$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5428d42d-558a-338c-82fc-177b5601c82e.roa File: 5428d42d-558a-338c-82fc-177b5601c82e.roa (raw, json) Hash identifier: xXqiDQzWbRzkXCA4Q3lQP2ogRloX1i2dCDjMUXHLXME= Subject key identifier: 31:23:3A:77:38:2C:2A:EA:40:68:F8:45:34:55:4D:02:08:D8:42:CB Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584A1E2AA327442A7754CC65E7F0 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5428d42d-558a-338c-82fc-177b5601c82e.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 15092 IP address blocks: 2620:125:b000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a3:27:44:2a:77:54:cc:65:e7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=4c03f177-0f9c-4a08-adc2-9d2ffe953084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c5:14:b5:1c:58:81:a8:fb:b2:d2:6e:7d:63: d3:3f:67:5c:7b:c9:8f:88:3b:6c:98:59:48:ed:cd: 9c:ae:3f:45:88:8c:e8:14:39:3f:91:03:1f:1b:ee: 49:da:24:f5:59:5d:01:dc:a3:06:12:ee:b8:aa:a7: db:07:2d:bd:54:4c:dc:72:b1:2f:0a:61:37:d9:f4: 0c:96:ad:d2:61:51:bb:76:72:bb:5f:6e:dd:3b:f7: 45:23:29:b1:10:b7:28:7a:a7:db:2e:6d:a9:59:61: e1:f7:4b:a4:f8:e2:7b:31:a4:34:48:47:76:89:1e: 66:41:a0:69:b9:88:8a:aa:7f:6e:82:13:71:15:fe: 85:b3:25:03:dd:80:f9:04:a4:5a:b2:b2:9f:7e:8a: 2b:74:6d:5a:00:7a:3f:94:63:56:39:f8:b1:5d:2a: 74:e2:b8:32:c4:47:5d:e1:52:20:7b:03:3f:d2:9f: 16:36:99:6f:66:ad:5d:cd:fa:fc:7f:5a:fd:5b:60: 93:71:85:7a:88:0b:49:f4:61:93:c5:e0:9f:d7:e1: c1:cf:2a:62:c1:e2:c1:20:6b:b9:ad:6c:26:bf:0d: 83:87:00:30:5e:9c:ce:92:08:e4:92:fa:85:7d:f2: 6e:0a:a4:cb:9b:bb:45:e8:36:b7:80:21:37:86:c9: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:23:3A:77:38:2C:2A:EA:40:68:F8:45:34:55:4D:02:08:D8:42:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/5428d42d-558a-338c-82fc-177b5601c82e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv6: 2620:125:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:95:32:9b:34:5a:22:16:8d:0c:39:4b:3d:c7:98:88:1d:ec: 10:2a:43:58:07:c0:91:f9:7f:35:0b:3d:5c:4a:a3:fc:91:a1: 28:ed:df:49:fb:16:2d:a6:ea:6b:b2:55:36:f2:a5:60:9e:62: 39:aa:8d:52:93:17:43:ee:50:23:2c:62:18:c4:38:83:1b:26: 16:d3:6e:3a:19:44:61:88:48:ff:d1:0a:6e:cb:9b:98:60:90: 2e:0b:63:33:eb:53:8f:8d:07:f2:8b:b4:a0:43:e3:00:4d:28: 6d:65:5f:04:a6:b5:4c:46:8f:9a:d6:57:bf:dc:5a:00:e8:7a: c5:57:05:4e:64:06:d6:6c:72:e6:2a:a4:59:a2:a7:1c:08:e1: e0:0b:ae:b1:06:f1:ab:f6:9c:33:5e:15:e8:17:78:e0:01:4d: 4c:6e:2a:15:ce:cf:be:46:92:c1:5d:58:37:3b:9c:4a:8f:38: 3f:e9:ee:80:af:2a:e4:f1:c4:ec:4e:87:f7:56:bd:21:dd:f7: d5:e9:e3:8d:99:ab:f0:ba:1b:aa:cf:89:25:58:4e:6c:f8:33: 03:e6:56:e6:68:02:56:11:9c:a8:8d:32:2c:c7:5a:88:af:f4: ec:91:f3:07:22:18:cc:82:d5:2a:df:36:e4:6c:4f:11:85:32: 43:81:9f:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoeKqMnRCp3VMxl5/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk NGMwM2YxNzctMGY5Yy00YTA4LWFkYzItOWQyZmZlOTUzMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisUUtRxYgaj7stJufWPTP2dce8mPiDtsmFlI 7c2crj9FiIzoFDk/kQMfG+5J2iT1WV0B3KMGEu64qqfbBy29VEzccrEvCmE32fQM lq3SYVG7dnK7X27dO/dFIymxELcoeqfbLm2pWWHh90uk+OJ7MaQ0SEd2iR5mQaBp uYiKqn9ughNxFf6FsyUD3YD5BKRasrKffoordG1aAHo/lGNWOfixXSp04rgyxEdd 4VIgewM/0p8WNplvZq1dzfr8f1r9W2CTcYV6iAtJ9GGTxeCf1+HBzypiweLBIGu5 rWwmvw2DhwAwXpzOkgjkkvqFffJuCqTLm7tF6Da3gCE3hslfdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDEjOnc4LCrqQGj4RTRVTQII2ELLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvNTQyOGQ0MmQtNTU4YS0z MzhjLTgyZmMtMTc3YjU2MDFjODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABJbAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOVMps0WiIWjQw5Sz3HmIgd7BAqQ1gHwJH5fzULPVxKo/yRoSjt 30n7Fi2m6muyVTbypWCeYjmqjVKTF0PuUCMsYhjEOIMbJhbTbjoZRGGISP/RCm7L m5hgkC4LYzPrU4+NB/KLtKBD4wBNKG1lXwSmtUxGj5rWV7/cWgDoesVXBU5kBtZs cuYqpFmipxwI4eALrrEG8av2nDNeFegXeOABTUxuKhXOz75GksFdWDc7nEqPOD/p 7oCvKuTxxOxOh/dWvSHd99Xp442Zq/C6G6rPiSVYTmz4MwPmVuZoAlYRnKiNMizH Woiv9OyR8wciGMyC1SrfNuRsTxGFMkOBnwI= -----END CERTIFICATE-----Generated at Sun Jun 8 18:32:33 2025 by rpki-client