$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa File: b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (raw, json) Hash identifier: Ir1auIENu8xseofDHLC+bWVCwOxK36UQMnn6hTRBxeg= Subject key identifier: 1E:E7:86:53:E2:4A:DF:0A:4B:E8:1C:C2:5E:31:E2:5F:F9:6A:1F:EE Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F432858494B641C961E17C20E9B991780 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 397501 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1c:96:1e:17:c2:0e:9b:99:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=863d4238-e55b-4169-8c69-e8068000fec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8b:78:78:ae:21:13:0b:de:db:c9:79:ee:20: 60:84:37:00:cd:eb:e7:85:45:35:18:85:5d:ae:3d: 4a:63:0a:20:e9:f1:46:6a:04:96:26:4f:ad:cf:3a: d3:4a:0f:e8:60:f1:d5:6a:3a:b3:f5:d4:7c:a0:30: dd:d6:76:34:e7:a8:07:55:2f:2f:40:e1:e0:31:53: 1e:04:be:c0:ef:1b:a6:c1:dc:60:31:96:80:33:c4: 77:5c:18:2a:c0:bb:db:be:a6:2b:0b:8a:dd:0a:10: ba:06:b2:3c:2b:80:18:5c:5d:ef:ba:11:81:58:7e: 58:92:00:f0:ec:20:5b:35:d9:4b:61:b4:81:38:dc: f1:44:03:d0:f9:8f:8f:95:d8:14:53:96:ab:61:b4: 28:3a:4d:04:8e:12:12:34:76:41:3c:d2:f7:b7:d5: 65:f8:5f:a7:79:8f:e2:29:30:08:69:96:37:27:41: da:98:b7:07:73:49:97:23:41:97:4b:52:ee:9c:f3: 6e:79:58:3d:c9:b7:b6:64:a0:1d:2b:ee:63:2d:f6: 87:d0:a9:5b:47:fd:b5:14:57:f7:d0:9a:4b:9a:7a: c2:e1:d9:8b:1c:8d:77:40:dc:72:73:c3:8d:fd:8f: ed:e1:e9:a4:7f:c1:14:b5:0f:a8:bf:44:49:57:b7: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E7:86:53:E2:4A:DF:0A:4B:E8:1C:C2:5E:31:E2:5F:F9:6A:1F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:66:a2:d4:0d:05:ec:e0:f0:ab:e6:a3:c9:b7:fb:70:a9:87: b5:f4:56:fb:fa:72:82:9f:17:e2:b5:a1:97:ba:a0:dc:02:4e: e8:42:e4:f2:15:08:09:72:84:c6:2f:25:cf:7b:b0:37:51:22: be:3f:1b:2b:03:10:51:eb:0e:02:e8:f2:a4:c7:02:63:7a:f1: 69:34:89:9f:e3:7b:b2:19:dd:15:d1:93:7c:38:3c:8e:ae:88: 5d:fc:49:fa:da:a4:77:28:c5:99:92:2c:23:3c:a4:12:f2:fb: d3:8a:14:55:8d:8d:94:c1:1a:d3:47:f7:02:4e:a6:90:6b:29: 75:31:67:0c:9e:c5:8d:98:f8:b9:6b:93:65:29:13:31:6a:70: a1:22:4e:de:8f:44:fe:6a:60:0d:a3:23:74:f6:55:b6:88:3e: 01:71:b7:e3:84:5c:38:0e:2b:75:1a:f1:e9:ac:11:8b:9f:fb: 25:53:11:c2:84:84:82:69:c3:a1:93:89:4e:68:f8:76:10:98: cb:76:da:55:5a:3a:f1:1f:e6:fa:f0:f5:c0:cd:43:76:75:ed: df:ba:3e:d4:3a:46:78:5b:41:08:52:56:34:23:39:d3:f7:65: 5d:5c:b9:df:60:29:50:6b:77:ae:46:7c:54:8d:68:f0:7c:09: 0f:78:2c:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZByWHhfCDpuZF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODYzZDQyMzgtZTU1Yi00MTY5LThjNjktZTgwNjgwMDBmZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yt4eK4hEwve28l57iBghDcAzevnhUU1GIVd rj1KYwog6fFGagSWJk+tzzrTSg/oYPHVajqz9dR8oDDd1nY056gHVS8vQOHgMVMe BL7A7xumwdxgMZaAM8R3XBgqwLvbvqYrC4rdChC6BrI8K4AYXF3vuhGBWH5YkgDw 7CBbNdlLYbSBONzxRAPQ+Y+PldgUU5arYbQoOk0EjhISNHZBPNL3t9Vl+F+neY/i KTAIaZY3J0HamLcHc0mXI0GXS1LunPNueVg9ybe2ZKAdK+5jLfaH0KlbR/21FFf3 0JpLmnrC4dmLHI13QNxyc8ON/Y/t4emkf8EUtQ+ov0RJV7cfVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB7nhlPiSt8KS+gcwl4x4l/5ah/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYjI3YjVmYzUtZjAwYS0z NGFhLWJiNGEtN2EyNDhhYTZlMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxZqLUDQXs4PCr5qPJt/twqYe19Fb7+nKCnxfitaGXuqDcAk7oQuTy FQgJcoTGLyXPe7A3USK+PxsrAxBR6w4C6PKkxwJjevFpNImf43uyGd0V0ZN8ODyO rohd/En62qR3KMWZkiwjPKQS8vvTihRVjY2UwRrTR/cCTqaQayl1MWcMnsWNmPi5 a5NlKRMxanChIk7ej0T+amANoyN09lW2iD4BcbfjhFw4Dit1GvHprBGLn/slUxHC hISCacOhk4lOaPh2EJjLdtpVWjrxH+b68PXAzUN2de3fuj7UOkZ4W0EIUlY0IznT 92VdXLnfYClQa3euRnxUjWjwfAkPeCxn -----END CERTIFICATE-----Generated at Sat Apr 12 15:04:52 2025 by rpki-client