$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c2775af-33af-3124-b5d4-2a57727ace54.roa File: 4c2775af-33af-3124-b5d4-2a57727ace54.roa (raw, json) Hash identifier: 1S/GUIx9AbaIyvXa85QGysvGMmdvxBv7KTRqtw/IvAs= Subject key identifier: 3D:65:3B:46:56:85:47:5E:6F:A8:3F:85:E2:8D:DF:90:32:18:F2:61 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849218436DE724224C754543C40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c2775af-33af-3124-b5d4-2a57727ace54.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888:8035::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:36:de:72:42:24:c7:54:54:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=f167db0d-ba9c-43b0-8c73-0e52f9722024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4f:76:df:b3:f1:a7:e2:16:ad:03:ee:48:c3: c8:02:b9:af:1c:16:ca:0c:e8:b5:c4:fe:63:ae:cb: 2a:a5:74:6e:cb:04:5e:5e:d6:08:56:21:ab:0b:a6: 10:42:fd:5d:5a:f2:17:5b:28:a1:8c:b3:fc:de:06: 1c:82:07:4f:f7:47:89:3f:22:d3:4b:9e:c2:55:87: cb:98:e9:26:0f:09:4f:0c:32:df:4a:49:f1:b0:49: 8f:fe:3a:60:c8:b7:66:37:8e:74:ba:5d:e5:d9:36: 90:b1:e1:aa:c7:79:d1:bb:cb:1f:8d:22:f5:58:e3: 67:1b:65:66:c8:6c:e7:01:c2:af:75:5e:3e:f2:7f: da:55:d4:3e:f9:63:7f:5d:b7:fe:97:da:34:00:84: e2:9b:61:2f:91:01:05:b7:3f:34:35:ae:65:81:08: e5:ab:d9:26:48:c8:81:27:92:ff:91:0b:af:20:7a: 76:c3:87:e1:9e:20:b9:24:2a:21:6b:2c:5c:fe:52: 49:5c:c6:de:3b:10:b9:81:df:1e:11:8b:d1:46:bb: 84:0f:d5:bf:9e:89:d8:34:ec:e2:2c:cd:f9:c3:8f: a5:26:b8:f0:2f:61:ea:de:48:3d:71:a2:c5:38:f8: e1:98:7b:89:5c:ed:bb:23:35:bb:a2:65:4a:20:6e: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:65:3B:46:56:85:47:5E:6F:A8:3F:85:E2:8D:DF:90:32:18:F2:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c2775af-33af-3124-b5d4-2a57727ace54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8035::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7b:ba:7f:24:c5:a8:c0:55:89:99:ae:0d:5c:82:7a:99:20: 6d:fc:7b:44:43:44:20:7f:a7:a2:8d:d3:ec:9f:7e:a0:f2:64: 24:09:35:a3:33:7a:e8:3f:4e:b9:db:74:5a:9b:1f:06:28:ae: 72:64:60:ac:d4:bf:f3:9e:ae:e2:0a:cf:7b:c6:e3:54:ba:4c: 64:4c:25:83:7c:e1:ab:86:11:ac:56:27:fa:d8:27:71:af:0c: 1f:67:d8:72:20:80:47:52:c8:94:61:f7:41:1d:af:ca:c0:fd: 7a:fa:eb:3d:28:e4:a8:50:25:94:51:f7:cc:8f:ad:1f:fb:03: f4:90:77:a7:57:ee:7d:a2:41:6c:27:c0:dd:4c:38:27:fe:01: b2:91:67:83:57:12:da:6d:b5:9c:9e:bb:9d:46:b0:ea:f0:32: 20:36:39:9b:6b:7c:1c:4c:be:71:79:d0:0c:c9:c8:a3:40:34: 4f:62:47:c3:6f:1e:aa:94:35:b4:f2:08:63:66:48:b4:5e:1e: f9:4f:5d:a2:ac:97:fa:45:1e:0a:fc:84:11:f5:2c:12:e8:e7: ea:8e:56:f8:af:c7:9f:6e:8f:46:2c:87:d8:15:89:69:eb:9e: b6:aa:28:23:07:63:d2:84:f3:45:da:7a:40:c5:9e:db:fd:db: 51:b5:a3:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDbeckIkx1RUPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjE2N2RiMGQtYmE5Yy00M2IwLThjNzMtMGU1MmY5NzIyMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE9237Pxp+IWrQPuSMPIArmvHBbKDOi1xP5j rssqpXRuywReXtYIViGrC6YQQv1dWvIXWyihjLP83gYcggdP90eJPyLTS57CVYfL mOkmDwlPDDLfSknxsEmP/jpgyLdmN450ul3l2TaQseGqx3nRu8sfjSL1WONnG2Vm yGznAcKvdV4+8n/aVdQ++WN/Xbf+l9o0AITim2EvkQEFtz80Na5lgQjlq9kmSMiB J5L/kQuvIHp2w4fhniC5JCohayxc/lJJXMbeOxC5gd8eEYvRRruED9W/nonYNOzi LM35w4+lJrjwL2Hq3kg9caLFOPjhmHuJXO27IzW7omVKIG7XKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD1lO0ZWhUdeb6g/heKN35AyGPJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGMyNzc1YWYtMzNhZi0z MTI0LWI1ZDQtMmE1NzcyN2FjZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJ7un8kxajAVYmZrg1cgnqZIG38e0RDRCB/p6KN0+yffqDyZCQJ NaMzeug/TrnbdFqbHwYornJkYKzUv/OeruIKz3vG41S6TGRMJYN84auGEaxWJ/rY J3GvDB9n2HIggEdSyJRh90Edr8rA/Xr66z0o5KhQJZRR98yPrR/7A/SQd6dX7n2i QWwnwN1MOCf+AbKRZ4NXEtpttZyeu51GsOrwMiA2OZtrfBxMvnF50AzJyKNANE9i R8NvHqqUNbTyCGNmSLReHvlPXaKsl/pFHgr8hBH1LBLo5+qOVvivx59uj0Ysh9gV iWnrnraqKCMHY9KE80XaekDFntv921G1o/0= -----END CERTIFICATE-----Generated at Tue Apr 29 06:05:36 2025 by rpki-client