$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa File: a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa (raw, json) Hash identifier: cZ+128A7CBtugQbJoIX+6hGdHRCvOfPFR0hDcDjfEcU= Subject key identifier: CE:69:F1:1A:CC:E9:68:5A:E0:71:26:CD:9D:D3:A5:0A:BD:0C:06:97 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F432858498339C4D975923D65F5190E80 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 19165 IP address blocks: 2604:5500:3000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:c4:d9:75:92:3d:65:f5:19:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=6afc33d2-f420-4ce5-96a0-ca071632cd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e3:24:2a:05:ed:4c:87:97:7f:38:58:6e:a7: 36:ea:aa:7b:eb:1b:1d:04:39:bf:dc:76:b3:d8:30: 6d:55:54:4d:1d:26:8f:b9:c1:5c:90:23:a6:1f:6a: 6f:fd:7b:fc:9f:e8:62:58:66:c3:8c:00:3a:67:4d: f5:9e:dc:96:4c:cd:f3:1f:b9:a9:7c:81:cd:e7:ac: 5b:91:8a:0b:d9:9b:c0:f7:56:91:b3:17:3f:57:6b: 82:0e:64:b8:cc:2c:5b:01:f2:63:f6:3e:f8:56:73: 9e:1a:34:df:bf:e3:dc:ab:2a:b7:a3:d5:43:c7:be: ea:94:36:6e:b3:34:56:d5:95:b3:a7:d8:84:ff:17: 53:39:5b:88:cf:05:61:65:95:a9:01:ff:e2:f5:81: d4:d9:db:17:14:cf:e3:a0:3c:8a:77:c9:08:57:06: 3f:c6:53:19:dd:9b:f3:95:20:36:5e:de:3a:1a:64: 95:7f:94:9a:4d:fe:88:6b:7c:9f:ec:4e:6c:0c:b9: 9a:c5:04:39:a6:6e:22:59:69:fb:6d:d2:b3:ea:c1: 41:bd:89:ee:f6:79:7a:91:24:b0:69:8c:25:d6:f1: 59:64:e5:e3:8e:32:bc:ad:b4:5e:0c:86:0c:c5:1a: 93:74:3e:04:5f:0a:fc:17:50:d1:85:9c:41:71:d8: 87:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:69:F1:1A:CC:E9:68:5A:E0:71:26:CD:9D:D3:A5:0A:BD:0C:06:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv6: 2604:5500:3000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:05:63:7c:7d:5c:c6:fa:6e:4e:76:40:a6:a1:0b:85:39:8c: be:1c:6d:65:eb:d0:cb:91:af:37:f5:e5:61:f5:f6:c3:54:17: 06:fa:d5:86:06:c6:70:7f:5d:83:3f:8b:33:38:2c:94:b8:39: 95:a4:a9:56:b7:c7:cb:8a:f8:c6:45:6b:26:e5:67:95:23:e2: 72:24:86:64:a4:52:41:68:bd:f3:e2:d0:09:64:0d:3d:47:0b: d2:5b:78:49:6c:50:72:4a:21:4e:55:54:f1:56:d2:35:c0:b0: ad:57:5c:76:fe:ff:cc:b2:1c:27:30:4d:c8:98:67:77:7f:b6: e7:bf:d4:f2:be:1e:5c:bb:8a:16:54:b7:f7:9f:b1:a6:ec:ce: 56:7b:bc:8f:28:03:91:73:5b:71:ee:a9:2c:67:cc:4a:cb:98: 50:0f:89:00:c6:fd:9e:4d:fc:11:99:f1:dd:91:b8:af:13:27: ce:05:5d:9a:f8:3e:2b:0d:a9:62:46:d0:c5:44:90:23:0a:de: 06:3e:8e:77:c8:3a:f3:17:7d:2c:f3:ff:22:29:ef:a0:51:42: 4c:71:8d:2c:cb:ab:2d:e2:8d:11:09:b5:a9:e4:7e:14:5f:70: 2c:14:7d:a3:7b:81:be:33:10:2d:04:17:a8:36:9f:fb:b2:6a: 7c:e8:37:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmDOcTZdZI9ZfUZDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NmFmYzMzZDItZjQyMC00Y2U1LTk2YTAtY2EwNzE2MzJjZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuMkKgXtTIeXfzhYbqc26qp76xsdBDm/3Haz 2DBtVVRNHSaPucFckCOmH2pv/Xv8n+hiWGbDjAA6Z031ntyWTM3zH7mpfIHN56xb kYoL2ZvA91aRsxc/V2uCDmS4zCxbAfJj9j74VnOeGjTfv+Pcqyq3o9VDx77qlDZu szRW1ZWzp9iE/xdTOVuIzwVhZZWpAf/i9YHU2dsXFM/joDyKd8kIVwY/xlMZ3Zvz lSA2Xt46GmSVf5SaTf6Ia3yf7E5sDLmaxQQ5pm4iWWn7bdKz6sFBvYnu9nl6kSSw aYwl1vFZZOXjjjK8rbReDIYMxRqTdD4EXwr8F1DRhZxBcdiH9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM5p8RrM6Wha4HEmzZ3TpQq9DAaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvYTI3ZDg3YTAtYzVjMS0z MmRhLThlN2MtOGU4MTZkNjQwNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgRVADAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATgVjfH1cxvpuTnZApqELhTmMvhxtZevQy5GvN/XlYfX2w1QXBvrV hgbGcH9dgz+LMzgslLg5laSpVrfHy4r4xkVrJuVnlSPiciSGZKRSQWi98+LQCWQN PUcL0lt4SWxQckohTlVU8VbSNcCwrVdcdv7/zLIcJzBNyJhnd3+257/U8r4eXLuK FlS395+xpuzOVnu8jygDkXNbce6pLGfMSsuYUA+JAMb9nk38EZnx3ZG4rxMnzgVd mvg+Kw2pYkbQxUSQIwreBj6Od8g68xd9LPP/IinvoFFCTHGNLMurLeKNEQm1qeR+ FF9wLBR9o3uBvjMQLQQXqDaf+7JqfOg3FA== -----END CERTIFICATE-----Generated at Mon Apr 28 23:26:18 2025 by rpki-client