$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa File: b27f9224-f2f6-354b-a909-331d9c0d7145.roa (raw, json) Hash identifier: QKIpG/trGipQ/zv46IAAXkiP8+YF2C/UUWD8QVeiawM= Subject key identifier: 79:4E:1C:E4:3F:54:66:A5:5E:73:20:E6:EA:FC:6D:4A:CF:7F:92:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975446D8BECAAB0912CC2E300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 396565 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:6d:8b:ec:aa:b0:91:2c:c2:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=9e3b8abd-2b73-4a1c-94e6-b6831e61ed2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:39:dd:fb:55:ef:eb:2d:d1:5e:47:90:be: ca:42:cf:49:0e:c1:b4:8f:8b:95:ab:f9:91:33:55: b8:25:b0:e9:23:20:b2:ce:5b:c6:38:f6:54:77:58: 18:b0:6d:b4:16:d9:a9:1a:b4:80:a9:e0:a7:a4:b0: 62:11:cf:89:6a:3a:64:a7:8c:31:55:94:7b:11:f5: e5:d5:24:c7:97:5f:ce:dd:aa:22:8c:48:f4:fd:d1: ba:f2:2d:60:ae:14:e5:a1:5d:18:ec:13:79:e0:11: c7:68:bf:0c:e1:45:8a:62:1b:b6:9e:99:d3:d0:cd: c6:0c:ea:c8:c4:c9:29:31:a7:6c:bf:db:a6:88:3d: 6e:51:90:42:6e:06:46:ae:01:04:ea:f2:20:96:74: 56:9c:99:92:c4:40:b8:fe:d7:f4:66:e4:9b:58:c9: 17:ab:fa:60:44:fb:88:62:1f:ad:6c:02:60:b1:32: 2e:c2:5c:ce:6d:29:f9:1d:33:b8:ef:28:0a:6c:1b: 6c:55:76:de:7b:82:32:46:89:03:b4:72:18:0c:a8: c1:7f:86:5c:82:3b:b0:c8:92:5d:b8:4e:98:f5:e6: f9:9e:38:52:24:41:85:bd:4d:5a:d0:15:b8:e0:54: c5:ad:8f:c6:4f:68:2c:c4:2d:82:7d:3e:3c:6d:8f: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4E:1C:E4:3F:54:66:A5:5E:73:20:E6:EA:FC:6D:4A:CF:7F:92:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b2:76:13:c6:11:75:ac:9d:a4:d9:fc:6b:bf:71:17:21:b3: ae:1c:6e:ef:a8:f8:e0:89:47:84:f2:00:2a:9c:8d:26:dc:d0: e5:0f:81:00:e5:92:ef:59:d7:02:29:f3:20:1b:fb:78:77:c8: fb:f7:11:8b:d6:77:c1:e5:6f:d5:61:30:59:13:ac:ee:28:81: 2d:dc:32:14:04:48:28:92:4e:85:19:7a:45:a5:b4:8e:a8:0c: 51:8c:b0:87:de:3b:6f:97:74:dc:e4:a3:72:97:ff:9f:5a:ce: 08:f9:fa:37:de:25:e5:3b:a9:95:9a:49:e3:94:04:29:94:c8: ea:15:3f:7f:f6:08:0d:79:3e:ea:9c:b0:c2:15:d0:7b:4a:cb: 30:52:63:1b:53:61:f8:db:fe:ac:80:b0:7d:f4:2b:ba:d6:b2: 5d:7b:db:48:1f:56:81:32:d3:0d:a8:63:9b:f2:96:db:01:84: 53:cd:37:97:47:9c:35:e5:de:8e:15:bb:cb:84:31:5e:3a:bc: 1b:23:fa:4a:68:5e:df:59:00:17:b8:19:cf:3d:c9:6c:f9:d1: bc:97:f9:06:98:bd:6c:09:44:c4:3f:72:68:20:b5:fe:13:06: 06:9e:16:63:5d:be:c4:04:af:96:02:6c:c7:fe:ea:45:76:1e: 43:f0:c1:4a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RG2L7KqwkSzC4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk OWUzYjhhYmQtMmI3My00YTFjLTk0ZTYtYjY4MzFlNjFlZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxg53ftV7+st0V5HkL7KQs9JDsG0j4uVq/mR M1W4JbDpIyCyzlvGOPZUd1gYsG20FtmpGrSAqeCnpLBiEc+Jajpkp4wxVZR7EfXl 1STHl1/O3aoijEj0/dG68i1grhTloV0Y7BN54BHHaL8M4UWKYhu2npnT0M3GDOrI xMkpMadsv9umiD1uUZBCbgZGrgEE6vIglnRWnJmSxEC4/tf0ZuSbWMkXq/pgRPuI Yh+tbAJgsTIuwlzObSn5HTO47ygKbBtsVXbee4IyRokDtHIYDKjBf4ZcgjuwyJJd uE6Y9eb5njhSJEGFvU1a0BW44FTFrY/GT2gsxC2CfT48bY8GJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHlOHOQ/VGalXnMg5ur8bUrPf5KVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjI3ZjkyMjQtZjJmNi0z NTRiLWE5MDktMzMxZDljMGQ3MTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCIsnYTxhF1rJ2k2fxrv3EXIbOuHG7vqPjgiUeE 8gAqnI0m3NDlD4EA5ZLvWdcCKfMgG/t4d8j79xGL1nfB5W/VYTBZE6zuKIEt3DIU BEgokk6FGXpFpbSOqAxRjLCH3jtvl3Tc5KNyl/+fWs4I+fo33iXlO6mVmknjlAQp lMjqFT9/9ggNeT7qnLDCFdB7SsswUmMbU2H42/6sgLB99Cu61rJde9tIH1aBMtMN qGOb8pbbAYRTzTeXR5w15d6OFbvLhDFeOrwbI/pKaF7fWQAXuBnPPcls+dG8l/kG mL1sCUTEP3JoILX+EwYGnhZjXb7EBK+WAmzH/upFdh5D8MFK -----END CERTIFICATE-----Generated at Sun Apr 27 21:30:50 2025 by rpki-client