$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c27b79ae-62b0-3f53-9608-18a1438b18ea.roa File: c27b79ae-62b0-3f53-9608-18a1438b18ea.roa (raw, json) Hash identifier: 1eMS+AhEVIckI2L8Ik+nhCJLIHxERlWAk9HbBF1vJqA= Subject key identifier: 58:AB:E6:F7:E7:96:B8:BA:6F:BC:92:72:ED:42:3E:B3:F5:FA:82:B8 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F432858499AF48BBB2148FAF29AB4C430 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c27b79ae-62b0-3f53-9608-18a1438b18ea.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 400097 IP address blocks: 2606:3d40:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8b:bb:21:48:fa:f2:9a:b4:c4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=c03d492b-786e-4245-a4b8-cea86107291d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:7c:45:94:71:cc:16:8c:21:7f:12:75:04: b4:95:08:fd:c6:ef:cd:0c:1c:90:25:ea:f9:4e:72: 41:a3:95:20:b6:e5:0f:7d:bc:d3:e2:ef:ef:28:6a: 34:1f:72:2f:0b:71:b7:f5:11:7e:ec:88:06:3c:46: 3c:73:72:a5:a3:87:24:e7:16:c5:2c:d0:4b:95:af: dc:dd:e6:f3:e0:21:17:cf:79:27:93:14:43:29:e9: 4d:54:1b:5a:46:23:de:25:81:5c:0a:fc:67:a1:e4: e4:84:0d:9f:75:69:0d:98:1b:00:40:30:ad:19:a0: 6f:4b:42:c9:a7:46:e7:a2:94:e6:dc:92:dd:05:66: b1:b8:d8:7b:09:04:4a:d9:86:e3:38:53:ca:97:03: 89:f1:d6:2a:81:f4:44:e6:8e:3c:c1:ef:66:c9:55: 6a:94:22:b1:23:a5:e4:f4:9c:ba:b5:ad:5c:ac:b4: 75:15:61:c6:4a:cd:62:fb:ce:52:6a:86:74:35:6b: 61:c5:29:05:34:df:fe:3e:9e:0d:c9:31:ad:26:e4: 2f:06:1c:37:fd:ff:60:87:f8:93:45:cf:e5:44:88: 7b:3c:ec:5a:3a:c6:ff:fc:80:ab:4b:31:ec:ec:2c: 77:72:ec:be:0d:30:7e:01:52:7a:35:ec:7a:96:ee: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AB:E6:F7:E7:96:B8:BA:6F:BC:92:72:ED:42:3E:B3:F5:FA:82:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c27b79ae-62b0-3f53-9608-18a1438b18ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:1c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:61:e5:7f:15:04:a3:71:2a:62:14:2f:d3:6b:73:38:aa:a7: c6:46:00:7c:63:75:32:6b:78:7d:60:23:80:b8:2e:17:d2:df: cc:9d:cc:cc:6c:e3:08:06:99:f8:6b:2e:d5:e2:42:8a:ec:0e: eb:0e:52:9d:52:18:00:b3:8c:13:41:7c:fc:7b:f7:c5:1d:96: 7c:26:18:93:6b:bc:10:86:93:16:78:ac:e7:7e:cd:49:12:90: 2d:61:ac:64:8a:5a:9e:02:32:d6:f5:04:2e:4c:d5:51:80:1d: f0:74:1b:e0:49:b3:13:04:f4:17:60:71:3d:43:85:0f:21:3f: ac:7e:68:f3:be:b9:6a:94:df:c6:f8:36:16:28:38:e6:97:0f: c0:7d:89:e4:1f:04:3c:0a:95:0b:77:57:b3:c8:dc:c7:92:60: 0a:68:84:78:28:44:14:a0:d0:1e:50:30:7f:76:d8:64:bb:de: b1:3e:6d:2a:1d:21:36:99:73:55:dc:fa:4c:b5:ad:10:7b:37: 2b:3d:a3:b7:b0:e5:e8:0f:49:05:6f:4b:da:06:0c:bb:b6:15: 86:44:a9:6d:5d:da:da:39:84:25:1b:de:eb:60:ae:58:4f:46: ab:af:a9:72:41:89:ca:a2:61:9b:65:62:00:ce:85:07:26:99: d6:d5:4e:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEma9Iu7IUj68pq0xDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YzAzZDQ5MmItNzg2ZS00MjQ1LWE0YjgtY2VhODYxMDcyOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquF8RZRxzBaMIX8SdQS0lQj9xu/NDByQJer5 TnJBo5UgtuUPfbzT4u/vKGo0H3IvC3G39RF+7IgGPEY8c3Klo4ck5xbFLNBLla/c 3ebz4CEXz3knkxRDKelNVBtaRiPeJYFcCvxnoeTkhA2fdWkNmBsAQDCtGaBvS0LJ p0bnopTm3JLdBWaxuNh7CQRK2YbjOFPKlwOJ8dYqgfRE5o48we9myVVqlCKxI6Xk 9Jy6ta1crLR1FWHGSs1i+85SaoZ0NWthxSkFNN/+Pp4NyTGtJuQvBhw3/f9gh/iT Rc/lRIh7POxaOsb//ICrSzHs7Cx3cuy+DTB+AVJ6Nex6lu40lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFir5vfnlri6b7yScu1CPrP1+oK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYzI3Yjc5YWUtNjJiMC0z ZjUzLTk2MDgtMThhMTQzOGIxOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVh5X8VBKNxKmIUL9Nrcziqp8ZGAHxjdTJreH1gI4C4LhfS38yd zMxs4wgGmfhrLtXiQorsDusOUp1SGACzjBNBfPx798UdlnwmGJNrvBCGkxZ4rOd+ zUkSkC1hrGSKWp4CMtb1BC5M1VGAHfB0G+BJsxME9BdgcT1DhQ8hP6x+aPO+uWqU 38b4NhYoOOaXD8B9ieQfBDwKlQt3V7PI3MeSYApohHgoRBSg0B5QMH922GS73rE+ bSodITaZc1Xc+ky1rRB7Nys9o7ew5egPSQVvS9oGDLu2FYZEqW1d2to5hCUb3utg rlhPRquvqXJBicqiYZtlYgDOhQcmmdbVTmc= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:40 2025 by rpki-client