$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa File: 3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa (raw, json) Hash identifier: iVhc/H4mei/0owAkeIWFbN7obWIWg/atYUnMxbj5oys= Subject key identifier: 05:9E:01:3E:3A:AF:3B:8B:B6:5B:D3:69:20:DD:EE:E6:63:3F:6A:2B Certificate issuer: /CN=627df6c2-d60a-4467-85f2-dd6d009eafe8 Certificate serial: 010D0C9F43285849C0A4DEA05DD03B36C93B5340 Authority key identifier: 3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 27218 IP address blocks: 192.30.120.0/23 maxlen: 23 2620:71:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:de:a0:5d:d0:3b:36:c9:3b:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627df6c2-d60a-4467-85f2-dd6d009eafe8 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=c3385583-f611-4d3c-807a-c78ea2d7d1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:54:97:6a:35:1e:98:2c:70:70:cc:0b:a7: 23:8e:30:75:49:b4:f2:73:4e:e4:0d:1b:e1:57:7c: 2b:4c:c4:f7:28:9d:a3:62:ff:ab:20:9b:28:fb:94: 48:7a:3e:e9:85:a0:2e:e7:82:fa:af:17:74:f2:c9: a3:13:33:d2:8a:9d:f7:66:95:48:b5:15:4a:b1:e8: 4f:58:a5:2d:f0:ca:a6:26:eb:48:b6:8b:c1:84:3e: 16:3d:3c:5d:09:45:17:d3:9e:3e:b0:6f:0d:f0:27: c2:ce:74:86:d0:bd:7b:08:52:2e:67:b2:d1:28:c8: 2d:8a:f3:1e:52:6c:50:bf:df:d1:e5:b0:36:b6:82: 9c:c1:14:65:f2:9d:b9:f3:1b:d5:41:10:11:46:47: 6b:9a:1c:dd:43:e2:4b:7f:3c:10:c3:6e:8f:ac:26: 54:7c:0b:fc:5e:23:ad:3a:ee:a0:91:51:42:5f:01: 84:de:6b:04:7f:ec:b2:8b:c5:87:2e:df:58:ad:a5: 3f:f3:14:a4:fa:12:4e:80:42:b6:1b:51:71:92:0d: a5:0a:56:0c:ad:8f:d4:c2:3e:ee:fe:51:79:3c:1e: ce:0b:2e:0a:fb:54:20:6e:97:40:21:0c:3f:21:31: 58:02:5b:c9:37:2e:d7:45:d6:aa:6a:ae:42:71:e3: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9E:01:3E:3A:AF:3B:8B:B6:5B:D3:69:20:DD:EE:E6:63:3F:6A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl X509v3 Authority Key Identifier: keyid:3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer sbgp-ipAddrBlock: critical IPv4: 192.30.120.0/23 IPv6: 2620:71:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:69:6c:97:eb:fa:f4:75:fe:fe:01:01:d3:50:2e:8e:05:b4: fa:ee:3a:b2:49:a1:09:f6:d0:41:dc:3e:0d:49:82:cf:18:aa: 10:51:ee:c5:1a:5e:68:33:47:83:c7:a5:91:f8:28:38:cf:65: 6f:77:b7:1e:d2:a7:a4:10:5d:c8:9c:5d:f4:6d:05:6c:f2:6e: 3a:b8:9e:07:8b:b7:ae:e3:cc:c8:bc:31:86:2a:8f:37:61:f3: b8:80:36:52:d1:f0:cf:9f:d5:4d:fe:ec:d0:40:46:95:16:93: 7d:f5:81:55:52:ea:91:25:00:aa:a3:51:d2:09:4e:de:e6:72: 7f:79:e8:f6:4b:31:d7:89:71:39:b1:db:3b:4b:4c:01:f3:ae: 24:8e:4d:e3:3b:47:25:36:65:8a:f9:37:87:ea:47:77:18:a1: 34:0f:3c:dc:9b:31:6d:e2:d5:7f:a3:12:c2:3b:ee:85:24:90: 30:d9:0c:c0:6d:0b:c6:4a:ff:5f:90:0c:a4:ba:fb:a1:88:80: ef:af:3d:25:08:ec:6f:da:84:dc:9e:53:7e:1e:27:23:75:37: 3b:ef:95:87:0c:0d:69:14:92:0c:98:a3:b0:bd:72:fe:98:68: 23:b9:f9:7b:72:48:bc:9f:6a:c0:12:01:7b:36:8c:98:37:32: 7c:1e:5e:fd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnApN6gXdA7Nsk7U0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI3ZGY2YzItZDYwYS00NDY3LTg1ZjItZGQ2ZDAwOWVh ZmU4MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YzMzODU1ODMtZjYxMS00ZDNjLTgwN2EtYzc4ZWEyZDdkMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyRUl2o1HpgscHDMC6cjjjB1SbTyc07kDRvh V3wrTMT3KJ2jYv+rIJso+5RIej7phaAu54L6rxd08smjEzPSip33ZpVItRVKsehP WKUt8MqmJutItovBhD4WPTxdCUUX054+sG8N8CfCznSG0L17CFIuZ7LRKMgtivMe UmxQv9/R5bA2toKcwRRl8p258xvVQRARRkdrmhzdQ+JLfzwQw26PrCZUfAv8XiOt Ou6gkVFCXwGE3msEf+yyi8WHLt9YraU/8xSk+hJOgEK2G1Fxkg2lClYMrY/Uwj7u /lF5PB7OCy4K+1QgbpdAIQw/ITFYAlvJNy7XRdaqaq5CceMTTQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAWeAT46rzuLtlvTaSDd7uZjP2orMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mjdk ZjZjMi1kNjBhLTQ0NjctODVmMi1kZDZkMDA5ZWFmZTgvM2RlZTA1ZWItZDYwYS0z NGZhLWE2YWEtOTI2MTBjNGZiY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjI3ZGY2YzItZDYwYS00NDY3LTg1 ZjItZGQ2ZDAwOWVhZmU4LzYyN2RmNmMyLWQ2MGEtNDQ2Ny04NWYyLWRkNmQwMDll YWZlOC5jcmwwHwYDVR0jBBgwFoAUO64ZO8R59vJZrRu4VuZf4R7fZI8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MjdkZjZjMi1kNjBhLTQ0NjctODVmMi1kZDZk MDA5ZWFmZTguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwB54MA8E AgACMAkDBwAmIABxQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADWlsl+v69HX+/gEB01AujgW0+u46skmh CfbQQdw+DUmCzxiqEFHuxRpeaDNHg8elkfgoOM9lb3e3HtKnpBBdyJxd9G0FbPJu OrieB4u3ruPMyLwxhiqPN2HzuIA2UtHwz5/VTf7s0EBGlRaTffWBVVLqkSUAqqNR 0glO3uZyf3no9ksx14lxObHbO0tMAfOuJI5N4ztHJTZlivk3h+pHdxihNA883Jsx beLVf6MSwjvuhSSQMNkMwG0Lxkr/X5AMpLr7oYiA7689JQjsb9qE3J5Tfh4nI3U3 O++VhwwNaRSSDJijsL1y/phoI7n5e3JIvJ9qwBIBezaMmDcyfB5e/Q== -----END CERTIFICATE-----Generated at Sat May 10 14:29:40 2025 by rpki-client