$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a94c5e18-de98-3586-b1c9-0f833b99a43a.roa File: a94c5e18-de98-3586-b1c9-0f833b99a43a.roa (raw, json) Hash identifier: 9QRVbp9kneEtfRAuXQeM7llv3vpS7HfVd2rDyGHQ1kc= Subject key identifier: 2F:43:86:91:39:D8:6E:01:CD:EA:00:01:AA:86:C6:B3:2D:78:2F:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA5AFA804392938F9C61C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a94c5e18-de98-3586-b1c9-0f833b99a43a.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 2001:579:98::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:5a:fa:80:43:92:93:8f:9c:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=d9db3782-ff07-4d26-b466-5245c74ed551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:76:fd:f0:fa:b8:33:51:ed:12:75:a3:91: c2:c6:27:0c:b1:ae:6a:6a:ce:87:ce:ae:fd:c5:aa: c8:33:f0:42:1d:c9:bf:1d:3d:d9:4b:ff:7d:db:bf: 07:ac:94:ca:8c:2a:db:b7:1d:42:d8:d2:70:b5:a4: 52:a6:b9:3c:51:21:e0:51:e8:de:17:a1:fe:ec:c6: f3:ac:ac:7d:65:14:24:4a:64:c7:b2:ba:01:1b:c3: ee:8a:04:66:43:ec:25:a1:32:58:d2:d5:a8:98:37: d4:cd:e1:f3:37:fb:c2:99:95:2c:8c:d5:30:c4:57: 70:02:c8:39:6d:c5:48:95:e1:1e:cf:4b:d7:b3:e8: 4f:b4:ce:22:bf:3d:ce:f1:33:21:bf:6c:6d:f3:aa: ce:f1:ec:12:cf:bf:fb:7b:d5:74:d7:d2:78:ff:a0: 28:6c:73:d8:a5:8b:95:b9:b9:f1:52:31:21:7f:8f: 77:dc:fc:5c:10:a5:58:74:1d:fc:0d:b2:81:86:ea: 61:48:01:fb:e4:dc:40:66:73:6a:f0:d7:35:45:75: 29:6f:2c:67:9a:84:6c:21:90:b8:18:0a:7e:03:db: 22:db:5b:c6:f1:62:6d:da:bd:54:7c:19:4a:d9:aa: fd:60:2a:43:84:62:9c:65:7c:78:a7:1f:59:60:1d: e1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:43:86:91:39:D8:6E:01:CD:EA:00:01:AA:86:C6:B3:2D:78:2F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a94c5e18-de98-3586-b1c9-0f833b99a43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:98::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:00:0a:6f:63:02:64:09:ac:07:8c:f3:4d:fd:26:af:6a:80: fb:0c:8e:f2:e0:40:cb:9e:6d:9f:89:ab:b0:e9:71:04:74:90: 11:f1:2e:38:e9:fd:9e:90:90:55:6c:81:8a:bb:4f:db:e9:f4: ae:c6:89:3c:d8:3f:9e:21:1f:da:22:03:6e:f0:60:de:13:f7: a6:52:1e:c3:56:fd:40:5f:83:63:06:7e:c9:52:cf:12:be:81: f9:7b:06:b4:fa:dc:c4:ff:f0:b1:99:6f:17:94:8d:1f:35:88: b9:b5:7f:18:37:64:73:a8:2a:5b:65:2e:ed:3a:8a:8a:2a:ce: ae:1e:37:32:5c:b9:6c:a5:99:d5:c5:2f:95:f7:a1:31:6a:e0: a3:43:76:d8:c2:fc:ff:2b:d1:71:15:2a:7f:7e:48:00:ba:90: 95:ae:8d:87:02:30:8a:92:04:00:75:97:2c:bc:cb:5a:ba:91: 84:2d:a1:ab:32:78:f1:bd:6d:ae:02:5d:2e:7f:de:92:7d:ca: e3:2d:ce:ad:e8:7d:9c:16:a0:ad:fe:63:71:bc:4d:06:6a:c9: ef:f1:d7:dd:84:5e:a7:f2:d0:ca:50:86:0d:02:0d:8c:e8:61: e5:35:d8:30:35:cf:e3:d1:85:2b:9a:77:63:ed:d7:88:5b:36: 6e:15:24:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnr6lr6gEOSk4+cYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZDlkYjM3ODItZmYwNy00ZDI2LWI0NjYtNTI0NWM3NGVkNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN12/fD6uDNR7RJ1o5HCxicMsa5qas6Hzq79 xarIM/BCHcm/HT3ZS/99278HrJTKjCrbtx1C2NJwtaRSprk8USHgUejeF6H+7Mbz rKx9ZRQkSmTHsroBG8PuigRmQ+wloTJY0tWomDfUzeHzN/vCmZUsjNUwxFdwAsg5 bcVIleEez0vXs+hPtM4ivz3O8TMhv2xt86rO8ewSz7/7e9V019J4/6AobHPYpYuV ubnxUjEhf4933PxcEKVYdB38DbKBhuphSAH75NxAZnNq8Nc1RXUpbyxnmoRsIZC4 GAp+A9si21vG8WJt2r1UfBlK2ar9YCpDhGKcZXx4px9ZYB3htwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC9DhpE52G4BzeoAAaqGxrMteC9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTk0YzVlMTgtZGU5OC0z NTg2LWIxYzktMGY4MzNiOTlhNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeQCY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACAACm9jAmQJrAeM8039Jq9qgPsMjvLgQMuebZ+Jq7DpcQR0kBHx Ljjp/Z6QkFVsgYq7T9vp9K7GiTzYP54hH9oiA27wYN4T96ZSHsNW/UBfg2MGfslS zxK+gfl7BrT63MT/8LGZbxeUjR81iLm1fxg3ZHOoKltlLu06iooqzq4eNzJcuWyl mdXFL5X3oTFq4KNDdtjC/P8r0XEVKn9+SAC6kJWujYcCMIqSBAB1lyy8y1q6kYQt oasyePG9ba4CXS5/3pJ9yuMtzq3ofZwWoK3+Y3G8TQZqye/x192EXqfy0MpQhg0C DYzoYeU12DA1z+PRhSuad2Pt14hbNm4VJAQ= -----END CERTIFICATE-----Generated at Tue Jul 1 17:18:55 2025 by rpki-client