$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e47fdbd-610b-37cc-80b9-6379095faee1.roa File: 4e47fdbd-610b-37cc-80b9-6379095faee1.roa (raw, json) Hash identifier: 8muTXV60LkBnw3Yk3Bur3LIsu2Ecn+46dokafEV1WAE= Subject key identifier: 0F:40:F7:EA:1B:70:E1:6E:A6:3B:1B:F7:1E:EC:92:E3:CF:F4:8D:98 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184380BDED4C8862D27E940 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e47fdbd-610b-37cc-80b9-6379095faee1.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:38:0b:de:d4:c8:86:2d:27:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=4a2f87d0-3b5b-4da6-88d7-68bd76b86f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:27:30:d2:90:0a:f9:c0:23:f8:fc:86:d6: 78:a4:6a:07:35:bf:fd:b3:16:e0:69:3f:e7:91:41: 2d:43:60:c4:ee:dc:c7:9e:8a:01:3d:62:14:f1:cb: f8:77:55:5e:1e:47:13:53:d2:7d:ae:4b:0e:ad:20: 85:06:cd:e8:29:d9:1b:0d:23:4b:6f:b2:f6:f3:a2: 73:df:99:c8:14:c1:65:53:34:f2:8a:1b:8a:95:81: 88:c6:a2:5b:27:4c:fe:71:9c:59:09:84:ba:85:08: 78:03:e0:d4:05:10:d8:f6:2d:31:62:9e:d4:08:0c: 3c:11:ff:01:a1:4c:04:61:62:47:bb:39:b8:02:39: 6e:71:4e:67:63:9c:4d:b1:96:ad:c7:9c:cd:54:90: fd:a3:e4:89:4e:37:4b:76:2b:42:76:76:19:75:67: 6c:91:2a:77:30:f7:bd:00:4b:7a:07:c4:a4:94:db: 1e:db:d3:71:a4:c5:e3:fd:02:8e:64:c0:1a:f8:a9: f0:6a:5a:cc:f4:45:91:26:1c:6c:75:c6:68:2c:15: eb:e7:96:a8:52:f0:65:2c:9d:79:02:7b:92:cc:56: 84:27:46:ae:07:f0:48:e0:29:1c:e0:20:93:95:af: fd:8c:b6:75:92:f2:fa:c4:64:5e:e6:0d:8e:bb:09: e1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:40:F7:EA:1B:70:E1:6E:A6:3B:1B:F7:1E:EC:92:E3:CF:F4:8D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e47fdbd-610b-37cc-80b9-6379095faee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6f:da:aa:78:ed:6f:b6:1e:42:e3:54:39:a1:14:8b:c1:12: 09:df:2e:cc:fe:72:cc:06:de:0f:2a:10:c7:c2:d8:52:20:e0: da:34:fc:dc:32:36:5f:cb:74:9c:9a:d7:87:a1:ef:a4:80:a5: b4:53:ab:0a:2d:27:8b:2d:58:10:19:60:b4:cb:a1:fb:2e:15: 8b:67:04:c8:3e:3d:f4:a8:c1:15:45:be:7b:8f:7f:92:ce:11: 99:58:4d:25:b7:da:15:77:8e:e5:05:73:29:96:02:7b:c0:01: 0b:0e:0d:4a:67:1c:23:90:6c:2d:a8:07:2a:95:7f:c8:3b:e2: f8:bd:db:f9:5f:45:76:8a:5e:1a:64:13:c2:a9:e3:32:e2:c3: c8:75:6a:c1:7a:19:b0:64:04:f1:62:d7:87:e6:c7:27:4a:5a: fd:ca:b1:3b:fc:87:a2:e2:14:da:34:dd:4e:53:50:db:e9:a4: 25:20:37:fa:49:a3:15:39:c2:1c:ea:18:7c:ef:d1:e3:72:02: 44:c3:ec:66:0e:23:ae:ac:f4:df:d7:96:b6:8d:54:a2:94:b0: c9:dd:09:14:b3:d3:98:6b:0a:66:7a:42:a8:67:26:3c:75:07: d6:c9:5a:86:ef:42:69:e7:b3:92:0c:31:77:e6:98:d2:a8:01: ca:25:3b:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDgL3tTIhi0n6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NGEyZjg3ZDAtM2I1Yi00ZGE2LTg4ZDctNjhiZDc2Yjg2ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWgnMNKQCvnAI/j8htZ4pGoHNb/9sxbgaT/n kUEtQ2DE7tzHnooBPWIU8cv4d1VeHkcTU9J9rksOrSCFBs3oKdkbDSNLb7L286Jz 35nIFMFlUzTyihuKlYGIxqJbJ0z+cZxZCYS6hQh4A+DUBRDY9i0xYp7UCAw8Ef8B oUwEYWJHuzm4AjlucU5nY5xNsZatx5zNVJD9o+SJTjdLditCdnYZdWdskSp3MPe9 AEt6B8SklNse29NxpMXj/QKOZMAa+KnwalrM9EWRJhxsdcZoLBXr55aoUvBlLJ15 AnuSzFaEJ0auB/BI4Ckc4CCTla/9jLZ1kvL6xGRe5g2OuwnhUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA9A9+obcOFupjsb9x7skuPP9I2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGU0N2ZkYmQtNjEwYi0z N2NjLTgwYjktNjM3OTA5NWZhZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAANv2qp47W+2HkLjVDmhFIvBEgnfLsz+cswG3g8qEMfC2FIg4No0 /NwyNl/LdJya14eh76SApbRTqwotJ4stWBAZYLTLofsuFYtnBMg+PfSowRVFvnuP f5LOEZlYTSW32hV3juUFcymWAnvAAQsODUpnHCOQbC2oByqVf8g74vi92/lfRXaK XhpkE8Kp4zLiw8h1asF6GbBkBPFi14fmxydKWv3KsTv8h6LiFNo03U5TUNvppCUg N/pJoxU5whzqGHzv0eNyAkTD7GYOI66s9N/XlraNVKKUsMndCRSz05hrCmZ6Qqhn Jjx1B9bJWobvQmnns5IMMXfmmNKoAcolO8s= -----END CERTIFICATE-----Generated at Sat Apr 26 22:55:13 2025 by rpki-client