$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27e64cbb-4744-3365-93c5-63e78f6e72a0.roa File: 27e64cbb-4744-3365-93c5-63e78f6e72a0.roa (raw, json) Hash identifier: 5XvraI8oR8Nm0+AYk+WgoLp6A55SnXIfXxkQP1Dfk3g= Subject key identifier: 85:E5:7A:42:8E:40:77:2D:01:CE:E5:8C:ED:F9:60:04:A9:3C:41:EA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB07E714217EEE545E4D400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27e64cbb-4744-3365-93c5-63e78f6e72a0.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 2603:2085:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:7e:71:42:17:ee:e5:45:e4:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=05e6ef52-c813-4d06-a75b-67b08fb2d19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:2c:5a:ed:cd:cb:af:b2:3d:87:07:f2:03: b6:be:cc:d2:1c:90:78:fe:ec:70:12:b4:3d:b3:aa: 43:49:b7:72:fb:b1:98:56:89:fb:d3:29:9d:ad:73: 38:c2:21:30:8e:ab:50:6b:f9:08:96:9a:fa:5b:43: b4:72:7d:81:39:98:e2:71:72:fa:c1:8f:85:f9:62: 7d:02:51:9d:f9:91:5a:37:dc:0a:61:25:d0:ff:74: 22:28:32:74:97:d5:5f:ba:bc:5c:55:58:59:8c:28: dc:66:81:16:61:bf:a2:f3:06:a5:89:80:ec:a9:6b: c4:a0:6f:fb:28:2b:a2:e6:fa:e6:5f:bc:ef:0e:2c: 57:7f:38:02:21:32:36:62:61:f6:5d:ce:08:26:ab: 96:44:fd:cf:1e:b7:d2:d9:15:29:73:94:f5:b5:d0: 2d:78:5d:2d:d5:84:b5:22:c2:33:d4:3b:ad:d2:3a: 04:51:59:7c:1f:68:c8:a2:5b:28:2a:47:f2:a1:b3: a8:79:43:78:1a:ea:55:71:f2:7a:c4:cc:01:67:96: 09:42:57:89:0a:af:b8:79:38:c6:3f:9a:b6:f2:89: a4:4a:9c:ab:1a:88:5c:8b:d8:39:59:3d:cd:0b:60: dc:1c:ec:07:6f:20:18:73:db:68:a0:ed:38:ed:7d: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E5:7A:42:8E:40:77:2D:01:CE:E5:8C:ED:F9:60:04:A9:3C:41:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27e64cbb-4744-3365-93c5-63e78f6e72a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2085:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:45:1c:c8:e7:c2:53:1b:62:4f:06:7b:c3:1b:d7:cd:87:5e: 2b:fa:40:0a:49:6e:44:77:6e:c2:42:b4:2e:c0:67:c6:6b:24: 2a:36:be:da:6c:82:9a:89:50:c2:73:57:b5:dd:a6:22:6e:b4: 26:53:e0:93:45:10:2f:9e:d1:21:00:cb:8c:a9:50:e8:26:a4: f6:5c:54:dd:41:e2:19:8f:ca:77:3e:78:14:94:19:ec:dc:b5: 6b:c0:ae:da:e0:17:79:fa:dd:b2:a1:4e:da:0c:cb:c5:c6:db: b5:4f:32:5e:39:34:8b:ce:c4:89:c0:41:ce:40:06:49:9d:b7: 9e:41:db:d0:fc:e8:45:58:1c:e2:7a:da:9f:b7:a5:cd:48:2d: 3d:87:af:cc:8f:74:4e:ba:3a:b2:0e:03:7e:56:20:ac:0f:02: b6:48:47:39:38:74:a4:70:eb:e3:8e:29:9d:05:9f:ec:66:bf: 43:4a:24:67:b4:1a:9e:e3:5f:3d:76:d5:2e:87:62:80:0d:5f: 1f:f5:d5:ab:bb:46:a1:58:71:01:57:85:7e:af:b3:af:74:95: ed:1b:f3:7f:9a:51:7f:7a:93:56:8f:d8:30:5f:49:e3:1d:03: 5d:11:85:65:fb:9a:20:de:78:e3:13:6c:fd:81:51:32:8f:48: 73:e4:d3:86 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkssH5xQhfu5UXk1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDVlNmVmNTItYzgxMy00ZDA2LWE3NWItNjdiMDhmYjJkMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH4sWu3Ny6+yPYcH8gO2vszSHJB4/uxwErQ9 s6pDSbdy+7GYVon70ymdrXM4wiEwjqtQa/kIlpr6W0O0cn2BOZjicXL6wY+F+WJ9 AlGd+ZFaN9wKYSXQ/3QiKDJ0l9VfurxcVVhZjCjcZoEWYb+i8waliYDsqWvEoG/7 KCui5vrmX7zvDixXfzgCITI2YmH2Xc4IJquWRP3PHrfS2RUpc5T1tdAteF0t1YS1 IsIz1Dut0joEUVl8H2jIolsoKkfyobOoeUN4GupVcfJ6xMwBZ5YJQleJCq+4eTjG P5q28omkSpyrGohci9g5WT3NC2DcHOwHbyAYc9tooO047X0MyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIXlekKOQHctAc7ljO35YASpPEHqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjdlNjRjYmItNDc0NC0z MzY1LTkzYzUtNjNlNzhmNmU3MmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMghYAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgkUcyOfCUxtiTwZ7wxvXzYdeK/pACkluRHduwkK0LsBnxmskKja+ 2myCmolQwnNXtd2mIm60JlPgk0UQL57RIQDLjKlQ6Cak9lxU3UHiGY/Kdz54FJQZ 7Ny1a8Cu2uAXefrdsqFO2gzLxcbbtU8yXjk0i87EicBBzkAGSZ23nkHb0PzoRVgc 4nran7elzUgtPYevzI90Tro6sg4DflYgrA8CtkhHOTh0pHDr444pnQWf7Ga/Q0ok Z7QanuNfPXbVLodigA1fH/XVq7tGoVhxAVeFfq+zr3SV7Rvzf5pRf3qTVo/YMF9J 4x0DXRGFZfuaIN544xNs/YFRMo9Ic+TThg== -----END CERTIFICATE-----Generated at Sun Apr 6 20:47:01 2025 by rpki-client