$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb6dd7f3-78d6-3681-ab44-748e2d95fa9c.roa File: eb6dd7f3-78d6-3681-ab44-748e2d95fa9c.roa (raw, json) Hash identifier: 1M2aeT9JXp0Ed/wfiUdS3db/xaJWlZIXJFvrhrGU624= Subject key identifier: A6:65:4D:7A:41:5C:8E:9F:35:70:45:0E:D3:C0:EF:DA:8B:94:97:2F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB172230019D08E9BE90E40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb6dd7f3-78d6-3681-ab44-748e2d95fa9c.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 2001:579:108c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:72:23:00:19:d0:8e:9b:e9:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=290b22e3-defa-4fd9-92ae-bf4e17376969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b9:b0:d7:91:29:bd:3c:5a:63:70:40:59:f0: b5:d3:17:de:c2:9c:43:bb:c8:96:44:fa:c1:9a:8a: 00:cb:ed:a8:4e:8c:0f:ae:7d:b1:6a:aa:44:e7:d7: 57:64:33:9d:66:42:99:85:f8:04:57:b4:ca:29:01: 26:0c:55:d8:2e:b9:b8:8a:74:3e:48:5a:01:97:e9: 3e:c2:23:ea:29:d6:1c:7d:fd:fb:94:3d:9b:d2:48: ea:43:0a:a4:28:4a:a0:08:9d:67:71:ee:85:13:73: 91:9a:f8:67:3e:6d:91:3d:eb:03:d8:02:44:10:75: 29:c9:25:a7:7b:53:cd:59:28:b6:2a:c6:aa:3e:02: 13:d3:22:d6:ef:45:ff:f4:dd:51:b8:17:83:f3:d3: b6:16:1c:b4:5d:7b:8a:82:07:b5:cc:ac:16:21:db: 34:19:59:93:e8:9a:12:3e:e9:d8:36:ec:4c:68:3a: d6:2a:58:65:32:e1:a0:80:35:67:02:bc:09:94:b5: 38:bc:7a:ad:91:81:84:7b:48:8b:22:4e:e0:d8:c0: 19:9a:9c:ff:ad:21:d7:0a:7c:85:fb:f3:45:28:fb: a8:5e:59:b5:86:ca:46:a9:78:5e:19:d4:f7:a3:00: 91:2c:42:34:be:9f:46:fc:e6:ac:5d:00:2d:af:d7: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:65:4D:7A:41:5C:8E:9F:35:70:45:0E:D3:C0:EF:DA:8B:94:97:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb6dd7f3-78d6-3681-ab44-748e2d95fa9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:108c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a3:bb:c1:e2:57:6a:40:de:6c:e7:cc:28:b5:6c:4e:4c:1e: e0:4e:c8:60:3b:d6:4f:a4:e7:4e:52:69:f6:59:27:cf:45:a4: b6:3d:52:6b:0a:f1:9d:68:be:a1:c3:b3:fd:13:69:17:a4:9b: b4:67:53:13:38:47:ee:55:19:7a:36:ea:00:41:53:ab:28:3d: 4d:55:12:88:86:5a:c4:4a:33:3d:3d:07:48:a4:d7:69:99:48: 8a:21:a0:d4:4c:85:cf:f9:6b:ec:c2:d2:6f:5a:15:ac:65:03: bd:5c:ef:21:1a:d3:8f:13:08:3f:78:56:75:2c:a6:81:f9:b5: 2c:76:7b:3b:4b:5d:a6:e4:9a:bc:a1:78:33:62:aa:08:27:f5: c9:0d:ab:60:74:19:7a:2a:b8:2c:02:44:b2:47:50:97:8c:b8: 2f:83:d1:e1:26:15:e2:b3:f1:24:f0:10:99:20:81:0b:c0:37: 4a:54:2f:c3:14:52:b5:75:b0:d7:67:63:80:63:3d:f9:c8:2f: 34:7c:e7:f0:59:4d:cd:b4:74:54:b8:15:aa:e4:0c:ff:8c:cc: 27:48:11:84:4f:83:0f:43:bb:c1:25:88:9e:02:5e:24:b9:f2: d3:0a:6b:ee:87:f6:74:d1:a4:71:18:23:41:ca:08:8a:7a:9c: 1f:b0:e0:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkMsXIjABnQjpvpDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MjkwYjIyZTMtZGVmYS00ZmQ5LTkyYWUtYmY0ZTE3Mzc2OTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbmw15EpvTxaY3BAWfC10xfewpxDu8iWRPrB mooAy+2oTowPrn2xaqpE59dXZDOdZkKZhfgEV7TKKQEmDFXYLrm4inQ+SFoBl+k+ wiPqKdYcff37lD2b0kjqQwqkKEqgCJ1nce6FE3ORmvhnPm2RPesD2AJEEHUpySWn e1PNWSi2KsaqPgIT0yLW70X/9N1RuBeD89O2Fhy0XXuKgge1zKwWIds0GVmT6JoS PunYNuxMaDrWKlhlMuGggDVnArwJlLU4vHqtkYGEe0iLIk7g2MAZmpz/rSHXCnyF +/NFKPuoXlm1hspGqXheGdT3owCRLEI0vp9G/OasXQAtr9eGPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKZlTXpBXI6fNXBFDtPA79qLlJcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWI2ZGQ3ZjMtNzhkNi0z NjgxLWFiNDQtNzQ4ZTJkOTVmYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeRCM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCju8HiV2pA3mznzCi1bE5MHuBOyGA71k+k505SafZZJ89FpLY9 UmsK8Z1ovqHDs/0TaRekm7RnUxM4R+5VGXo26gBBU6soPU1VEoiGWsRKMz09B0ik 12mZSIohoNRMhc/5a+zC0m9aFaxlA71c7yEa048TCD94VnUspoH5tSx2eztLXabk mryheDNiqggn9ckNq2B0GXoquCwCRLJHUJeMuC+D0eEmFeKz8STwEJkggQvAN0pU L8MUUrV1sNdnY4BjPfnILzR85/BZTc20dFS4FarkDP+MzCdIEYRPgw9Du8EliJ4C XiS58tMKa+6H9nTRpHEYI0HKCIp6nB+w4Jw= -----END CERTIFICATE-----Generated at Tue Apr 29 07:20:03 2025 by rpki-client