$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2249eb4-5cee-3748-86e4-88a8cf1b66d0.roa File: b2249eb4-5cee-3748-86e4-88a8cf1b66d0.roa (raw, json) Hash identifier: Hbad0W615tmOpk9FAZeIDGUJtam4541+hkqbdL/XAmg= Subject key identifier: C6:9A:FD:22:92:56:19:E3:8E:75:1F:3B:47:B5:FD:F6:2E:FA:7F:EB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584921843A7C5FE914F727D02180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2249eb4-5cee-3748-86e4-88a8cf1b66d0.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:3a:7c:5f:e9:14:f7:27:d0:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=3ebef6f9-df2f-4455-a935-f0728e4b7b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:a3:0b:5a:62:1c:d3:3b:ae:a6:f7:7f:b9: 68:09:68:81:13:da:e9:69:59:2a:8f:9c:da:2b:45: 18:fd:d4:27:65:6a:c3:a9:02:c3:42:d8:3f:97:c7: 53:41:86:45:0f:f4:8e:60:5b:63:d5:dd:39:ef:79: 31:b2:cc:a0:63:f5:21:69:35:33:c9:76:4b:6b:99: 01:db:73:d2:1a:9d:d8:36:35:85:00:89:83:31:88: a2:21:8b:8d:5b:a8:f2:db:ad:8b:d7:ff:4b:37:15: 7b:14:f6:48:0e:d2:fd:f1:61:e0:7c:9d:85:b4:5d: 42:a9:74:62:73:54:a2:35:8e:da:cd:04:74:b8:8f: 0a:d3:39:d0:aa:b6:a9:00:0a:32:16:0b:e5:87:43: 1a:ac:c8:67:cd:ec:0d:5a:c2:35:2d:fe:d2:47:4a: fe:e0:44:d2:4e:8c:d7:0d:b2:6f:fe:67:6f:40:29: fc:76:4d:ee:5a:1f:ee:23:56:a2:1c:e1:52:69:d5: 96:c5:85:f8:4e:76:f2:d1:7f:7f:8c:68:15:f8:c7: 37:6e:6b:69:2e:b1:3f:14:31:f4:37:20:4e:3a:79: 69:9a:04:51:33:29:7a:a2:5a:4b:76:be:a0:f1:6e: 7a:c8:28:39:c4:1e:25:17:24:d1:e9:74:c8:54:02: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9A:FD:22:92:56:19:E3:8E:75:1F:3B:47:B5:FD:F6:2E:FA:7F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2249eb4-5cee-3748-86e4-88a8cf1b66d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:9e:0d:34:9c:10:71:d1:2e:3d:52:9e:5a:df:a5:f7:18:1c: 50:83:73:78:fb:20:f0:72:90:af:04:de:f2:25:48:69:e2:34: 6a:a7:0e:36:3c:a5:03:2b:0b:90:65:ba:22:7d:b3:ad:29:61: 5c:15:53:18:8b:7e:4b:79:9e:fb:92:9f:4b:85:b6:cd:eb:c0: b2:2f:cc:dc:56:3a:9f:a2:e6:69:59:f4:d9:9b:87:35:1f:9d: 91:8a:d5:28:4d:c2:05:f1:50:9c:72:9f:21:dd:35:27:d6:f8: 5d:94:cb:33:28:f1:bf:c5:4a:50:94:a3:5c:a0:36:fa:ab:2d: 34:fc:a4:eb:e1:87:8e:5e:28:a5:38:f9:c2:62:a5:99:49:c6: d8:8d:81:c0:a3:de:3a:87:0c:68:00:99:01:ba:7e:e4:30:e1: a0:d5:df:c4:ab:c4:40:52:0b:05:8e:d0:67:d6:08:37:7b:aa: 89:c7:4c:45:d5:7e:54:cb:95:7c:1b:68:65:14:fd:f8:dd:53: 4d:a6:87:16:63:49:af:17:c6:5d:fe:e3:64:30:40:72:89:b8: e6:52:9e:c4:b1:cf:84:3c:dd:7b:80:ec:db:be:34:b1:2a:0d: ea:cd:60:88:4f:e3:8b:04:93:9a:0a:80:c1:e8:75:2b:22:67: a6:73:28:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhhDp8X+kU9yfQIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk M2ViZWY2ZjktZGYyZi00NDU1LWE5MzUtZjA3MjhlNGI3YjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0ajC1piHNM7rqb3f7loCWiBE9rpaVkqj5za K0UY/dQnZWrDqQLDQtg/l8dTQYZFD/SOYFtj1d0573kxssygY/UhaTUzyXZLa5kB 23PSGp3YNjWFAImDMYiiIYuNW6jy262L1/9LNxV7FPZIDtL98WHgfJ2FtF1CqXRi c1SiNY7azQR0uI8K0znQqrapAAoyFgvlh0MarMhnzewNWsI1Lf7SR0r+4ETSTozX DbJv/mdvQCn8dk3uWh/uI1aiHOFSadWWxYX4Tnby0X9/jGgV+Mc3bmtpLrE/FDH0 NyBOOnlpmgRRMyl6olpLdr6g8W56yCg5xB4lFyTR6XTIVAJNmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMaa/SKSVhnjjnUfO0e1/fYu+n/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjIyNDllYjQtNWNlZS0z NzQ4LTg2ZTQtODhhOGNmMWI2NmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFIiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCxng00nBBx0S49Up5a36X3GBxQg3N4+yDwcpCvBN7yJUhp4jRqpw42 PKUDKwuQZboifbOtKWFcFVMYi35LeZ77kp9LhbbN68CyL8zcVjqfouZpWfTZm4c1 H52RitUoTcIF8VCccp8h3TUn1vhdlMszKPG/xUpQlKNcoDb6qy00/KTr4YeOXiil OPnCYqWZScbYjYHAo946hwxoAJkBun7kMOGg1d/Eq8RAUgsFjtBn1gg3e6qJx0xF 1X5Uy5V8G2hlFP343VNNpocWY0mvF8Zd/uNkMEByibjmUp7Esc+EPN17gOzbvjSx Kg3qzWCIT+OLBJOaCoDB6HUrImemcyjl -----END CERTIFICATE-----Generated at Sat Apr 5 23:23:38 2025 by rpki-client