$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa File: f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa (raw, json) Hash identifier: +gOzg40/42MtJa3oXMrfd2efNGtA3XuTm3t3Wv3adiw= Subject key identifier: 3E:D6:B7:60:5E:82:64:E5:F7:F8:1E:13:C0:7B:B8:41:75:C9:9D:57 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849218436B431BBB104F0C97080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888:8032::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:36:b4:31:bb:b1:04:f0:c9:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=2aedbe0b-b7df-42a5-b71b-16f77205431c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fc:30:1c:12:51:33:40:8c:e8:ea:bd:8c:1f: 63:90:4c:b8:39:01:0d:c9:f2:f1:af:bc:0c:a4:20: ba:cb:12:20:86:3f:60:61:a5:bd:48:a8:13:d4:1d: a1:30:7a:61:5e:2d:73:6a:4e:62:a7:a0:85:34:16: 6f:e8:ff:ab:cf:20:ee:f8:7d:39:2c:6e:f3:a3:ac: dc:04:2d:1d:5c:2e:32:ab:df:09:67:22:39:ff:92: 98:61:fc:ba:d1:c6:23:66:8a:66:4a:73:da:71:2c: dc:69:84:1e:22:5a:49:52:7c:4f:83:4a:c4:26:fa: 58:2c:b2:6b:fe:5f:4a:9e:cf:cd:fb:05:e3:33:ac: 23:c5:1a:0c:a1:be:0d:fb:54:11:f5:17:b7:55:c6: 64:eb:90:f8:6e:8a:8f:20:13:d4:1f:14:2e:b2:b0: 7a:a1:49:50:87:e9:1e:7c:94:5d:f0:23:e7:2a:7d: 89:c4:1e:84:0f:8b:c3:79:4e:d6:f3:f4:92:9d:fe: 18:af:43:f1:e0:c7:82:80:bf:ec:af:d6:3f:bf:f0: 94:23:fa:a1:4e:17:3e:07:cd:01:69:e0:37:09:c7: 17:6a:31:b0:0b:1b:19:73:70:3d:93:3f:fb:04:9f: 7d:d1:88:a8:8f:2a:a7:21:a5:3f:3b:00:82:80:3a: d1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D6:B7:60:5E:82:64:E5:F7:F8:1E:13:C0:7B:B8:41:75:C9:9D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8032::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:56:d9:26:d9:58:e4:2f:3c:05:24:b1:fd:ed:09:ca:f1:d5: 15:b6:ea:55:8f:1c:47:20:c6:69:8f:9a:8f:ab:6a:bb:17:49: 7d:52:31:30:cb:53:33:d1:f0:7f:6a:bd:30:aa:89:72:a8:7e: 8e:91:52:79:51:f7:a2:53:66:7e:60:4f:1f:d8:a6:bd:58:8a: a5:65:4a:4e:56:b1:f6:00:78:58:f4:0e:6b:1a:91:e9:78:d2: c1:a5:b1:38:55:28:93:f6:27:13:04:a0:9a:45:e1:59:e4:11: e3:a6:67:f8:b8:27:30:b1:51:b7:14:86:e8:e2:c3:e6:58:fc: 52:34:69:81:2e:b4:2e:7c:08:7b:68:3e:fc:36:5d:a5:09:e6: 0f:8c:a1:7c:3e:84:55:cd:13:3b:fc:ff:46:97:4f:a2:50:61: e7:3f:94:05:5a:4b:8a:f0:9c:ac:80:4f:9d:39:15:8e:0e:29: 34:08:b4:e7:15:b5:fc:29:7c:d7:72:ad:0e:55:c1:39:61:f0: 75:85:02:4d:36:ae:f1:a1:48:38:e2:45:78:93:d9:37:d9:bd: 9a:e8:a2:61:b1:f2:b7:66:36:ab:e3:28:4b:8e:ed:83:e8:08: 48:a3:9e:a9:6f:a7:8f:5b:e3:12:1c:ac:9a:19:b3:5d:e4:18: fd:64:e4:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDa0MbuxBPDJcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MmFlZGJlMGItYjdkZi00MmE1LWI3MWItMTZmNzcyMDU0MzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPwwHBJRM0CM6Oq9jB9jkEy4OQENyfLxr7wM pCC6yxIghj9gYaW9SKgT1B2hMHphXi1zak5ip6CFNBZv6P+rzyDu+H05LG7zo6zc BC0dXC4yq98JZyI5/5KYYfy60cYjZopmSnPacSzcaYQeIlpJUnxPg0rEJvpYLLJr /l9Kns/N+wXjM6wjxRoMob4N+1QR9Re3VcZk65D4boqPIBPUHxQusrB6oUlQh+ke fJRd8CPnKn2JxB6ED4vDeU7W8/SSnf4Yr0Px4MeCgL/sr9Y/v/CUI/qhThc+B80B aeA3CccXajGwCxsZc3A9kz/7BJ990YiojyqnIaU/OwCCgDrR3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD7Wt2BegmTl9/geE8B7uEF1yZ1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjg5YmIxN2MtNDBhZC0z NTZhLWI2ZjgtNGRkM2ZlNmJiNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHJW2SbZWOQvPAUksf3tCcrx1RW26lWPHEcgxmmPmo+rarsXSX1S MTDLUzPR8H9qvTCqiXKofo6RUnlR96JTZn5gTx/Ypr1YiqVlSk5WsfYAeFj0Dmsa kel40sGlsThVKJP2JxMEoJpF4VnkEeOmZ/i4JzCxUbcUhujiw+ZY/FI0aYEutC58 CHtoPvw2XaUJ5g+MoXw+hFXNEzv8/0aXT6JQYec/lAVaS4rwnKyAT505FY4OKTQI tOcVtfwpfNdyrQ5VwTlh8HWFAk02rvGhSDjiRXiT2TfZvZroomGx8rdmNqvjKEuO 7YPoCEijnqlvp49b4xIcrJoZs13kGP1k5Lw= -----END CERTIFICATE-----Generated at Sun Apr 27 16:32:16 2025 by rpki-client