$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40047a86-babf-3457-916a-ecf3868014a7.roa File: 40047a86-babf-3457-916a-ecf3868014a7.roa (raw, json) Hash identifier: 5kRdaZi8TNB1ZY4P13YULrgYgRDWKSWsL9ELiRL92PE= Subject key identifier: C3:7D:9F:92:8A:9B:F3:D5:E1:E1:6D:97:5A:98:DD:14:2D:9A:16:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849D164FDA78D24C65AD3202800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40047a86-babf-3457-916a-ecf3868014a7.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 22773 IP address blocks: 2001:57a:e245::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fd:a7:8d:24:c6:5a:d3:20:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=104e641c-b304-46b8-8d7e-4fe2d55da6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:bd:0e:06:64:d6:d4:ec:21:04:6d:b2:90: cc:6d:83:5c:2d:f3:a2:38:1c:5c:0b:4b:4f:ad:6a: ff:68:23:25:ff:55:a2:1d:6d:f9:2b:66:69:f4:a0: 51:b9:d9:a0:e5:ec:d6:4c:c8:d0:ae:2c:ce:b3:91: b3:57:0f:f1:a9:bb:9e:a9:45:f9:06:f3:31:59:9c: 76:a8:ed:3f:03:e7:86:01:fd:85:bc:cf:90:a5:c3: 1c:cb:a1:85:9e:af:bb:86:02:a7:63:a7:57:09:cc: ce:0b:5b:ad:66:fa:64:68:9a:92:4a:99:47:27:9c: 14:79:c0:11:fa:a0:00:2f:d7:bc:ef:e3:89:0a:56: 2d:3d:1a:8b:77:eb:87:7d:5a:31:ce:36:26:f0:8d: 3c:99:96:98:3d:93:c3:10:bb:62:6f:9e:a6:c6:1c: 36:52:67:80:26:40:8a:69:d2:bd:7d:ac:f9:95:16: 30:80:7c:fe:2f:a0:56:9f:76:a0:8e:b3:a4:54:b4: 54:21:07:7e:c0:d4:8a:7f:d7:74:0b:1c:2f:07:52: 3b:5e:13:00:3e:ee:fd:02:2d:12:57:b4:7c:8a:52: 06:a7:d9:3c:de:dd:71:77:46:c5:85:13:d8:ac:ae: 80:15:0b:f0:8a:bd:25:d6:de:47:ad:0d:fc:ff:22: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7D:9F:92:8A:9B:F3:D5:E1:E1:6D:97:5A:98:DD:14:2D:9A:16:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40047a86-babf-3457-916a-ecf3868014a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:57a:e245::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:38:42:75:45:b2:a0:90:93:a5:67:75:dd:68:2f:fa:6f:bb: 46:ea:97:a5:fc:5c:b1:85:94:70:94:df:66:2a:4c:d0:8c:d3: b0:fc:74:c6:27:d6:0b:33:00:fb:18:2a:5f:a8:4e:c6:2e:bf: a1:e2:57:c2:56:71:9a:82:d8:4b:d4:a9:7d:c1:f3:d3:0a:15: 59:6c:ed:1a:3c:96:c0:f2:85:8c:d2:39:00:34:a3:24:9d:ec: a2:b9:f5:58:98:2e:5b:3e:2e:22:a6:05:25:85:96:d8:08:03: 87:c8:fc:c1:b9:27:65:26:16:f2:34:70:c2:77:ab:00:a6:c3: 94:ab:f8:f1:9f:b7:70:ef:25:1f:ac:1b:39:76:b2:0c:26:d3: 4e:38:02:49:da:6e:0f:96:80:21:b2:4a:73:8e:0d:45:ef:9b: ce:9e:09:99:ae:89:06:c5:5f:74:62:00:b8:37:43:d4:8d:3a: e7:9e:2c:31:5c:cb:25:c5:24:22:34:e0:43:cb:6b:28:49:8a: 7d:fa:9a:9c:15:73:6d:42:e4:41:04:db:86:ee:e9:6c:eb:76: c3:7e:44:a0:80:63:06:1a:bd:6f:70:31:cf:40:98:dd:e1:0e: 42:b5:c9:ae:bb:78:20:7a:59:0b:36:9a:cf:87:86:4d:08:67: 3b:ff:26:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnRZP2njSTGWtMgKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MTA0ZTY0MWMtYjMwNC00NmI4LThkN2UtNGZlMmQ1NWRhNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpu9DgZk1tTsIQRtspDMbYNcLfOiOBxcC0tP rWr/aCMl/1WiHW35K2Zp9KBRudmg5ezWTMjQrizOs5GzVw/xqbueqUX5BvMxWZx2 qO0/A+eGAf2FvM+QpcMcy6GFnq+7hgKnY6dXCczOC1utZvpkaJqSSplHJ5wUecAR +qAAL9e87+OJClYtPRqLd+uHfVoxzjYm8I08mZaYPZPDELtib56mxhw2UmeAJkCK adK9faz5lRYwgHz+L6BWn3agjrOkVLRUIQd+wNSKf9d0CxwvB1I7XhMAPu79Ai0S V7R8ilIGp9k83t1xd0bFhRPYrK6AFQvwir0l1t5HrQ38/yLthwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMN9n5KKm/PV4eFtl1qY3RQtmhbyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDAwNDdhODYtYmFiZi0z NDU3LTkxNmEtZWNmMzg2ODAxNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeuJF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJo4QnVFsqCQk6Vndd1oL/pvu0bql6X8XLGFlHCU32YqTNCM07D8 dMYn1gszAPsYKl+oTsYuv6HiV8JWcZqC2EvUqX3B89MKFVls7Ro8lsDyhYzSOQA0 oySd7KK59ViYLls+LiKmBSWFltgIA4fI/MG5J2UmFvI0cMJ3qwCmw5Sr+PGft3Dv JR+sGzl2sgwm0044Aknabg+WgCGySnOODUXvm86eCZmuiQbFX3RiALg3Q9SNOuee LDFcyyXFJCI04EPLayhJin36mpwVc21C5EEE24bu6WzrdsN+RKCAYwYavW9wMc9A mN3hDkK1ya67eCB6WQs2ms+Hhk0IZzv/JqE= -----END CERTIFICATE-----Generated at Tue May 13 18:45:44 2025 by rpki-client