$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa File: 86e71912-fe62-3d1f-8426-62001a9a1fa3.roa (raw, json) Hash identifier: qALuAtC8Fc5tboVmkObVbCJG2a6l3MSaETCAxfr27Bc= Subject key identifier: D9:B5:21:F9:4B:55:34:CC:87:1D:45:E1:21:D4:12:49:F2:72:15:34 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A00DAF4380520BE5B211F6240 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 22394 IP address blocks: 2001:4888:8067::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f4:38:05:20:be:5b:21:1f:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=736a041e-e1b0-489a-9942-217584c1dc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:b8:3f:22:17:b1:97:7d:cb:a9:f9:5d:19: 3d:b6:83:d6:52:60:6b:52:de:91:7d:1e:0a:68:e7: a1:18:8c:d1:b3:2d:3b:7a:c4:1b:b0:ff:f4:cc:16: 3d:60:f4:a5:84:76:01:03:ab:c7:ad:66:40:bd:30: 4e:a0:e3:02:e1:47:be:fa:57:91:1d:f4:83:97:8d: a8:6f:7a:2f:1e:e3:d9:31:6b:5d:bb:08:40:22:f7: e9:13:8d:30:05:9f:fb:f7:8a:c1:0a:cb:d5:b1:27: 54:f3:07:4f:5a:45:a4:40:16:35:f4:c5:80:06:1b: 52:02:76:d0:df:da:52:15:d5:ef:b3:5a:3e:2d:c6: 80:1f:10:8f:3d:74:66:f4:7e:e9:6d:c8:8d:b9:34: e8:a9:01:0f:6c:73:8c:80:24:7e:c5:7d:c9:fa:c9: 29:79:63:c2:75:6f:bd:ef:e9:ee:33:61:1d:75:eb: 46:06:18:bf:91:9b:e8:fe:40:a2:4b:d1:ef:90:48: d3:1a:70:86:5c:dc:66:e9:02:2f:88:e1:4d:4c:9f: dc:42:9e:f4:1a:1d:33:6d:59:08:42:fb:71:98:18: fc:4f:3e:d0:43:50:8c:19:f8:ea:cf:a4:34:d9:50: b4:05:45:e6:02:04:ed:e7:94:bf:9c:eb:79:06:ff: 77:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B5:21:F9:4B:55:34:CC:87:1D:45:E1:21:D4:12:49:F2:72:15:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8067::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c8:2a:0c:de:12:42:5d:3b:fc:85:c0:e8:52:11:7e:9b:a0: 96:6a:81:b3:6f:bc:5e:1d:b4:31:82:0d:76:fd:b0:e8:ee:08: 30:fc:4f:84:29:2c:89:98:60:14:78:ee:74:64:55:7d:46:56: 9c:5a:a9:53:af:b5:14:58:d2:fd:a3:f3:50:59:17:bb:4d:1c: 4a:f1:fe:ad:17:c2:f5:73:75:ba:07:f2:96:7c:7d:8e:50:32: a9:c5:03:50:97:21:44:f4:6e:7c:4f:c4:c3:55:e9:d6:f8:51: ee:85:b3:1e:3c:6b:85:84:6b:2d:35:42:0a:27:40:81:0c:8d: 15:14:26:cb:c5:85:9b:07:6f:1d:24:92:f8:bd:24:73:00:b7: 8f:e3:1a:06:3e:56:a8:aa:dd:ce:8b:0d:9e:2d:0f:42:82:78: 7d:8b:78:7e:e0:11:e4:f8:fc:33:e1:99:e1:5d:23:4f:55:61: ba:eb:ac:a7:8e:d0:3d:c1:24:c9:57:76:c5:5b:ad:7c:b6:ed: 4c:3c:be:b8:6f:13:41:d3:05:0d:d3:16:09:62:b7:c2:59:63: a0:ca:5e:f1:2c:cd:69:89:60:9c:d7:0e:30:c8:cc:5c:9f:f9: f6:22:0e:26:10:f3:8e:b1:ec:d7:f8:9b:ee:d6:f8:c1:f8:4d: fc:28:6e:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoA2vQ4BSC+WyEfYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NzM2YTA0MWUtZTFiMC00ODlhLTk5NDItMjE3NTg0YzFkYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqm4PyIXsZd9y6n5XRk9toPWUmBrUt6RfR4K aOehGIzRsy07esQbsP/0zBY9YPSlhHYBA6vHrWZAvTBOoOMC4Ue++leRHfSDl42o b3ovHuPZMWtduwhAIvfpE40wBZ/794rBCsvVsSdU8wdPWkWkQBY19MWABhtSAnbQ 39pSFdXvs1o+LcaAHxCPPXRm9H7pbciNuTToqQEPbHOMgCR+xX3J+skpeWPCdW+9 7+nuM2EddetGBhi/kZvo/kCiS9HvkEjTGnCGXNxm6QIviOFNTJ/cQp70Gh0zbVkI QvtxmBj8Tz7QQ1CMGfjqz6Q02VC0BUXmAgTt55S/nOt5Bv93BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNm1IflLVTTMhx1F4SHUEknychU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODZlNzE5MTItZmU2Mi0z ZDFmLTg0MjYtNjIwMDFhOWExZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzIKgzeEkJdO/yFwOhSEX6boJZqgbNvvF4dtDGCDXb9sOjuCDD8 T4QpLImYYBR47nRkVX1GVpxaqVOvtRRY0v2j81BZF7tNHErx/q0XwvVzdboH8pZ8 fY5QMqnFA1CXIUT0bnxPxMNV6db4Ue6Fsx48a4WEay01QgonQIEMjRUUJsvFhZsH bx0kkvi9JHMAt4/jGgY+Vqiq3c6LDZ4tD0KCeH2LeH7gEeT4/DPhmeFdI09VYbrr rKeO0D3BJMlXdsVbrXy27Uw8vrhvE0HTBQ3TFglit8JZY6DKXvEszWmJYJzXDjDI zFyf+fYiDiYQ846x7Nf4m+7W+MH4Tfwobkw= -----END CERTIFICATE-----Generated at Sun Jun 1 08:04:15 2025 by rpki-client