$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8e0fed2-13a2-3ce5-9e99-399d97517022.roa File: c8e0fed2-13a2-3ce5-9e99-399d97517022.roa (raw, json) Hash identifier: kUAsn/yiG4mClLFc6DIOU643Al+4n1STBjTLu6VqZ/Q= Subject key identifier: 0B:B4:E8:23:35:9E:A6:B3:6F:8C:28:C9:35:33:D1:77:37:70:8A:A7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184384B4650ADBFA3E66B60 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8e0fed2-13a2-3ce5-9e99-399d97517022.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888:803a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:38:4b:46:50:ad:bf:a3:e6:6b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=06c54670-f02a-4fe1-ae78-9c7b0efeecc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6e:cd:96:95:21:d2:69:c3:7d:9c:e8:13:7e: e5:a0:cf:22:e6:88:a4:06:eb:b5:aa:3d:a7:ef:11: f8:a7:f9:61:65:c8:4b:33:b2:1a:a3:ea:bd:0e:aa: e8:51:d7:64:23:6f:b0:e0:28:2a:34:8c:98:05:9b: 11:83:b0:bf:44:f0:a6:97:86:20:36:80:a2:8f:af: c1:9b:15:ae:48:6c:87:2f:79:f9:7e:84:29:36:59: 36:41:60:8f:a8:e2:06:c4:ea:48:4f:86:d7:03:90: 37:0e:00:f6:02:22:15:0e:12:e0:8e:b4:67:69:35: 79:d0:83:3b:e9:a4:7b:76:43:92:91:4f:c8:33:59: 75:61:8a:b5:59:62:ce:92:28:2f:1d:02:02:ce:e0: 3f:25:a6:9f:87:96:84:e0:4c:27:1c:38:10:08:2a: 8b:2f:6c:49:91:8e:bf:d0:75:9c:a9:76:d1:4e:c1: 7f:49:fc:76:32:72:1e:fa:5e:50:e2:fc:5b:47:cd: a6:eb:96:58:90:82:97:49:9f:88:06:6a:70:ca:4d: c6:44:84:55:60:99:d6:06:3b:ab:c6:3c:f4:86:35: 4c:39:20:f2:fa:b7:d9:70:1d:b5:13:76:12:b2:2a: b8:24:d5:ab:4e:1b:b2:b2:94:af:d5:88:c3:8b:b1: 46:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B4:E8:23:35:9E:A6:B3:6F:8C:28:C9:35:33:D1:77:37:70:8A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8e0fed2-13a2-3ce5-9e99-399d97517022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:803a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0a:e2:e1:ca:f5:97:58:b8:c5:6b:d6:fa:c2:95:17:2a:52: 21:04:c6:48:42:fb:cf:fb:1b:c9:fa:8a:e6:08:73:7f:8a:36: 49:ab:0f:f5:58:f6:df:67:70:5d:bf:1d:d4:f0:ee:6a:d9:6e: fd:20:a6:eb:b0:ae:8f:d6:e6:9f:40:a2:a6:ad:ab:9e:aa:98: b7:b5:33:b6:47:cd:55:ee:f6:c3:b7:66:97:db:b5:3c:a4:42: fa:68:7c:1b:21:f4:82:b0:b7:cd:fa:3e:dd:12:05:b3:9c:1f: 0b:76:c9:e6:84:9c:82:d2:6e:eb:7e:f7:07:a8:bb:9c:0d:46: 95:45:e2:c2:b9:79:15:9f:ad:38:4e:3d:01:2b:01:09:87:58: 4f:c3:0d:54:c1:40:81:ed:37:c2:bd:77:c5:3b:69:15:f7:ff: 17:7d:7b:fc:6d:6d:6b:bf:b8:da:58:87:ca:02:2a:38:6c:69: 68:c6:80:62:0e:09:ad:61:c7:05:bb:85:56:95:c7:af:21:90: 99:f8:1d:da:cf:09:51:5e:34:79:38:2f:de:51:19:92:69:f6: 28:0b:f4:c2:4c:d5:46:ce:61:b9:02:25:57:b5:2b:5c:85:af: 35:da:65:ee:2f:af:83:a6:c3:19:22:7f:db:db:f0:02:a6:65: 56:72:bb:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDhLRlCtv6Pma2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MDZjNTQ2NzAtZjAyYS00ZmUxLWFlNzgtOWM3YjBlZmVlY2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG7NlpUh0mnDfZzoE37loM8i5oikBuu1qj2n 7xH4p/lhZchLM7Iao+q9DqroUddkI2+w4CgqNIyYBZsRg7C/RPCml4YgNoCij6/B mxWuSGyHL3n5foQpNlk2QWCPqOIGxOpIT4bXA5A3DgD2AiIVDhLgjrRnaTV50IM7 6aR7dkOSkU/IM1l1YYq1WWLOkigvHQICzuA/Jaafh5aE4EwnHDgQCCqLL2xJkY6/ 0HWcqXbRTsF/Sfx2MnIe+l5Q4vxbR82m65ZYkIKXSZ+IBmpwyk3GRIRVYJnWBjur xjz0hjVMOSDy+rfZcB21E3YSsiq4JNWrThuyspSv1YjDi7FG0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAu06CM1nqazb4woyTUz0Xc3cIqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzhlMGZlZDItMTNhMi0z Y2U1LTllOTktMzk5ZDk3NTE3MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFUK4uHK9ZdYuMVr1vrClRcqUiEExkhC+8/7G8n6iuYIc3+KNkmr D/VY9t9ncF2/HdTw7mrZbv0gpuuwro/W5p9Aoqatq56qmLe1M7ZHzVXu9sO3Zpfb tTykQvpofBsh9IKwt836Pt0SBbOcHwt2yeaEnILSbut+9weou5wNRpVF4sK5eRWf rThOPQErAQmHWE/DDVTBQIHtN8K9d8U7aRX3/xd9e/xtbWu/uNpYh8oCKjhsaWjG gGIOCa1hxwW7hVaVx68hkJn4HdrPCVFeNHk4L95RGZJp9igL9MJM1UbOYbkCJVe1 K1yFrzXaZe4vr4Omwxkif9vb8AKmZVZyu5U= -----END CERTIFICATE-----Generated at Sun Apr 27 00:20:26 2025 by rpki-client