$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50bb1a37-bc86-32c4-b7ae-9af6e405d4be.roa File: 50bb1a37-bc86-32c4-b7ae-9af6e405d4be.roa (raw, json) Hash identifier: dT6IThlQBdt3nywEoV+LQWkCd+M34H/idJq3iIhL0Ds= Subject key identifier: A4:70:05:97:3F:94:FA:56:9C:C5:DC:8F:28:5A:70:2B:B0:61:B9:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B4149B4F4FBE72426C9B0000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50bb1a37-bc86-32c4-b7ae-9af6e405d4be.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 22773 IP address blocks: 2600:8807:a840::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:9b:4f:4f:be:72:42:6c:9b:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=44c3176a-78e0-440f-abf7-0f7e0339e576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b4:e8:38:ff:7d:76:68:2c:29:1b:36:c5:55: 36:fe:8d:d6:37:64:21:71:5f:f4:0b:0d:ba:5c:93: 62:a5:08:60:0b:1c:d4:15:d7:d4:88:fc:4f:7c:0a: 0d:6b:54:25:cc:6f:c2:d8:e8:47:11:2e:91:e0:7d: 20:b5:c9:9a:a0:5a:f5:58:2c:42:f2:31:0f:0b:82: 00:85:14:47:06:b5:de:f3:fc:34:1a:96:4d:39:da: 13:86:54:cd:26:d6:36:db:eb:0f:a1:08:4b:c2:15: ac:44:98:92:1d:ba:86:c0:52:4d:22:07:94:b0:e2: 0e:64:3d:45:0c:e2:6a:51:38:dc:29:e5:18:83:1b: b4:88:1b:1a:98:20:a6:80:c5:43:5c:0e:9d:b7:ff: 44:7b:28:a7:61:e2:6d:e2:85:ae:ab:0a:c2:d0:23: 0f:08:d7:36:b2:2b:56:3a:82:0f:3a:1b:a7:a6:af: cd:04:56:6a:88:d0:1b:46:99:82:b4:85:14:95:aa: d4:80:c8:36:5f:13:00:b5:f8:93:9f:fd:74:d7:aa: 9a:8e:72:65:2f:27:c0:73:4e:3f:39:fe:15:16:d1: 5e:40:60:a7:ef:30:b4:2e:61:b3:f4:04:7e:a7:5b: 43:1b:20:41:e1:fa:5a:f4:7e:65:fe:8c:a1:b9:e3: 20:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:70:05:97:3F:94:FA:56:9C:C5:DC:8F:28:5A:70:2B:B0:61:B9:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50bb1a37-bc86-32c4-b7ae-9af6e405d4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8807:a840::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:30:16:d8:0f:73:f7:c0:34:27:21:05:a7:f9:6f:6f:bd:93: 49:90:09:cd:29:b0:2b:2b:1e:64:ae:ec:f8:a6:9e:2e:78:62: 52:cf:59:0f:18:d6:4e:0a:23:89:cc:33:9b:3c:d4:75:81:40: 70:93:06:e3:6b:ec:cc:a7:2d:df:f8:ac:06:6d:e2:06:b7:0c: 20:f3:38:27:ea:71:63:9d:ab:32:51:90:00:80:79:70:9d:5c: 7c:7e:db:77:9f:b5:a5:71:06:76:c9:90:a7:3e:58:96:46:63: 48:08:b3:1f:eb:01:9b:c9:82:2b:b3:ad:fd:7e:b5:d8:c1:68: e1:72:a6:db:08:ed:2e:73:2f:fa:e3:9c:e2:ec:01:94:f0:78: e2:ab:00:57:60:ca:5d:48:f9:30:cd:89:d4:02:f2:19:cc:e1: 55:36:91:16:75:ef:d4:39:9a:4e:79:cc:bc:e1:4c:e3:51:75: 31:a1:34:bd:ee:5c:67:55:21:d3:07:8b:1c:46:c3:2d:16:dd: d8:fc:ca:41:85:8e:4b:27:16:67:e4:4c:7d:6f:f1:96:0a:bc: 66:6c:04:47:79:19:d3:37:3c:c3:71:72:fc:99:b8:b9:04:07: bc:a7:e0:37:b1:af:23:6f:38:23:9b:10:6d:1a:62:ad:5c:be: 03:e3:42:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm0FJtPT75yQmybAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk NDRjMzE3NmEtNzhlMC00NDBmLWFiZjctMGY3ZTAzMzllNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLToOP99dmgsKRs2xVU2/o3WN2QhcV/0Cw26 XJNipQhgCxzUFdfUiPxPfAoNa1QlzG/C2OhHES6R4H0gtcmaoFr1WCxC8jEPC4IA hRRHBrXe8/w0GpZNOdoThlTNJtY22+sPoQhLwhWsRJiSHbqGwFJNIgeUsOIOZD1F DOJqUTjcKeUYgxu0iBsamCCmgMVDXA6dt/9EeyinYeJt4oWuqwrC0CMPCNc2sitW OoIPOhunpq/NBFZqiNAbRpmCtIUUlarUgMg2XxMAtfiTn/1016qajnJlLyfAc04/ Of4VFtFeQGCn7zC0LmGz9AR+p1tDGyBB4fpa9H5l/oyhueMgHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKRwBZc/lPpWnMXcjyhacCuwYblEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTBiYjFhMzctYmM4Ni0z MmM0LWI3YWUtOWFmNmU0MDVkNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIB6hA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEQwFtgPc/fANCchBaf5b2+9k0mQCc0psCsrHmSu7Pimni54YlLP WQ8Y1k4KI4nMM5s81HWBQHCTBuNr7MynLd/4rAZt4ga3DCDzOCfqcWOdqzJRkACA eXCdXHx+23eftaVxBnbJkKc+WJZGY0gIsx/rAZvJgiuzrf1+tdjBaOFyptsI7S5z L/rjnOLsAZTweOKrAFdgyl1I+TDNidQC8hnM4VU2kRZ179Q5mk55zLzhTONRdTGh NL3uXGdVIdMHixxGwy0W3dj8ykGFjksnFmfkTH1v8ZYKvGZsBEd5GdM3PMNxcvyZ uLkEB7yn4DexryNvOCObEG0aYq1cvgPjQsc= -----END CERTIFICATE-----Generated at Sat May 10 22:18:57 2025 by rpki-client