$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cfeb7dd-696e-3c13-9d59-ed13563d32c9.roa File: 3cfeb7dd-696e-3c13-9d59-ed13563d32c9.roa (raw, json) Hash identifier: k23OtwA4/b7VajU8Dtj0weaSM9ZD5hUQhIX+6pOkKwY= Subject key identifier: 00:56:77:89:D1:79:DC:65:99:81:27:0D:77:18:8F:CF:E5:D1:F7:A3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FE03BE533695C2D9F6E6C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cfeb7dd-696e-3c13-9d59-ed13563d32c9.roa Signing time: Thu 01 May 2025 17:26:57 +0000 ROA not before: Thu 01 May 2025 17:26:57 +0000 ROA not after: Wed 30 Jul 2025 17:26:57 +0000 asID: 22773 IP address blocks: 2001:578:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fe:03:be:53:36:95:c2:d9:f6:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:57 2025 GMT Not After : Jul 30 17:26:57 2025 GMT Subject: CN=613af41e-3497-4cfa-873b-6cc518b490ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:c8:ee:5c:b8:41:d5:36:6a:8e:e9:e0:b3: de:42:0d:bc:c3:ed:cc:9c:1a:6e:ff:3a:01:cd:c8: 71:fe:13:33:06:bd:3f:1f:09:c9:14:18:f5:59:88: 57:0e:65:36:9d:0a:6a:69:31:74:8b:7c:d9:a7:9c: 2e:63:2d:fc:74:24:81:97:aa:d8:96:57:83:ad:77: 54:e7:71:79:2c:ce:9f:ed:bb:09:f1:b4:12:eb:c4: f6:4d:26:d9:bd:df:1f:5a:b6:88:86:da:97:fc:5c: 58:18:60:15:f7:42:c5:f8:79:cd:5e:c2:56:de:a4: f9:92:f6:2d:29:13:14:f2:c8:c8:e4:48:e9:4a:4c: 3f:37:26:fd:1a:5c:2a:b2:55:37:90:af:fb:ce:6b: 22:e7:9e:f2:cf:dc:6b:37:99:e5:41:ac:b6:64:43: 0a:4a:58:3f:2c:42:72:1a:71:6b:66:d8:bd:4b:c8: 4f:33:29:23:47:ca:d6:6a:aa:50:d4:26:f6:7c:47: dd:d6:37:2f:d4:3d:1b:77:56:bf:c0:a2:ba:9d:29: 33:f4:df:de:b0:04:92:91:1e:96:24:4a:21:16:2b: ab:19:28:94:f5:d1:4f:8d:79:6b:3f:59:65:9f:dd: 0c:ea:16:2f:6f:23:42:af:24:44:47:95:1f:26:a0: 6a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:56:77:89:D1:79:DC:65:99:81:27:0D:77:18:8F:CF:E5:D1:F7:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cfeb7dd-696e-3c13-9d59-ed13563d32c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:15:16:60:08:a0:a0:f8:bf:5e:85:cf:3d:93:74:79:51:18: eb:36:f4:45:8c:0c:be:85:36:81:69:7a:1c:11:56:d3:ad:cc: 35:0f:98:5a:df:a1:f7:d4:0b:1b:55:18:0c:6e:8a:b0:de:3d: 7b:4e:dd:22:77:d5:16:91:d4:bb:2d:0a:36:29:b3:1b:ec:b6: a8:25:47:28:bc:d3:76:40:17:51:74:85:e0:09:d2:42:ef:fc: b9:b0:2e:5c:f4:a3:9c:47:0f:6e:25:3c:29:9f:83:95:af:41: cc:6e:e9:0d:58:8b:1e:d9:08:e0:87:ed:39:4c:e1:88:21:00: 50:ce:7f:ff:4b:fa:04:dd:bb:61:26:25:8f:17:5e:9b:07:2b: c2:bc:d6:4d:54:ac:32:d2:87:b9:1b:d1:2b:8a:2f:e8:8d:62: b3:5c:fd:ab:3d:d7:8b:4d:5f:54:55:30:0e:bf:6b:56:a9:bd: f7:11:b2:8a:8d:7e:e2:43:f8:70:ad:c4:7a:87:b8:c5:89:55: 80:89:bd:3a:3c:01:78:b3:32:6b:59:02:9f:b2:6a:02:77:2a: 26:be:e0:6c:e9:e7:8f:00:0d:78:65:37:b0:b1:fa:96:ee:24: 4c:49:f3:25:c6:04:9c:76:09:e5:4e:a6:98:ff:6e:fe:f9:2f: 2c:7e:24:74 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEm1/gO+UzaVwtn25sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjY1N1oXDTI1MDczMDE3MjY1N1owLzEtMCsGA1UEAxMk NjEzYWY0MWUtMzQ5Ny00Y2ZhLTg3M2ItNmNjNTE4YjQ5MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYjI7ly4QdU2ao7p4LPeQg28w+3MnBpu/zoB zchx/hMzBr0/HwnJFBj1WYhXDmU2nQpqaTF0i3zZp5wuYy38dCSBl6rYlleDrXdU 53F5LM6f7bsJ8bQS68T2TSbZvd8fWraIhtqX/FxYGGAV90LF+HnNXsJW3qT5kvYt KRMU8sjI5EjpSkw/Nyb9GlwqslU3kK/7zmsi557yz9xrN5nlQay2ZEMKSlg/LEJy GnFrZti9S8hPMykjR8rWaqpQ1Cb2fEfd1jcv1D0bd1a/wKK6nSkz9N/esASSkR6W JEohFiurGSiU9dFPjXlrP1lln90M6hYvbyNCryRER5UfJqBqzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFABWd4nRedxlmYEnDXcYj8/l0fejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2NmZWI3ZGQtNjk2ZS0z YzEzLTlkNTktZWQxMzU2M2QzMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEFeAMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdRUWYAigoPi/XoXPPZN0eVEY6zb0RYwMvoU2gWl6HBFW063MNQ+Y Wt+h99QLG1UYDG6KsN49e07dInfVFpHUuy0KNimzG+y2qCVHKLzTdkAXUXSF4AnS Qu/8ubAuXPSjnEcPbiU8KZ+Dla9BzG7pDViLHtkI4IftOUzhiCEAUM5//0v6BN27 YSYljxdemwcrwrzWTVSsMtKHuRvRK4ov6I1is1z9qz3Xi01fVFUwDr9rVqm99xGy io1+4kP4cK3Eeoe4xYlVgIm9OjwBeLMya1kCn7JqAncqJr7gbOnnjwANeGU3sLH6 lu4kTEnzJcYEnHYJ5U6mmP9u/vkvLH4kdA== -----END CERTIFICATE-----Generated at Sun May 11 14:56:28 2025 by rpki-client