$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288c4520-4d43-370b-a67f-041cfda55568.roa File: 288c4520-4d43-370b-a67f-041cfda55568.roa (raw, json) Hash identifier: G3jSBYK64dNodwYw/kgI/26ufEHo3noAbSMcAxGT2lM= Subject key identifier: AD:9B:54:2E:4B:63:E7:45:0C:06:7A:C0:FB:A6:0B:C2:A0:65:10:12 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849218437741727B735A51DEC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288c4520-4d43-370b-a67f-041cfda55568.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888:8050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:37:74:17:27:b7:35:a5:1d:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=d3f35af6-8377-4537-8a74-fe257ecc63e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:ea:fd:72:94:39:f9:bf:a8:a8:db:8a:75: 11:32:52:2f:29:42:6e:05:a9:68:5d:0a:9c:df:64: 2e:3b:65:71:a0:fe:da:8f:21:91:f0:9c:fd:0e:62: 26:59:9e:be:d1:4f:8b:8a:e9:04:4f:b7:72:76:0e: ff:99:7e:c9:be:0f:cc:0f:23:70:b1:7e:ca:9c:0d: a5:30:10:01:84:bf:9f:96:a2:74:8f:e5:21:e8:cb: 1e:cc:60:3e:8c:ae:61:28:a6:23:88:ad:db:47:22: ae:3c:d1:6a:36:12:ad:1c:5d:92:1d:02:b8:23:ad: c6:93:a0:fc:3d:11:f1:2a:28:67:16:c8:58:4a:e0: 4d:24:d0:25:c1:e4:dc:56:56:8e:39:1a:01:7f:5e: 19:f0:23:27:7d:4c:94:7d:5e:5a:27:d8:ac:75:52: 4e:32:1a:39:7e:07:48:41:65:71:aa:5e:de:47:94: 0c:6b:66:4e:f0:a2:95:24:ad:a2:43:a4:70:13:ad: 54:b9:5d:d3:dc:47:66:fc:76:50:ff:a3:09:6e:b6: ef:0c:ec:ef:22:b9:29:5f:3b:02:50:b3:93:b3:ec: 12:c1:43:60:ef:00:2e:dc:ee:de:24:a7:a9:48:fc: e1:a8:35:19:c0:a0:d6:51:7f:4a:37:8c:29:35:f4: a3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9B:54:2E:4B:63:E7:45:0C:06:7A:C0:FB:A6:0B:C2:A0:65:10:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/288c4520-4d43-370b-a67f-041cfda55568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:79:15:aa:14:aa:04:f3:dd:d5:f3:04:b7:36:1c:e5:c7:81: 26:a1:42:e6:07:f4:eb:c8:2d:13:c2:b4:37:e3:7b:05:a5:76: 84:3d:1b:37:77:2c:cc:65:6e:15:c3:ac:9e:68:d9:81:1c:f0: c0:eb:41:25:32:8a:30:49:40:50:1c:33:cc:0f:fe:8c:be:a5: e2:57:1c:b1:03:35:d8:19:96:55:8c:b0:c8:49:d0:09:cb:d5: 57:9c:32:72:1c:f6:d1:ad:e1:ac:ee:b1:d9:82:d8:dc:22:fd: 61:45:36:29:60:b8:d5:fc:4a:33:2d:b3:79:dc:eb:d2:2d:2f: a1:84:ea:11:53:23:76:11:01:3b:3c:fa:e2:e3:87:35:50:8b: 55:2f:a4:a9:68:5c:8a:f2:e6:c4:e2:95:20:99:91:65:90:77: 88:7b:2d:18:8b:8f:b0:51:8b:ad:f9:af:50:a1:83:f5:3d:45: c2:90:24:6a:2e:53:1b:19:bc:21:f1:46:19:c4:a7:85:29:59: 6b:ba:b0:c3:fc:94:40:6d:9e:7b:5f:81:0e:78:6c:37:55:a1: 77:3c:7b:5b:53:37:8d:cf:ed:04:15:e0:58:f7:34:50:77:28: 76:e3:8e:91:5f:4a:10:0d:a7:c0:cc:0a:73:e9:9b:40:2b:ae: 11:27:57:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDd0Fye3NaUd7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZDNmMzVhZjYtODM3Ny00NTM3LThhNzQtZmUyNTdlY2M2M2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqjq/XKUOfm/qKjbinURMlIvKUJuBaloXQqc 32QuO2VxoP7ajyGR8Jz9DmImWZ6+0U+LiukET7dydg7/mX7Jvg/MDyNwsX7KnA2l MBABhL+flqJ0j+Uh6MsezGA+jK5hKKYjiK3bRyKuPNFqNhKtHF2SHQK4I63Gk6D8 PRHxKihnFshYSuBNJNAlweTcVlaOORoBf14Z8CMnfUyUfV5aJ9isdVJOMho5fgdI QWVxql7eR5QMa2ZO8KKVJK2iQ6RwE61UuV3T3Edm/HZQ/6MJbrbvDOzvIrkpXzsC ULOTs+wSwUNg7wAu3O7eJKepSPzhqDUZwKDWUX9KN4wpNfSj1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK2bVC5LY+dFDAZ6wPumC8KgZRASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjg4YzQ1MjAtNGQ0My0z NzBiLWE2N2YtMDQxY2ZkYTU1NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB55FaoUqgTz3dXzBLc2HOXHgSahQuYH9OvILRPCtDfjewWldoQ9 Gzd3LMxlbhXDrJ5o2YEc8MDrQSUyijBJQFAcM8wP/oy+peJXHLEDNdgZllWMsMhJ 0AnL1VecMnIc9tGt4azusdmC2Nwi/WFFNilguNX8SjMts3nc69ItL6GE6hFTI3YR ATs8+uLjhzVQi1UvpKloXIry5sTilSCZkWWQd4h7LRiLj7BRi635r1Chg/U9RcKQ JGouUxsZvCHxRhnEp4UpWWu6sMP8lEBtnntfgQ54bDdVoXc8e1tTN43P7QQV4Fj3 NFB3KHbjjpFfShANp8DMCnPpm0ArrhEnV64= -----END CERTIFICATE-----Generated at Sun Apr 6 06:18:41 2025 by rpki-client