$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/891a56d6-529d-32d8-8783-7890a703fdec.roa File: 891a56d6-529d-32d8-8783-7890a703fdec.roa (raw, json) Hash identifier: 7aupTUw5RkN2BTKaLvU6Uc3DHLfRqAOj10oJlXtyX5A= Subject key identifier: 5F:A1:3A:CD:A0:2F:AA:3D:93:0C:59:4D:D6:A2:27:32:FE:38:94:77 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A00DAF4B5CA96C66DD35B7640 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/891a56d6-529d-32d8-8783-7890a703fdec.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 22394 IP address blocks: 2001:4888:803b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f4:b5:ca:96:c6:6d:d3:5b:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=f889c641-0e27-4f43-b712-015bdee005a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:76:54:be:bb:7d:77:06:60:6f:14:95:34: b4:cb:ec:47:07:5b:d6:b7:c3:c2:9a:8b:41:17:ca: 0f:e8:c6:4d:c7:bf:f3:43:c2:38:ea:7b:21:7b:99: bb:b6:2b:c4:e0:e7:81:1c:eb:6d:48:93:39:75:36: cd:c7:ad:87:7e:ae:09:5b:f3:65:69:02:d0:a7:32: 72:a9:c9:1b:0f:4d:e5:a0:44:d0:4e:51:a3:d1:0b: 33:67:15:93:03:35:5a:d4:02:55:40:52:04:fb:03: de:be:2c:38:9a:67:d0:dd:de:a9:d1:aa:ed:c3:61: a0:0c:bf:98:b9:2a:1a:fc:46:65:f9:d3:b2:c9:4d: 6b:51:3d:ec:49:b4:cc:cc:02:5f:b8:d5:c8:92:65: 18:eb:f7:62:98:6a:f1:4a:c5:ec:3c:12:ef:96:66: ad:81:b8:f0:38:0c:88:46:13:c7:22:5f:4e:7a:03: cb:4e:2d:0b:12:24:bf:d9:00:c6:24:b1:73:2d:07: 1f:49:b7:ad:51:d4:60:74:61:0d:16:fe:6f:b1:57: d4:21:a5:2e:a3:d5:ec:83:42:3d:8b:c9:97:a2:df: 16:f3:b6:5f:60:a2:ff:21:54:17:7e:b9:fb:01:ee: e0:9d:a0:4d:ba:ae:6a:e3:7d:7f:0d:3c:c3:97:e8: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A1:3A:CD:A0:2F:AA:3D:93:0C:59:4D:D6:A2:27:32:FE:38:94:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/891a56d6-529d-32d8-8783-7890a703fdec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:803b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7b:99:01:75:2c:76:ec:d5:a2:e9:12:1a:71:ae:99:d4:a0: 26:59:0f:a5:41:bc:e3:1a:94:5d:7a:32:d5:ee:fc:f1:fe:b6: c1:ec:05:01:42:3a:2a:22:b9:26:0d:22:42:96:0f:4d:de:5c: b1:e3:83:53:10:2b:5a:9f:38:d3:a6:23:5e:2b:08:3f:9f:81: 0f:4c:2a:f6:a8:9d:2e:a8:44:7c:7b:42:1d:98:22:1c:db:1f: f9:b6:87:58:84:79:95:a4:b1:e0:d2:5f:66:32:41:3f:61:2c: 6d:fd:be:60:de:b8:72:ef:09:9d:b0:0b:b8:f1:9a:2a:e5:d1: 86:6c:7f:b9:a5:19:8a:be:ac:53:c8:6d:d9:da:62:ee:98:3e: 01:47:52:af:ce:9e:44:8b:65:d3:2d:fb:bf:39:ee:a5:3b:6a: 49:9e:1f:ef:57:c2:03:d7:87:b2:5a:e6:1d:9f:9e:82:e3:13: 53:52:22:f9:cd:5a:f2:86:27:83:7c:32:2f:6f:b1:6b:36:79: 04:4b:38:b6:bd:43:c5:97:67:c5:7d:fd:a1:11:02:18:46:b3: be:60:5d:4e:4a:fc:e4:93:f9:5b:c5:0d:6d:5d:72:c7:60:3d: 58:b9:38:2f:52:f2:9c:a8:2e:cf:5f:c2:8c:f1:26:d7:9c:c9: ef:33:2a:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoA2vS1ypbGbdNbdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk Zjg4OWM2NDEtMGUyNy00ZjQzLWI3MTItMDE1YmRlZTAwNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRR2VL67fXcGYG8UlTS0y+xHB1vWt8PCmotB F8oP6MZNx7/zQ8I46nshe5m7tivE4OeBHOttSJM5dTbNx62Hfq4JW/NlaQLQpzJy qckbD03loETQTlGj0QszZxWTAzVa1AJVQFIE+wPeviw4mmfQ3d6p0artw2GgDL+Y uSoa/EZl+dOyyU1rUT3sSbTMzAJfuNXIkmUY6/dimGrxSsXsPBLvlmatgbjwOAyI RhPHIl9OegPLTi0LEiS/2QDGJLFzLQcfSbetUdRgdGENFv5vsVfUIaUuo9Xsg0I9 i8mXot8W87ZfYKL/IVQXfrn7Ae7gnaBNuq5q431/DTzDl+iEqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF+hOs2gL6o9kwxZTdaiJzL+OJR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODkxYTU2ZDYtNTI5ZC0z MmQ4LTg3ODMtNzg5MGE3MDNmZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADN7mQF1LHbs1aLpEhpxrpnUoCZZD6VBvOMalF16MtXu/PH+tsHs BQFCOioiuSYNIkKWD03eXLHjg1MQK1qfONOmI14rCD+fgQ9MKvaonS6oRHx7Qh2Y IhzbH/m2h1iEeZWkseDSX2YyQT9hLG39vmDeuHLvCZ2wC7jxmirl0YZsf7mlGYq+ rFPIbdnaYu6YPgFHUq/OnkSLZdMt+7857qU7akmeH+9XwgPXh7Ja5h2fnoLjE1NS IvnNWvKGJ4N8Mi9vsWs2eQRLOLa9Q8WXZ8V9/aERAhhGs75gXU5K/OST+VvFDW1d csdgPVi5OC9S8pyoLs9fwozxJtecye8zKgk= -----END CERTIFICATE-----Generated at Tue Jun 17 04:38:52 2025 by rpki-client