$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fc328d0-5853-3bf3-ade7-cb1b0a92372b.roa File: 2fc328d0-5853-3bf3-ade7-cb1b0a92372b.roa (raw, json) Hash identifier: CpDJYQXIvUMaiNX+/6x5vrXTWbf2H/pfTia7vKeF5aY= Subject key identifier: A0:E8:A7:D5:4C:48:52:4A:65:A7:62:AA:8E:88:2D:AC:82:51:AE:59 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A00DAF58D85DDC3283CF71E58 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fc328d0-5853-3bf3-ade7-cb1b0a92372b.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 22394 IP address blocks: 2001:4888:a60e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f5:8d:85:dd:c3:28:3c:f7:1e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=f5b3345a-6032-4a21-8924-3fd4af0ec1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:77:b2:a3:00:e8:72:a5:bd:34:47:1d:d8:7a: b8:a3:db:2b:08:ac:52:02:09:37:2c:5d:13:10:a1: 02:63:fd:74:1d:24:00:a0:b8:a5:cf:de:a8:ea:ca: a9:b2:24:28:ea:8d:28:d6:df:20:89:5a:9a:54:5a: 51:48:80:0e:89:93:a5:79:9d:26:e1:8a:99:da:14: f6:82:ab:fd:63:aa:8e:b2:e6:a1:f9:f9:90:59:5e: 0d:60:fd:97:5f:83:2a:dc:56:fd:c1:4d:c8:ae:fd: f2:e1:01:f5:20:87:87:79:35:1c:bd:9b:3c:14:19: e7:2b:fa:1e:95:74:8b:b1:c3:19:4c:b4:fb:34:2b: 91:aa:5c:eb:28:65:d3:5a:cb:d9:ee:db:38:df:5c: 3f:f8:00:2c:d5:6d:a1:5b:6f:35:5c:89:0c:83:1b: 0b:f7:9d:69:b9:f8:b9:31:94:61:33:07:4f:e5:e2: ec:56:f0:ba:92:5a:49:fc:ec:08:8d:85:45:f3:1b: 5f:05:0c:29:67:48:0d:4f:18:57:14:92:43:e1:b6: 9a:d8:81:04:c4:34:5c:49:c0:b3:71:23:88:e7:0a: 2d:49:8d:df:bb:b6:9c:58:b8:66:e4:10:35:16:00: f4:c0:09:41:c1:51:61:de:25:56:39:ca:08:9a:1d: e2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E8:A7:D5:4C:48:52:4A:65:A7:62:AA:8E:88:2D:AC:82:51:AE:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fc328d0-5853-3bf3-ade7-cb1b0a92372b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:a60e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a8:d3:b5:ea:33:1a:e9:25:15:d1:4d:cc:0b:f1:c4:9a:cb: 16:d4:c4:75:ea:a7:1f:28:c9:af:d4:9d:ff:ba:41:b0:6e:9f: f6:72:2c:82:e6:5e:ff:00:60:72:51:ee:6d:bb:7c:a7:48:5b: a2:0f:b5:55:01:e3:2e:b6:15:d3:52:1c:98:d0:f0:7c:bd:cd: 63:72:fe:d8:85:37:d2:ac:d2:e4:e1:bb:e8:53:0c:d0:b0:2b: 12:58:38:36:b3:f5:0e:22:c8:d8:47:6a:aa:ac:26:46:94:37: fc:bf:6a:f1:24:a0:e1:28:37:f8:a9:77:ed:08:57:05:20:33: 11:61:88:83:6e:7e:0b:71:0b:ec:0e:85:d8:74:d6:39:dc:db: 91:f8:f1:e1:e9:4e:6b:dd:4b:61:6c:39:c7:af:01:cc:f1:b1: e7:d7:7d:d9:da:10:88:db:2f:07:64:97:eb:9f:b5:5f:1c:bc: 1f:f8:84:72:1b:7c:9c:cf:9b:69:ce:b7:45:07:d7:17:db:d5: 09:2a:24:94:e9:d3:79:94:4b:bf:83:ba:8e:18:a1:51:cc:ee: f0:54:28:e5:c1:4e:a3:0b:44:14:b2:08:f3:8c:e0:78:a0:cd: a3:be:24:2b:ef:fc:9b:28:a0:0b:80:77:41:86:06:32:28:a7: d4:ac:9d:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoA2vWNhd3DKDz3HlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZjViMzM0NWEtNjAzMi00YTIxLTg5MjQtM2ZkNGFmMGVjMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhneyowDocqW9NEcd2Hq4o9srCKxSAgk3LF0T EKECY/10HSQAoLilz96o6sqpsiQo6o0o1t8giVqaVFpRSIAOiZOleZ0m4YqZ2hT2 gqv9Y6qOsuah+fmQWV4NYP2XX4Mq3Fb9wU3Irv3y4QH1IIeHeTUcvZs8FBnnK/oe lXSLscMZTLT7NCuRqlzrKGXTWsvZ7ts431w/+AAs1W2hW281XIkMgxsL951pufi5 MZRhMwdP5eLsVvC6klpJ/OwIjYVF8xtfBQwpZ0gNTxhXFJJD4baa2IEExDRcScCz cSOI5wotSY3fu7acWLhm5BA1FgD0wAlBwVFh3iVWOcoImh3ixQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKDop9VMSFJKZadiqo6ILayCUa5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmZjMzI4ZDAtNTg1My0z YmYzLWFkZTctY2IxYjBhOTIzNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiKYO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGo07XqMxrpJRXRTcwL8cSayxbUxHXqpx8oya/Unf+6QbBun/Zy LILmXv8AYHJR7m27fKdIW6IPtVUB4y62FdNSHJjQ8Hy9zWNy/tiFN9Ks0uThu+hT DNCwKxJYODaz9Q4iyNhHaqqsJkaUN/y/avEkoOEoN/ipd+0IVwUgMxFhiINufgtx C+wOhdh01jnc25H48eHpTmvdS2FsOcevAczxsefXfdnaEIjbLwdkl+uftV8cvB/4 hHIbfJzPm2nOt0UH1xfb1QkqJJTp03mUS7+Duo4YoVHM7vBUKOXBTqMLRBSyCPOM 4HigzaO+JCvv/JsooAuAd0GGBjIop9Ssnds= -----END CERTIFICATE-----Generated at Tue Jun 17 08:47:34 2025 by rpki-client