$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c324e3a-0404-3c74-b6e4-73e5c82cfc7f.roa File: 4c324e3a-0404-3c74-b6e4-73e5c82cfc7f.roa (raw, json) Hash identifier: 42lJWNRd9haXWDar3RszuFF1ocXCw6H3nxLTIVfpTn4= Subject key identifier: A3:5D:EA:70:40:48:CA:87:A5:CD:0A:71:54:0A:B2:CF:FA:58:B9:2E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858492184365F14F6A797AE4D1600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c324e3a-0404-3c74-b6e4-73e5c82cfc7f.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888:8022::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:36:5f:14:f6:a7:97:ae:4d:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=1128e77d-99ba-4d1a-a159-d8aa7997ef97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4b:67:6a:d3:59:4e:21:93:44:4d:ec:54:ee: c4:11:9d:e4:70:09:9c:46:08:f7:7f:e5:a9:39:43: b8:80:f6:3e:f6:45:07:e4:bc:ad:40:92:b5:0b:06: 31:d3:74:8b:41:1b:e6:b7:43:73:c4:f1:1c:fe:b6: 7c:de:15:82:d1:7e:af:8f:ff:f8:af:69:ae:e6:8f: 8b:e0:19:d3:65:b8:ac:89:27:51:ef:57:18:d9:f1: e5:02:c2:96:65:f4:75:42:64:93:5a:c4:e8:03:af: 57:70:d2:04:22:85:7d:04:6c:aa:5e:59:74:ec:0d: 68:56:51:a6:d9:c4:95:d4:4c:d3:25:ba:67:5c:e6: 73:2d:0f:0a:9f:6f:d5:dd:16:be:fa:55:c6:27:6f: d3:05:f5:ab:fb:04:a3:fd:7b:88:40:77:79:13:1a: 93:46:9a:6e:63:87:04:27:d2:f8:f8:19:b3:3e:c1: b0:e2:8b:31:c3:81:94:9d:2a:1e:37:4e:24:31:a5: 5b:e0:1c:de:aa:ca:4c:35:a1:08:8c:41:a8:56:4b: 66:eb:5d:7d:35:44:fa:f0:d7:90:8f:bb:b6:88:1c: 0b:d8:47:02:10:da:80:bd:c3:5f:f6:20:5a:4e:f8: c1:91:39:20:a6:19:f4:cf:f3:76:bb:82:c0:fd:75: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5D:EA:70:40:48:CA:87:A5:CD:0A:71:54:0A:B2:CF:FA:58:B9:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c324e3a-0404-3c74-b6e4-73e5c82cfc7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8022::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:1a:ef:b5:8f:5b:84:dd:a2:34:29:04:11:a5:0f:70:01:2c: 8b:60:c5:bd:8f:84:52:df:29:45:48:ae:1c:c4:9f:5d:50:c0: 44:c6:49:74:86:9e:4e:75:51:ac:7c:66:71:6c:dc:10:46:27: 70:80:b3:43:07:2c:bc:e0:24:b6:65:31:5d:14:79:69:86:2f: d9:73:b4:73:9b:9b:0d:07:7e:14:99:38:f8:9a:5c:29:35:f6: 56:7d:43:b5:e1:b3:4c:45:0d:2a:e8:ff:e9:3d:5c:d3:43:27: 30:76:c9:bd:66:bd:69:93:2a:67:d0:d5:1e:6c:3e:54:c3:e7: 79:d2:24:aa:c3:ff:ee:3a:7a:76:5b:14:b2:dc:31:b0:79:66: e2:cd:b1:13:6a:4c:6b:7c:bb:05:9a:66:d0:e9:ce:25:6c:f9: d5:37:d5:31:df:86:f1:0d:2e:2f:4b:92:01:87:95:ea:6c:6f: cc:cc:06:28:75:6d:76:80:a8:5d:a5:9c:c3:63:17:4f:00:1a: 30:3b:d8:d8:2d:24:4d:d4:96:cd:05:92:60:6b:54:0a:2c:4f: 18:f9:6e:6d:61:96:60:f5:a5:a5:23:fe:ea:9d:02:eb:5f:fc: 49:60:9c:fe:9a:30:02:42:3f:36:d3:71:61:c1:a6:3e:54:2f: 07:ae:54:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDZfFPanl65NFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MTEyOGU3N2QtOTliYS00ZDFhLWExNTktZDhhYTc5OTdlZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUtnatNZTiGTRE3sVO7EEZ3kcAmcRgj3f+Wp OUO4gPY+9kUH5LytQJK1CwYx03SLQRvmt0NzxPEc/rZ83hWC0X6vj//4r2mu5o+L 4BnTZbisiSdR71cY2fHlAsKWZfR1QmSTWsToA69XcNIEIoV9BGyqXll07A1oVlGm 2cSV1EzTJbpnXOZzLQ8Kn2/V3Ra++lXGJ2/TBfWr+wSj/XuIQHd5ExqTRppuY4cE J9L4+BmzPsGw4osxw4GUnSoeN04kMaVb4BzeqspMNaEIjEGoVktm6119NUT68NeQ j7u2iBwL2EcCENqAvcNf9iBaTvjBkTkgphn0z/N2u4LA/XXpLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNd6nBASMqHpc0KcVQKss/6WLkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGMzMjRlM2EtMDQwNC0z Yzc0LWI2ZTQtNzNlNWM4MmNmYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI0a77WPW4TdojQpBBGlD3ABLItgxb2PhFLfKUVIrhzEn11QwETG SXSGnk51Uax8ZnFs3BBGJ3CAs0MHLLzgJLZlMV0UeWmGL9lztHObmw0HfhSZOPia XCk19lZ9Q7Xhs0xFDSro/+k9XNNDJzB2yb1mvWmTKmfQ1R5sPlTD53nSJKrD/+46 enZbFLLcMbB5ZuLNsRNqTGt8uwWaZtDpziVs+dU31THfhvENLi9LkgGHlepsb8zM Bih1bXaAqF2lnMNjF08AGjA72NgtJE3Uls0FkmBrVAosTxj5bm1hlmD1paUj/uqd Autf/ElgnP6aMAJCPzbTcWHBpj5ULweuVHI= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:57 2025 by rpki-client