$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258106a7-6686-31b8-91f0-ae12a2627832.roa File: 258106a7-6686-31b8-91f0-ae12a2627832.roa (raw, json) Hash identifier: DIpLqMBfzjqiwMb9LtTX7laDBHw31CPLj5+DXod83ow= Subject key identifier: C6:FD:EA:97:E1:89:2D:D3:31:33:F8:CD:1F:B9:0F:5C:4D:44:07:32 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A00DAF499958624332AC055E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258106a7-6686-31b8-91f0-ae12a2627832.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 22394 IP address blocks: 2001:4888:802f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f4:99:95:86:24:33:2a:c0:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=a47bc3f5-aaea-4bab-a091-49ba0195a47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:42:1d:93:fb:cc:4b:6a:fd:6b:14:98:0d:9e: 62:a5:d9:88:e3:12:7c:a7:17:c7:7d:0a:30:35:62: 1c:17:53:7f:47:59:84:d6:89:e9:4b:74:39:9a:64: 28:24:b5:2f:1f:e8:43:0a:85:38:cd:dc:9c:8e:2f: cc:03:0b:0c:4f:68:e0:50:d6:8d:a2:b8:96:08:eb: d5:03:be:92:c1:d8:0b:cf:5f:c4:0f:d6:aa:00:5e: 6f:a1:6e:2a:68:ce:03:3e:78:33:61:46:9a:7e:0a: 77:16:00:c7:eb:2a:71:0c:b5:98:22:57:1e:e9:e3: b3:a1:bc:d9:09:fd:3a:c7:46:55:f9:00:77:96:5f: 9b:df:c3:6b:37:a1:f5:e3:6d:49:6a:8e:b5:19:7c: 4e:ac:e0:08:65:4f:b8:ce:03:87:71:9b:10:c7:ff: 05:40:69:06:1d:12:f0:9d:ad:71:1a:a1:d7:02:fb: 67:7a:75:25:6a:63:8a:e8:7b:4d:eb:50:00:9f:eb: 0a:fe:e4:2d:17:0e:4e:af:0f:47:e1:2d:e9:11:2c: 77:27:a8:9b:b4:f5:e7:71:e4:14:59:bb:cd:a2:86: 0a:e3:7b:5a:43:5e:bc:7b:31:0a:93:44:f7:20:a6: 1c:ad:d3:ca:11:03:15:3d:4f:74:26:4c:68:7b:cb: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FD:EA:97:E1:89:2D:D3:31:33:F8:CD:1F:B9:0F:5C:4D:44:07:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258106a7-6686-31b8-91f0-ae12a2627832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:802f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0d:1a:83:4a:e1:ea:fb:67:47:e2:0f:8d:e3:46:26:7e:f1: 04:e6:df:3b:9e:43:55:3d:c9:91:eb:80:8a:db:6d:d5:05:34: ae:67:92:39:c9:d0:6d:b5:fe:e3:08:69:fe:ec:b7:06:9e:19: 91:d6:6a:b5:7a:84:8a:67:90:94:70:c3:76:86:74:22:0a:55: b1:c3:49:81:13:72:f8:86:24:f6:c3:c5:64:ca:2e:44:41:cd: 8b:a1:21:7a:6c:5f:ba:68:4b:f2:bb:14:21:20:c7:d8:bb:5b: d1:fa:45:76:d5:29:89:f2:8a:50:49:10:0d:d2:e6:cc:d2:e5: 3c:94:4e:60:d6:e7:17:06:82:c0:74:b0:9a:8a:7b:d3:1f:77: 8b:9c:e3:29:c7:f5:8d:19:62:20:a3:57:62:c1:9f:31:7a:b8: e9:68:58:28:14:d0:9f:d4:83:06:8c:38:22:20:96:03:ae:7d: 3a:43:ed:eb:38:66:9e:86:58:16:68:72:3b:dc:80:e4:63:26: f0:37:9e:46:04:02:19:f9:0e:60:3a:cd:74:7e:d6:5a:7f:3f: 23:a4:49:36:94:01:e7:33:1f:88:4b:c5:81:0e:5b:44:0c:a2: 80:ae:10:87:c9:93:33:48:b8:6e:a7:30:5e:7f:9e:30:d0:b7: d4:af:53:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoA2vSZlYYkMyrAVeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YTQ3YmMzZjUtYWFlYS00YmFiLWEwOTEtNDliYTAxOTVhNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Idk/vMS2r9axSYDZ5ipdmI4xJ8pxfHfQow NWIcF1N/R1mE1onpS3Q5mmQoJLUvH+hDCoU4zdycji/MAwsMT2jgUNaNoriWCOvV A76SwdgLz1/ED9aqAF5voW4qaM4DPngzYUaafgp3FgDH6ypxDLWYIlce6eOzobzZ Cf06x0ZV+QB3ll+b38NrN6H1421Jao61GXxOrOAIZU+4zgOHcZsQx/8FQGkGHRLw na1xGqHXAvtnenUlamOK6HtN61AAn+sK/uQtFw5Orw9H4S3pESx3J6ibtPXnceQU WbvNooYK43taQ168ezEKk0T3IKYcrdPKEQMVPU90Jkxoe8vKLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMb96pfhiS3TMTP4zR+5D1xNRAcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjU4MTA2YTctNjY4Ni0z MWI4LTkxZjAtYWUxMmEyNjI3ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIcNGoNK4er7Z0fiD43jRiZ+8QTm3zueQ1U9yZHrgIrbbdUFNK5n kjnJ0G21/uMIaf7stwaeGZHWarV6hIpnkJRww3aGdCIKVbHDSYETcviGJPbDxWTK LkRBzYuhIXpsX7poS/K7FCEgx9i7W9H6RXbVKYnyilBJEA3S5szS5TyUTmDW5xcG gsB0sJqKe9Mfd4uc4ynH9Y0ZYiCjV2LBnzF6uOloWCgU0J/UgwaMOCIglgOufTpD 7es4Zp6GWBZocjvcgORjJvA3nkYEAhn5DmA6zXR+1lp/PyOkSTaUAeczH4hLxYEO W0QMooCuEIfJkzNIuG6nMF5/njDQt9SvU5c= -----END CERTIFICATE-----Generated at Sun Jun 1 08:14:55 2025 by rpki-client