$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa File: c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa (raw, json) Hash identifier: 3iDoXkvs7yQr8EoYDwG9+/RAyJeWPwoLA3P3wz+yh/M= Subject key identifier: 82:30:EC:56:88:D6:03:78:02:1D:C5:8F:7B:B9:8A:90:CA:A3:A4:32 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184387619A8B783CCC5D838 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888:803d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:38:76:19:a8:b7:83:cc:c5:d8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=beae857e-87a7-4b02-b776-17c21bca0a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:a0:bc:79:7c:8c:22:eb:97:8e:36:9e:ef: 8a:40:43:cb:c0:43:b5:4d:18:cd:d2:dd:1d:dd:49: 0f:64:2d:ea:53:92:6a:d1:d5:0c:fc:82:ab:8f:28: 83:fd:c9:93:89:15:04:e1:45:b8:d2:2c:c3:48:26: 94:ea:68:46:7b:05:5f:47:8d:cf:0f:18:ff:29:22: 81:f7:39:b3:51:a8:5d:5a:ce:81:59:48:73:61:51: d8:e4:4b:31:0c:5a:17:ec:6c:cc:4c:33:47:75:96: 86:5a:41:da:fa:3a:a9:8d:07:0d:0a:c1:98:e7:29: 18:16:96:fe:e9:90:24:e8:90:30:5a:cc:96:92:4f: 17:d6:03:37:7e:af:c1:7d:ee:d1:f2:52:3b:2b:60: 7f:9b:36:b8:5d:43:c5:c6:f5:97:31:ea:5b:8c:90: 2b:0a:fc:c2:c2:f9:24:41:33:98:f0:a4:f0:a9:d5: a7:e3:58:4d:04:76:52:cb:54:98:c9:ea:44:47:bb: 2c:92:e4:2b:05:b1:0d:3f:a8:b5:56:ce:e4:e3:88: 1c:20:89:9a:83:c9:20:01:f1:ac:d9:76:49:ca:43: 89:5f:2f:16:9d:ef:a7:d1:b1:77:b8:ca:d8:b3:36: 7e:c9:64:6e:a9:65:8d:25:f2:67:0d:b9:be:ca:6c: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:30:EC:56:88:D6:03:78:02:1D:C5:8F:7B:B9:8A:90:CA:A3:A4:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:803d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8b:18:29:95:d5:6c:9b:7f:ac:02:2d:a4:83:4c:04:f0:03: a0:a2:4e:cf:49:c1:61:4b:b2:da:6b:fa:c8:6b:2a:50:07:0c: e4:55:cf:5d:ca:e5:c2:59:9e:5b:02:46:3d:46:76:c1:d3:82: eb:3c:a7:a5:84:98:63:50:2f:3a:0d:52:76:f9:89:42:78:ed: ea:7f:6f:aa:91:d5:fc:65:b5:f9:06:9d:42:30:ce:2b:39:e0: c4:ba:f8:42:c9:72:27:ce:b1:6a:ac:d4:cf:e1:82:f2:d1:e7: 8e:a5:67:11:45:e3:46:6d:24:6f:f4:8a:14:bd:91:f8:01:fd: 51:56:20:2e:92:3e:de:75:77:54:2e:2d:e0:e2:f8:32:e6:f4: ef:5f:e7:92:8d:45:ed:6e:72:8b:d4:7c:af:cd:bd:52:87:6d: 27:fe:db:1a:da:2b:a2:b6:d5:e6:7e:89:c9:7c:b0:a2:87:d0: 13:df:42:91:8a:eb:39:ce:ad:a2:eb:d9:05:88:3d:b9:0e:01: 35:c3:c7:cb:b6:1f:fd:9a:0d:b7:87:d7:d1:18:e0:f5:97:75: e7:31:59:67:1c:c0:8a:f0:28:ec:b8:24:7a:b7:93:d4:9f:6c: 5f:c8:3f:65:cd:f1:ce:73:e1:8e:ff:bb:5b:9b:13:1a:9c:d7: f6:41:41:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDh2Gai3g8zF2DgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YmVhZTg1N2UtODdhNy00YjAyLWI3NzYtMTdjMjFiY2EwYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvSgvHl8jCLrl442nu+KQEPLwEO1TRjN0t0d 3UkPZC3qU5Jq0dUM/IKrjyiD/cmTiRUE4UW40izDSCaU6mhGewVfR43PDxj/KSKB 9zmzUahdWs6BWUhzYVHY5EsxDFoX7GzMTDNHdZaGWkHa+jqpjQcNCsGY5ykYFpb+ 6ZAk6JAwWsyWkk8X1gM3fq/Bfe7R8lI7K2B/mza4XUPFxvWXMepbjJArCvzCwvkk QTOY8KTwqdWn41hNBHZSy1SYyepER7sskuQrBbENP6i1Vs7k44gcIImag8kgAfGs 2XZJykOJXy8Wne+n0bF3uMrYszZ+yWRuqWWNJfJnDbm+ymyA4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIIw7FaI1gN4Ah3Fj3u5ipDKo6QyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzdmNmViMjUtZmRmNy0z ODAxLTgyNzAtZDVkNGE4MzZiZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2LGCmV1Wybf6wCLaSDTATwA6CiTs9JwWFLstpr+shrKlAHDORV z13K5cJZnlsCRj1GdsHTgus8p6WEmGNQLzoNUnb5iUJ47ep/b6qR1fxltfkGnUIw zis54MS6+ELJcifOsWqs1M/hgvLR546lZxFF40ZtJG/0ihS9kfgB/VFWIC6SPt51 d1QuLeDi+DLm9O9f55KNRe1ucovUfK/NvVKHbSf+2xraK6K21eZ+icl8sKKH0BPf QpGK6znOraLr2QWIPbkOATXDx8u2H/2aDbeH19EY4PWXdecxWWccwIrwKOy4JHq3 k9SfbF/IP2XN8c5z4Y7/u1ubExqc1/ZBQSo= -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:01 2025 by rpki-client