D9:A7:53:EB:E1:FD:49:3F:BB:BC:2E:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858491AA6D37319AA46554B81CA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0104ff7a-9f3c-3905-80ce-c2c8bb2e4537.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 22773 IP address blocks: 2001:579:62b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d3:73:19:aa:46:55:4b:81:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=47f29110-0cf2-4e6f-a317-42f050197cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:02:f7:a7:db:f6:8a:84:03:9b:87:8a:a8:da: 6f:59:26:15:80:50:b3:2f:9e:96:e3:48:11:a7:f4: d1:86:69:c1:9e:35:49:25:81:eb:7c:27:ed:c1:91: ff:e0:fa:a4:9b:ac:a9:d9:9f:64:24:42:2e:19:98: ba:a7:63:18:e0:3f:e0:b4:ee:72:ab:d5:3b:88:a1: 0e:fa:93:13:5d:36:c3:17:cd:12:2d:fe:51:11:79: 37:d9:56:3e:95:2f:ad:f9:fd:0a:6f:b6:79:5c:d4: 8f:78:c3:24:f7:fa:fc:9b:d1:b2:49:99:94:52:0c: c0:e3:22:97:49:84:8d:c0:9c:ea:18:94:a7:c8:a1: 1f:ef:a4:49:c0:8e:39:f1:98:e7:5d:61:60:77:09: 41:ad:08:f9:52:33:ba:17:d6:7a:8d:4b:82:2f:ca: d1:e0:43:73:e0:87:b3:01:35:27:bf:75:17:36:fb: f1:b2:ba:08:b0:68:df:14:57:11:d4:71:21:b4:1e: 38:c1:94:25:7d:44:81:a4:d2:df:3c:ce:77:25:62: bb:67:e8:cc:f3:a6:8b:ee:27:01:6c:29:63:7f:b7: 26:d7:e7:6a:5b:eb:4a:cb:83:af:f6:c5:fa:3f:f8: d5:6f:cd:42:b0:85:aa:e6:52:04:6b:bf:45:6d:16: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C9:D9:DE:24:67:78:D1:D9:A7:53:EB:E1:FD:49:3F:BB:BC:2E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0104ff7a-9f3c-3905-80ce-c2c8bb2e4537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:62b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:bb:a8:73:e5:ce:94:a4:61:9b:c6:31:c8:dd:7c:77:14:46: ab:55:1a:63:74:f4:eb:61:d9:f3:11:c8:ad:10:47:fe:5e:81: 20:20:da:cc:62:df:b0:61:60:59:45:25:52:63:48:90:37:0f: 51:ba:f1:df:93:c8:40:47:2f:fa:47:a3:95:bb:d6:d1:51:d2: b9:68:39:e1:09:be:56:78:4d:2b:29:83:f7:ac:69:71:a3:c7: a7:e4:f2:f2:3e:68:ae:f3:c1:b6:74:2a:3d:00:0f:81:eb:f2: 0f:72:ec:b3:d0:b1:96:26:04:5f:32:4e:7c:68:e5:56:86:f3: c0:c5:3b:64:3b:ec:f3:6a:17:25:53:5a:03:d6:ed:75:ce:5b: 0e:38:a1:08:79:73:7e:2e:1e:f9:11:d2:07:be:d8:08:0a:5e: 69:d3:d8:7b:97:59:ff:82:6e:77:75:82:f9:4a:dc:b3:74:5b: 21:87:50:d9:25:68:ad:a1:4f:ab:ac:15:35:52:34:59:06:e4: 4f:88:6b:71:3d:6c:4b:8d:46:c3:11:01:a7:3c:c1:1f:d3:db: cc:47:d9:ac:1d:f3:98:49:bd:82:25:94:e5:21:f4:11:f7:44: ec:2f:d5:49:da:be:72:fd:33:1e:02:a8:4e:15:b9:d7:21:d8: cf:dc:4c:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkaptNzGapGVUuBygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NDdmMjkxMTAtMGNmMi00ZTZmLWEzMTctNDJmMDUwMTk3Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAL3p9v2ioQDm4eKqNpvWSYVgFCzL56W40gR p/TRhmnBnjVJJYHrfCftwZH/4Pqkm6yp2Z9kJEIuGZi6p2MY4D/gtO5yq9U7iKEO +pMTXTbDF80SLf5REXk32VY+lS+t+f0Kb7Z5XNSPeMMk9/r8m9GySZmUUgzA4yKX SYSNwJzqGJSnyKEf76RJwI458ZjnXWFgdwlBrQj5UjO6F9Z6jUuCL8rR4ENz4Iez ATUnv3UXNvvxsroIsGjfFFcR1HEhtB44wZQlfUSBpNLfPM53JWK7Z+jM86aL7icB bCljf7cm1+dqW+tKy4Ov9sX6P/jVb81CsIWq5lIEa79FbRaXcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJrJ2d4kZ3jR2adT6+H9ST+7vC5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDEwNGZmN2EtOWYzYy0z OTA1LTgwY2UtYzJjOGJiMmU0NTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeWK1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG67qHPlzpSkYZvGMcjdfHcURqtVGmN09Oth2fMRyK0QR/5egSAg 2sxi37BhYFlFJVJjSJA3D1G68d+TyEBHL/pHo5W71tFR0rloOeEJvlZ4TSspg/es aXGjx6fk8vI+aK7zwbZ0Kj0AD4Hr8g9y7LPQsZYmBF8yTnxo5VaG88DFO2Q77PNq FyVTWgPW7XXOWw44oQh5c34uHvkR0ge+2AgKXmnT2HuXWf+Cbnd1gvlK3LN0WyGH UNklaK2hT6usFTVSNFkG5E+Ia3E9bEuNRsMRAac8wR/T28xH2awd85hJvYIllOUh 9BH3ROwv1UnavnL9Mx4CqE4Vudch2M/cTC8= -----END CERTIFICATE-----Generated at Mon Apr 28 16:32:00 2025 by rpki-client