$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa File: 27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa (raw, json) Hash identifier: FgwTnw535Fct61U5rHYSQ+A8rlYnP4vTPnL7DxEud44= Subject key identifier: 1D:60:C5:13:E9:F8:E9:8D:AD:CD:B1:2C:C9:D1:62:22:7D:B7:D6:90 Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F432858490E16CC4D43F9B083E4958360 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 3573 IP address blocks: 2610:b0:41d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:cc:4d:43:f9:b0:83:e4:95:83:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=ca9a3475-cf66-43dc-b1a1-e1b7c3c5962c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:03:c4:90:04:31:f1:46:e4:01:ae:fd:21: cd:6a:4a:5e:bc:61:ba:5c:a0:87:6f:0d:65:6d:41: c2:ca:ef:68:ae:86:fa:d9:84:52:0c:63:70:db:c2: fc:d8:72:fe:7f:0d:89:47:81:cf:98:57:a3:c5:3a: 28:cc:e4:09:2e:b7:39:95:51:79:bb:c3:66:34:6d: 25:c4:1a:93:6d:28:0f:dc:64:ea:a3:b7:21:c0:06: 5c:fc:01:39:0d:ab:a9:a8:3e:b5:c8:1a:a6:ac:5f: 56:2c:40:3d:64:bc:f4:b1:79:8d:2b:e4:b4:2e:a5: 3a:b7:ab:62:69:2a:3d:2d:e2:27:a6:11:30:ab:8e: 10:05:9c:37:36:ca:de:71:a5:3a:f6:be:24:79:8b: b2:96:ba:93:2b:62:c8:30:d7:a8:02:5f:a4:3d:88: 55:21:1b:24:f8:47:ac:6f:4c:ab:39:10:38:50:78: 8d:9e:66:80:90:a1:63:3c:e6:e6:01:01:61:6e:69: 5b:a0:9d:c0:9a:7a:08:74:50:69:87:cc:be:8c:2a: 6c:fa:32:b7:60:c3:e7:a0:a6:a8:b6:d0:0e:e8:43: aa:5b:1d:f5:9d:0b:6c:b1:b2:9f:ba:5b:43:66:ff: 23:e8:a4:22:d9:c9:2e:e8:10:0e:e6:f2:96:a1:b7: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:60:C5:13:E9:F8:E9:8D:AD:CD:B1:2C:C9:D1:62:22:7D:B7:D6:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv6: 2610:b0:41d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:af:43:7a:96:4f:fe:fd:49:ef:17:cd:c4:07:81:71:60:2a: 68:0d:d6:16:7d:3f:b9:a0:65:01:2d:67:54:2b:6c:cf:97:bb: 40:09:61:f0:55:aa:2d:5e:88:f1:b5:70:d9:31:62:2b:bd:68: 47:03:08:23:8f:e0:c5:7a:c2:e8:cb:7e:94:56:4b:8d:51:6c: e5:90:d3:ad:88:80:62:a7:f2:08:78:d1:60:a9:d1:5e:01:68: bb:6f:26:11:18:de:0b:ea:89:27:f1:5f:70:6b:a5:f2:5e:00: 7a:58:5f:3e:60:6c:a8:57:cb:35:61:e3:d6:57:b3:3b:64:e2: d0:5e:d0:c1:e9:4a:0b:62:0a:ec:1a:b0:3c:87:37:89:57:d7: 26:6f:9c:d2:32:e2:46:ae:c4:40:f1:2b:a7:a7:9f:fe:db:c9: 9c:84:9a:98:d5:5d:d5:46:57:c9:66:58:7d:d9:2a:1f:45:a9: ef:fe:07:5d:3c:e7:0b:e2:98:f0:01:b3:f7:e0:63:eb:c3:e4: a1:01:da:ae:9e:6c:9d:de:ae:59:00:02:0f:cf:f8:7f:9e:47: 53:7a:77:94:2c:d4:70:ca:73:8f:6c:b7:1e:9f:11:db:87:d4: a1:e9:b9:bc:81:50:e4:de:2d:b3:33:76:22:70:87:ee:24:25: 6b:f3:98:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkOFsxNQ/mwg+SVg2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk Y2E5YTM0NzUtY2Y2Ni00M2RjLWIxYTEtZTFiN2MzYzU5NjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDgDxJAEMfFG5AGu/SHNakpevGG6XKCHbw1l bUHCyu9orob62YRSDGNw28L82HL+fw2JR4HPmFejxToozOQJLrc5lVF5u8NmNG0l xBqTbSgP3GTqo7chwAZc/AE5DaupqD61yBqmrF9WLEA9ZLz0sXmNK+S0LqU6t6ti aSo9LeInphEwq44QBZw3NsrecaU69r4keYuylrqTK2LIMNeoAl+kPYhVIRsk+Ees b0yrORA4UHiNnmaAkKFjPObmAQFhbmlboJ3AmnoIdFBph8y+jCps+jK3YMPnoKao ttAO6EOqWx31nQtssbKfultDZv8j6KQi2cku6BAO5vKWobdGrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB1gxRPp+OmNrc2xLMnRYiJ9t9aQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvMjdkODc2YjktOGFlZC0z NmY2LTljNmEtMWMxNGJkM2IwNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAsEHZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABuvQ3qWT/79Se8XzcQHgXFgKmgN1hZ9P7mgZQEtZ1QrbM+Xu0AJ YfBVqi1eiPG1cNkxYiu9aEcDCCOP4MV6wujLfpRWS41RbOWQ062IgGKn8gh40WCp 0V4BaLtvJhEY3gvqiSfxX3BrpfJeAHpYXz5gbKhXyzVh49ZXsztk4tBe0MHpSgti CuwasDyHN4lX1yZvnNIy4kauxEDxK6enn/7byZyEmpjVXdVGV8lmWH3ZKh9Fqe/+ B1085wvimPABs/fgY+vD5KEB2q6ebJ3erlkAAg/P+H+eR1N6d5Qs1HDKc49stx6f EduH1KHpubyBUOTeLbMzdiJwh+4kJWvzmIs= -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:36 2025 by rpki-client