$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3707953-4631-3496-b2fc-400aa5c6e3ff.roa File: e3707953-4631-3496-b2fc-400aa5c6e3ff.roa (raw, json) Hash identifier: CJukXnTUsLLUmSmA8UQKgGGwt9cw2ZJRGRvJPW7VsAE= Subject key identifier: CC:6A:74:79:3E:E6:5A:7C:37:DF:A2:C0:AD:2A:95:55:E2:26:B4:29 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849218438D9507D4377B05A1060 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3707953-4631-3496-b2fc-400aa5c6e3ff.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888:a604::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:38:d9:50:7d:43:77:b0:5a:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=6bcc1ce7-26ca-4fc9-af41-e5d9879da330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:fb:69:2d:9e:ea:e8:bb:6d:c7:ba:92:04: f7:8c:07:eb:d2:85:17:8e:30:c6:bd:5b:e7:aa:00: 14:2c:46:f4:9b:b1:82:a4:79:cd:3d:35:2a:de:f1: 35:5e:a9:18:f6:9b:4d:07:7d:7c:67:5a:24:2a:56: b9:81:c8:79:9d:db:86:60:a3:3a:a3:e4:e9:4c:bc: 71:ad:91:b6:4c:cc:e3:c3:55:45:a4:60:ae:49:02: c8:02:cb:c5:e8:fb:c1:b8:89:5e:b3:a2:9a:cc:5e: da:44:c2:a7:57:8a:d2:12:ee:8e:18:41:d7:f0:70: 3b:4f:89:60:d7:bd:ef:34:98:3e:34:11:9f:4c:c6: 9c:83:65:0d:05:c8:3b:ce:c0:3c:87:04:9c:16:68: 49:f1:5e:0c:50:dd:d0:78:e1:ed:3c:16:84:b1:40: f1:26:52:20:0d:bf:1e:fb:92:83:e6:c7:92:e1:9f: 5b:a2:f7:05:d4:fb:9f:7b:37:e1:98:65:48:9d:35: 6e:c3:30:01:d6:f3:ec:33:f5:e1:db:8f:6d:cb:91: b9:b2:e5:bf:c4:55:e7:1e:00:76:81:d2:2e:e8:12: 68:ba:de:ad:5c:67:28:31:6f:2c:6d:d5:d9:ed:c0: b4:10:ca:ce:62:1f:b3:c6:59:f3:bf:78:bd:00:e2: f2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6A:74:79:3E:E6:5A:7C:37:DF:A2:C0:AD:2A:95:55:E2:26:B4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3707953-4631-3496-b2fc-400aa5c6e3ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:a604::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:3a:61:05:49:7e:b8:a9:e2:83:e0:6d:bf:ae:1d:4e:48:de: 08:8a:92:e5:8e:09:9b:89:ea:c6:01:af:af:b7:a1:74:a9:91: ee:cb:26:fb:f1:3b:2c:07:29:8a:74:fa:32:5f:fe:21:40:31: 89:db:f0:a0:e9:6d:4a:d5:9e:80:6b:9e:cb:2e:56:b2:8b:9b: 50:ac:dc:78:f3:6d:ac:14:f0:50:b0:e8:f7:95:a9:1e:3b:5a: 2e:14:ab:ba:00:f5:83:3c:30:fb:f5:ba:30:2d:75:f9:ea:23: db:2e:15:a0:92:cb:c3:9a:d1:fd:02:05:2a:b8:e7:4b:81:b5: 6c:f4:19:4b:28:62:cf:83:47:8f:da:3e:e0:19:e6:ac:08:81: 8b:d1:64:ec:59:ae:1c:92:c5:5c:dd:fb:f9:72:2f:c3:f0:d2: ca:4a:3a:8a:79:67:0f:0b:77:93:c6:6e:d8:1a:9b:9b:73:12: 53:33:de:cc:ad:2c:88:49:71:55:a7:93:df:e1:e8:dd:6e:ca: 32:71:ed:90:d0:8f:db:0c:dc:70:97:4c:80:62:da:60:d7:ca: 62:37:4c:fd:18:18:1a:88:5d:d1:06:74:5f:3d:5c:fd:e7:49: ea:cb:cf:83:58:ce:18:d1:40:7b:25:aa:f6:1d:29:86:a3:d1: d1:6b:93:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDjZUH1Dd7BaEGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NmJjYzFjZTctMjZjYS00ZmM5LWFmNDEtZTVkOTg3OWRhMzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/H7aS2e6ui7bce6kgT3jAfr0oUXjjDGvVvn qgAULEb0m7GCpHnNPTUq3vE1XqkY9ptNB318Z1okKla5gch5nduGYKM6o+TpTLxx rZG2TMzjw1VFpGCuSQLIAsvF6PvBuIles6KazF7aRMKnV4rSEu6OGEHX8HA7T4lg 173vNJg+NBGfTMacg2UNBcg7zsA8hwScFmhJ8V4MUN3QeOHtPBaEsUDxJlIgDb8e +5KD5seS4Z9bovcF1PufezfhmGVInTVuwzAB1vPsM/Xh249ty5G5suW/xFXnHgB2 gdIu6BJout6tXGcoMW8sbdXZ7cC0EMrOYh+zxlnzv3i9AOLymwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMxqdHk+5lp8N9+iwK0qlVXiJrQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTM3MDc5NTMtNDYzMS0z NDk2LWIyZmMtNDAwYWE1YzZlM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiKYE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKs6YQVJfrip4oPgbb+uHU5I3giKkuWOCZuJ6sYBr6+3oXSpke7L JvvxOywHKYp0+jJf/iFAMYnb8KDpbUrVnoBrnssuVrKLm1Cs3HjzbawU8FCw6PeV qR47Wi4Uq7oA9YM8MPv1ujAtdfnqI9suFaCSy8Oa0f0CBSq450uBtWz0GUsoYs+D R4/aPuAZ5qwIgYvRZOxZrhySxVzd+/lyL8Pw0spKOop5Zw8Ld5PGbtgam5tzElMz 3sytLIhJcVWnk9/h6N1uyjJx7ZDQj9sM3HCXTIBi2mDXymI3TP0YGBqIXdEGdF89 XP3nSerLz4NYzhjRQHslqvYdKYaj0dFrkyA= -----END CERTIFICATE-----Generated at Sun Apr 27 04:34:05 2025 by rpki-client