$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa File: 86e71912-fe62-3d1f-8426-62001a9a1fa3.roa (raw, json) Hash identifier: uK8klmOJb/O2opwRJiuBwBu3UqBt8TKC5XXi3EbuuB0= Subject key identifier: 4D:6D:BC:5A:DF:F6:25:70:CC:07:86:7C:C6:6E:3E:99:BA:60:A7:48 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849218437E81A0B1E724212C180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888:8067::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:37:e8:1a:0b:1e:72:42:12:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=6e95f513-ba81-4631-8151-feb3e762fe56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:54:20:7a:12:f6:e5:8f:1a:44:d0:95:85: 1a:91:fb:e8:7e:2a:a7:fa:a8:c6:50:a9:3d:7d:97: b6:d8:dd:e0:02:e9:7e:b6:7f:2a:30:f7:4a:53:74: 5c:38:67:90:78:d2:58:0f:4b:3f:7e:0b:ac:c1:d6: a2:cd:4d:f2:cc:0a:3e:9f:76:51:2f:3d:52:cb:57: e7:bb:00:3c:35:ee:14:61:62:5b:97:85:81:7a:88: 22:f3:ec:60:ef:88:db:e3:11:45:e8:18:66:f4:11: 18:93:df:d1:1e:4b:4c:2d:05:99:db:16:20:18:d9: 56:61:e6:a1:4b:4b:1f:54:ec:01:e1:06:83:8e:13: 79:7a:67:bd:fe:d9:9c:5d:47:94:a0:96:5a:69:95: a1:af:2e:9a:2c:fe:55:8b:f1:2e:25:f4:9d:a2:0b: da:78:eb:13:e1:ec:c3:2b:dc:17:a7:12:d8:73:cc: 0b:36:02:f4:0e:61:d8:aa:1a:3c:47:b0:99:81:8a: cc:9b:c8:10:b0:b3:16:67:d2:a5:00:89:0d:4f:a4: 4f:06:90:f2:87:00:0e:03:b0:a9:e9:4e:52:68:94: cf:6d:cb:07:04:9d:af:82:58:60:41:df:ee:85:d9: f9:2e:5a:c9:f5:60:a0:45:5d:5a:cb:d3:5c:2f:f7: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6D:BC:5A:DF:F6:25:70:CC:07:86:7C:C6:6E:3E:99:BA:60:A7:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8067::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8f:c5:47:98:53:87:38:23:cd:01:af:77:41:05:07:92:49: 6e:85:7d:5d:3a:e6:5f:70:d7:90:fb:5b:3d:57:02:d4:c6:3e: ba:8e:26:ba:74:7d:e7:3a:30:23:10:d2:9f:df:da:b8:89:df: 5e:76:42:cf:4f:d4:d7:06:1e:a3:0b:5f:72:91:21:08:62:35: f2:47:32:88:30:b4:ee:64:36:5c:7e:be:5b:39:47:83:c1:b5: ae:b0:47:84:74:0e:23:14:a6:18:69:80:84:5c:5c:8c:30:b6: f1:c6:a7:66:0c:28:57:d4:a1:1b:32:2d:70:88:9c:be:63:b1: d2:0b:18:f3:81:e4:01:ba:18:29:7d:d3:23:96:4e:50:4d:65: 3d:21:4a:b3:00:44:63:ab:9b:09:5d:21:b9:40:cb:39:7a:06: 9f:c4:ad:83:d2:1e:30:6c:15:06:29:d0:a3:3c:19:43:2a:65: 70:af:08:f8:06:03:0d:06:a3:ee:10:58:ed:9d:2e:f2:84:17: 01:6c:6b:d0:b3:e7:e6:6b:d3:ab:75:d3:4e:f1:f4:1c:84:f2: 8f:f3:74:7e:d5:21:f2:3d:79:68:74:c0:22:f1:16:ac:c1:a7: 27:3b:a7:6a:28:68:d4:d1:29:6c:4e:f2:9a:e9:a8:0c:3d:4f: 91:cb:f3:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDfoGgseckISwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NmU5NWY1MTMtYmE4MS00NjMxLTgxNTEtZmViM2U3NjJmZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvORUIHoS9uWPGkTQlYUakfvofiqn+qjGUKk9 fZe22N3gAul+tn8qMPdKU3RcOGeQeNJYD0s/fguswdaizU3yzAo+n3ZRLz1Sy1fn uwA8Ne4UYWJbl4WBeogi8+xg74jb4xFF6Bhm9BEYk9/RHktMLQWZ2xYgGNlWYeah S0sfVOwB4QaDjhN5eme9/tmcXUeUoJZaaZWhry6aLP5Vi/EuJfSdogvaeOsT4ezD K9wXpxLYc8wLNgL0DmHYqho8R7CZgYrMm8gQsLMWZ9KlAIkNT6RPBpDyhwAOA7Cp 6U5SaJTPbcsHBJ2vglhgQd/uhdn5LlrJ9WCgRV1ay9NcL/fgrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE1tvFrf9iVwzAeGfMZuPpm6YKdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODZlNzE5MTItZmU2Mi0z ZDFmLTg0MjYtNjIwMDFhOWExZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHOPxUeYU4c4I80Br3dBBQeSSW6FfV065l9w15D7Wz1XAtTGPrqO Jrp0fec6MCMQ0p/f2riJ3152Qs9P1NcGHqMLX3KRIQhiNfJHMogwtO5kNlx+vls5 R4PBta6wR4R0DiMUphhpgIRcXIwwtvHGp2YMKFfUoRsyLXCInL5jsdILGPOB5AG6 GCl90yOWTlBNZT0hSrMARGOrmwldIblAyzl6Bp/ErYPSHjBsFQYp0KM8GUMqZXCv CPgGAw0Go+4QWO2dLvKEFwFsa9Cz5+Zr06t1007x9ByE8o/zdH7VIfI9eWh0wCLx FqzBpyc7p2ooaNTRKWxO8prpqAw9T5HL8yw= -----END CERTIFICATE-----Generated at Thu Apr 10 18:39:16 2025 by rpki-client