$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa File: 4443ea3e-5515-393f-9b6c-71ed5816326b.roa (raw, json) Hash identifier: 4pNcgYP0qm1RYRzROim9gUA4gvft+8NYaNKGyo9urh4= Subject key identifier: F2:EC:6A:24:54:8D:43:74:88:27:EC:CB:42:8B:A4:BE:04:A2:CB:4D Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Certificate serial: 010D0C9F43285849B149E84C86748D1C993FED80 Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 394449 IP address blocks: 2604:3dc0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:e8:4c:86:74:8d:1c:99:3f:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=de88c2a1-ca69-4d8c-958f-488abd840350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4f:2d:d5:0f:44:0a:05:83:a2:de:d9:aa:ef: f5:f9:6f:f1:6c:14:b5:5e:3c:54:38:9d:04:05:2f: 8f:67:01:33:c6:84:08:99:ba:ff:ff:1e:dc:69:50: 89:b0:08:03:8d:3b:db:a1:b4:24:29:fa:bc:43:ca: c3:d0:ae:78:af:45:5f:33:8d:af:7e:bf:22:fe:14: c7:61:0b:a3:e5:f6:6f:0e:d1:e4:92:fb:e2:33:8e: 04:7a:51:64:ef:01:04:90:92:8f:4f:e1:16:71:09: f3:28:1e:08:17:f0:c8:b0:c0:93:27:a4:49:07:02: d3:b4:23:d9:e4:9e:e5:dd:a5:b0:f0:0a:e6:f6:c1: b3:61:de:f9:35:bc:bd:2d:b7:b7:b4:a0:43:98:3c: 84:ca:49:a7:58:b6:3c:bc:5e:7e:a7:2f:44:b1:96: c3:4e:36:0c:78:79:2a:3a:a4:e3:36:79:80:c1:76: 15:7a:a9:66:c9:e2:93:28:ad:47:c7:f4:92:91:44: 8b:cf:bc:3e:1e:3b:e1:8c:24:44:67:a5:94:33:c5: a6:4a:12:c8:77:0e:fd:87:47:ed:95:9d:e5:ae:f9: f4:b5:8e:15:34:c1:67:41:a3:6b:ce:45:f8:49:1c: 6c:fd:83:cd:7b:15:98:51:8f:af:e3:07:5c:49:03: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EC:6A:24:54:8D:43:74:88:27:EC:CB:42:8B:A4:BE:04:A2:CB:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl X509v3 Authority Key Identifier: keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer sbgp-ipAddrBlock: critical IPv6: 2604:3dc0:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:95:fd:9b:2e:68:1a:05:10:50:6f:fc:37:36:81:12:6d:40: 27:0d:4e:21:59:39:47:91:66:9d:1d:3c:44:ce:46:c3:a0:39: cc:1b:c5:a2:8b:46:75:96:c3:36:50:b3:8f:91:b4:bf:7b:b0: 93:65:e9:12:7f:a0:99:6c:68:e6:d5:68:8e:18:bb:6d:cf:40: d8:b0:6e:83:94:96:f1:30:26:2a:21:97:ef:ab:ac:2d:5a:cd: 9d:58:2b:91:0d:c9:1c:a3:2f:bc:44:09:45:46:5b:f4:64:fa: d5:7d:1b:b0:5b:c0:88:11:b9:09:41:b4:b3:82:2b:f1:61:1f: 4f:f0:6b:f9:c7:38:68:86:c9:94:d0:2f:55:a5:79:57:18:36: 97:c1:d2:87:f1:94:47:f1:4c:90:29:d9:8e:40:ac:90:b7:e0: db:fa:d3:2a:83:db:51:7a:56:5a:a1:01:9e:33:48:1a:72:c1: d3:d0:ba:fa:52:e7:7d:0a:c0:83:5e:f5:2b:99:14:94:5c:ba: e4:3a:c9:1b:9b:e6:0b:6b:42:26:5d:c9:72:89:81:09:7a:c0: 31:42:6f:13:9a:6f:a9:20:2d:fe:01:f9:7b:50:11:f2:5a:d8: 4a:55:2d:a5:2d:5a:a0:72:91:1b:a7:d5:ae:11:b5:d2:d9:46: 40:72:c0:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSehMhnSNHJk/7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx OTc5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGU4OGMyYTEtY2E2OS00ZDhjLTk1OGYtNDg4YWJkODQwMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk8t1Q9ECgWDot7Zqu/1+W/xbBS1XjxUOJ0E BS+PZwEzxoQImbr//x7caVCJsAgDjTvbobQkKfq8Q8rD0K54r0VfM42vfr8i/hTH YQuj5fZvDtHkkvviM44EelFk7wEEkJKPT+EWcQnzKB4IF/DIsMCTJ6RJBwLTtCPZ 5J7l3aWw8Arm9sGzYd75Nby9Lbe3tKBDmDyEykmnWLY8vF5+py9EsZbDTjYMeHkq OqTjNnmAwXYVeqlmyeKTKK1Hx/SSkUSLz7w+HjvhjCREZ6WUM8WmShLIdw79h0ft lZ3lrvn0tY4VNMFnQaNrzkX4SRxs/YPNexWYUY+v4wdcSQM1zwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPLsaiRUjUN0iCfsy0KLpL4EostNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3 ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvNDQ0M2VhM2UtNTUxNS0z OTNmLTliNmMtNzFlZDU4MTYzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0 NThmYzE5NzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ9wAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqV/ZsuaBoFEFBv/Dc2gRJtQCcNTiFZOUeRZp0dPETORsOgOcwb xaKLRnWWwzZQs4+RtL97sJNl6RJ/oJlsaObVaI4Yu23PQNiwboOUlvEwJiohl++r rC1azZ1YK5ENyRyjL7xECUVGW/Rk+tV9G7BbwIgRuQlBtLOCK/FhH0/wa/nHOGiG yZTQL1WleVcYNpfB0ofxlEfxTJAp2Y5ArJC34Nv60yqD21F6VlqhAZ4zSBpywdPQ uvpS530KwINe9SuZFJRcuuQ6yRub5gtrQiZdyXKJgQl6wDFCbxOab6kgLf4B+XtQ EfJa2EpVLaUtWqBykRun1a4RtdLZRkBywIs= -----END CERTIFICATE-----Generated at Tue Jun 17 17:59:50 2025 by rpki-client