$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e444ac11-ef96-312e-bc6f-003e024b582e.roa File: e444ac11-ef96-312e-bc6f-003e024b582e.roa (raw, json) Hash identifier: szcyJ2g2EI9eZGxRJJzjPYVZAD3JPtwYPCsXgK1aVYo= Subject key identifier: 3B:1C:34:22:1D:33:D7:CF:B6:5F:5A:64:73:5C:2E:6C:32:39:DC:B2 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F43285849BDDA1F3D93043785D5286E80 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e444ac11-ef96-312e-bc6f-003e024b582e.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 26967 IP address blocks: 2620:125:b002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:1f:3d:93:04:37:85:d5:28:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=2205f3b5-c029-4890-a729-15a838593ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:4c:ed:8d:78:c2:7b:57:70:7a:bd:69:59: 87:a3:4e:e3:30:fb:bf:ea:29:e2:52:74:54:6c:d0: 9f:86:c5:ba:31:91:ef:df:94:b3:7b:7c:7d:18:a3: 53:4c:c6:ec:9f:5c:24:49:f9:73:6f:79:5f:1c:22: 3a:d0:9d:6c:07:fa:a9:6c:57:88:00:9d:b8:5f:1b: b7:8b:f1:6a:17:4e:79:81:d5:38:3f:cc:c0:92:b0: c8:ca:ce:b7:ae:3c:be:61:1f:30:b1:19:39:ec:70: 71:08:16:ed:63:b1:a9:9f:94:f7:f9:55:52:45:91: 31:e2:6f:24:17:07:48:aa:7b:12:29:89:a5:04:15: 6f:25:7e:6e:f8:32:ab:4e:53:94:31:bb:ae:1c:cd: b6:96:41:8f:02:8a:3c:b9:9a:6b:62:ea:4c:70:6c: c6:8a:47:fc:cb:d0:ee:0b:76:82:76:a6:f5:ea:a5: 2b:10:83:84:27:e6:21:8c:30:35:82:42:ae:8d:6b: 26:c0:53:67:cc:d2:78:7c:93:1c:21:a5:93:76:7a: a1:28:66:49:f3:e0:35:39:11:cf:c5:a6:cf:87:08: 9b:01:f3:66:6b:d9:0c:aa:ad:98:7f:1c:e7:c1:04: 80:8e:5e:04:ea:06:0c:22:56:cc:55:94:b4:fc:37: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:34:22:1D:33:D7:CF:B6:5F:5A:64:73:5C:2E:6C:32:39:DC:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e444ac11-ef96-312e-bc6f-003e024b582e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv6: 2620:125:b002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:25:1d:81:5e:5b:f4:39:a9:7a:9b:81:15:56:10:4b:f7:e0: 9a:ff:c3:42:3c:fb:59:c2:dd:a0:a0:e2:c3:7d:11:6c:91:e1: c2:a6:36:84:93:f9:a2:68:55:00:5d:cb:6e:e9:aa:11:21:78: 3b:57:83:e4:2a:d4:dd:e1:80:12:7f:b9:0a:87:0c:82:5e:89: 51:2b:7e:db:45:46:fe:9e:17:40:34:9a:cf:71:0d:00:bb:5c: 93:cd:30:e0:a7:4e:1b:b0:ad:03:8f:85:ac:c5:ae:e5:09:6d: a7:39:87:c7:dd:eb:60:1f:27:2d:79:2a:0d:be:0c:33:13:b4: d6:a3:c0:89:cb:8a:01:30:de:04:95:58:45:0f:d6:1e:66:b2: c9:ba:f1:02:10:5a:90:b3:cc:3b:02:52:2f:2f:84:8f:26:8d: d6:7c:fb:b8:b5:d9:b1:40:75:57:ef:2c:12:1c:9d:fb:25:30: 9b:a6:53:08:bb:16:4c:f3:cd:b6:d4:2c:43:12:98:94:12:35: 87:d4:b6:d5:bb:0d:2f:97:e0:bc:f8:f0:6e:ee:12:1e:a2:57: 0d:00:1d:93:46:01:15:6c:90:c6:a3:b3:63:ab:53:d7:7f:bf: 81:c5:82:be:da:94:8b:52:e2:5e:d4:a2:29:83:4f:db:5c:f4: 75:82:ad:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm92h89kwQ3hdUoboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MjIwNWYzYjUtYzAyOS00ODkwLWE3MjktMTVhODM4NTkzYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBFM7Y14wntXcHq9aVmHo07jMPu/6iniUnRU bNCfhsW6MZHv35Sze3x9GKNTTMbsn1wkSflzb3lfHCI60J1sB/qpbFeIAJ24Xxu3 i/FqF055gdU4P8zAkrDIys63rjy+YR8wsRk57HBxCBbtY7Gpn5T3+VVSRZEx4m8k FwdIqnsSKYmlBBVvJX5u+DKrTlOUMbuuHM22lkGPAoo8uZprYupMcGzGikf8y9Du C3aCdqb16qUrEIOEJ+YhjDA1gkKujWsmwFNnzNJ4fJMcIaWTdnqhKGZJ8+A1ORHP xabPhwibAfNma9kMqq2YfxznwQSAjl4E6gYMIlbMVZS0/DffzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDscNCIdM9fPtl9aZHNcLmwyOdyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvZTQ0NGFjMTEtZWY5Ni0z MTJlLWJjNmYtMDAzZTAyNGI1ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABJbAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYlHYFeW/Q5qXqbgRVWEEv34Jr/w0I8+1nC3aCg4sN9EWyR4cKm NoST+aJoVQBdy27pqhEheDtXg+Qq1N3hgBJ/uQqHDIJeiVErfttFRv6eF0A0ms9x DQC7XJPNMOCnThuwrQOPhazFruUJbac5h8fd62AfJy15Kg2+DDMTtNajwInLigEw 3gSVWEUP1h5mssm68QIQWpCzzDsCUi8vhI8mjdZ8+7i12bFAdVfvLBIcnfslMJum Uwi7FkzzzbbULEMSmJQSNYfUttW7DS+X4Lz48G7uEh6iVw0AHZNGARVskMajs2Or U9d/v4HFgr7alItS4l7UoimDT9tc9HWCrRc= -----END CERTIFICATE-----Generated at Sat May 10 10:30:16 2025 by rpki-client