$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b318b5f8-59d6-3ee7-9120-190bae6b13f2.roa File: b318b5f8-59d6-3ee7-9120-190bae6b13f2.roa (raw, json) Hash identifier: 9fqIA+b7/NVpXKBZTOEH+dP2yPZvcdZba6Yq5e8Cxy8= Subject key identifier: 42:07:3E:C4:6A:27:CB:70:73:AA:C6:07:0B:62:2D:F2:58:DC:F6:6E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849244E8B77A8EADC95BC76B640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b318b5f8-59d6-3ee7-9120-190bae6b13f2.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 22773 IP address blocks: 2001:578:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8b:77:a8:ea:dc:95:bc:76:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=babf40ed-e4bd-4de2-a00b-105437a29b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:d1:7d:df:5a:3c:b3:e0:a0:d7:b3:4b:13: ba:30:ec:d5:0c:d8:53:09:63:65:7b:48:41:bb:3c: 60:bd:2b:8c:d9:e0:b2:ed:30:a4:51:f6:95:ed:27: 78:d9:b8:6e:fe:f4:4c:b1:06:3f:c3:0a:59:27:fb: 2d:57:34:72:e6:fa:7c:e8:a6:46:eb:7b:59:d8:32: 84:2c:df:8e:a0:7d:ea:dc:5d:83:e2:63:19:b5:0b: 2a:67:2d:fe:a9:a0:cf:e1:47:01:4e:37:db:74:f2: 0e:47:b7:d9:b2:17:aa:f7:cf:fd:bf:42:18:70:34: 55:e7:2a:30:7a:e6:25:6b:6c:b6:9d:61:fa:63:1d: 69:9e:ad:f0:4e:b5:65:f9:8f:57:e4:16:5d:b2:bb: db:84:a6:6d:29:f5:a4:eb:5d:52:b7:31:3b:e1:30: cc:9b:e6:87:b3:23:03:4e:2e:07:81:ab:66:60:34: 30:3c:d0:61:a5:e8:58:4b:ff:2e:68:98:26:95:0f: 81:fb:4e:30:8f:c2:5e:ff:4c:01:38:c3:1e:4d:02: 78:06:d5:94:ab:aa:d7:8f:1b:98:ce:72:93:81:5f: 6f:8a:c7:57:d9:f7:fe:86:b3:39:ca:39:9b:bb:c9: 90:ce:f1:cd:55:8f:fd:ad:89:e5:b8:a7:f1:4f:38: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:07:3E:C4:6A:27:CB:70:73:AA:C6:07:0B:62:2D:F2:58:DC:F6:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b318b5f8-59d6-3ee7-9120-190bae6b13f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:32:2e:0c:69:d7:b6:39:c9:eb:cf:0a:db:ae:0a:f7:05:63: b6:e8:bf:a9:5a:fb:f0:a0:05:c3:33:92:b9:9b:95:32:d4:4a: 26:02:e3:97:86:e4:12:1e:57:3f:e2:df:ca:ed:47:ba:b9:e0: 4f:7d:64:7d:6d:34:ac:01:84:2e:03:5c:e1:c7:c6:3f:7d:32: 46:ae:b7:06:cc:f9:10:56:7d:57:c0:cf:2f:e7:90:da:b3:3f: a7:f9:63:08:c9:e9:25:a6:87:97:94:0f:c4:29:96:a4:d0:d4: 56:46:e3:50:1c:43:ba:d3:cc:5b:2e:91:62:8c:87:06:1a:d9: fd:44:55:8c:08:b3:ec:20:fa:9f:33:df:77:a1:f0:a4:d7:82: da:c7:61:a9:48:1e:2d:05:99:52:8d:61:aa:f8:9b:57:c3:1a: 99:bc:f9:dd:72:de:a0:76:45:91:58:8d:55:17:2b:f1:e5:b6: fd:0e:f9:8c:7f:4f:e6:32:4d:e9:5e:12:68:b6:45:56:67:10: 3e:f5:b2:1c:7f:61:53:64:02:80:21:69:d6:64:93:38:88:45: e8:21:87:ee:ae:27:2a:25:c0:be:91:b0:4e:27:96:2e:d1:c0: 63:40:04:29:d7:d1:2b:b5:60:fd:9d:16:55:bc:5a:a4:ec:e6: 53:2b:42:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkkTot3qOrclbx2tkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YmFiZjQwZWQtZTRiZC00ZGUyLWEwMGItMTA1NDM3YTI5YjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKzRfd9aPLPgoNezSxO6MOzVDNhTCWNle0hB uzxgvSuM2eCy7TCkUfaV7Sd42bhu/vRMsQY/wwpZJ/stVzRy5vp86KZG63tZ2DKE LN+OoH3q3F2D4mMZtQsqZy3+qaDP4UcBTjfbdPIOR7fZsheq98/9v0IYcDRV5yow euYla2y2nWH6Yx1pnq3wTrVl+Y9X5BZdsrvbhKZtKfWk611StzE74TDMm+aHsyMD Ti4HgatmYDQwPNBhpehYS/8uaJgmlQ+B+04wj8Je/0wBOMMeTQJ4BtWUq6rXjxuY znKTgV9visdX2ff+hrM5yjmbu8mQzvHNVY/9rYnluKfxTzi9IwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEIHPsRqJ8twc6rGBwtiLfJY3PZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjMxOGI1ZjgtNTlkNi0z ZWU3LTkxMjAtMTkwYmFlNmIxM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACAyLgxp17Y5yevPCtuuCvcFY7bov6la+/CgBcMzkrmblTLUSiYC 45eG5BIeVz/i38rtR7q54E99ZH1tNKwBhC4DXOHHxj99MkautwbM+RBWfVfAzy/n kNqzP6f5YwjJ6SWmh5eUD8QplqTQ1FZG41AcQ7rTzFsukWKMhwYa2f1EVYwIs+wg +p8z33eh8KTXgtrHYalIHi0FmVKNYar4m1fDGpm8+d1y3qB2RZFYjVUXK/Hltv0O +Yx/T+YyTeleEmi2RVZnED71shx/YVNkAoAhadZkkziIReghh+6uJyolwL6RsE4n li7RwGNABCnX0Su1YP2dFlW8WqTs5lMrQiQ= -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:49 2025 by rpki-client