$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5f94da4-7ef2-37ba-b862-4a925a654f5a.roa File: b5f94da4-7ef2-37ba-b862-4a925a654f5a.roa (raw, json) Hash identifier: Xz4WO9K/yzGfzI/SRdrgOpY9a9+ZImhG1P45QO0f1GI= Subject key identifier: 43:1B:24:03:9A:B5:BD:D3:D7:0E:90:00:5B:F3:CE:33:B3:20:90:F1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584921843794961BA77569B9F680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5f94da4-7ef2-37ba-b862-4a925a654f5a.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2001:4888:8052::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:37:94:96:1b:a7:75:69:b9:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=ac78f501-00bd-4849-b44f-27a0c6b2c5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:92:01:5c:a5:ce:59:67:fe:1f:26:6c:01: 9d:5e:89:99:e3:22:4f:53:bb:94:d9:ac:01:7e:c9: ea:21:e4:ed:b6:89:c9:c3:bf:5a:d9:74:d8:8a:ff: 34:9d:8c:c5:49:38:8a:b9:06:eb:f8:4b:c3:2d:e7: b0:ca:5b:73:51:a3:4c:5e:c0:86:ed:3b:64:39:7d: 3c:a9:40:70:3a:5a:ad:25:61:28:f7:33:de:f0:b2: 5b:a4:d6:52:54:75:bd:cd:30:b3:8a:37:f1:3d:b1: c9:14:a7:62:bc:d7:de:66:8e:8b:7d:7b:28:f9:8e: 06:43:2f:9b:e1:a1:67:ef:37:16:38:98:99:20:36: df:a5:75:b0:93:7a:6d:85:57:c8:8c:16:cf:dc:91: fb:7e:16:74:04:5c:71:78:a9:e0:5a:0a:d8:44:ce: c0:1a:22:15:e0:80:03:14:4a:15:97:e0:a2:f6:64: 6e:6c:79:36:5f:d9:f8:06:87:4a:0e:16:db:08:c4: 7a:0f:1b:a9:5a:68:fd:e2:89:80:34:bb:e2:ce:59: 37:59:59:a0:57:17:94:28:fb:cd:5a:5e:04:e2:7d: d0:6e:46:f8:ee:c0:a2:a5:0c:5c:cf:f3:78:f1:99: fb:1c:37:7d:3a:2f:75:7b:c5:df:94:f6:88:ec:29: a7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:24:03:9A:B5:BD:D3:D7:0E:90:00:5B:F3:CE:33:B3:20:90:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5f94da4-7ef2-37ba-b862-4a925a654f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8052::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:02:51:4d:e5:a0:34:30:c8:b8:8c:5c:1d:8c:34:8d:69:c4: 70:a2:f5:36:8c:c5:96:e2:6a:27:05:f2:30:89:f1:d0:7d:0d: 98:a4:f2:be:dd:a2:53:e3:a6:8d:07:b9:b6:2b:04:3a:da:8e: b4:a9:04:2c:c8:38:f4:b3:73:3a:30:5d:c2:18:ec:6f:e0:1a: c0:c0:99:e7:d9:0f:03:75:b8:e3:2e:ad:20:ea:5b:7f:e9:b1: 56:6f:2b:e9:f5:4c:9f:29:37:79:27:78:f0:f6:e1:8a:6b:50: 49:46:87:b9:e9:d3:f6:e2:0e:e7:b7:8f:37:30:a0:8c:0d:a6: 83:85:3e:dd:b9:52:83:27:42:0b:c9:22:f3:4e:7f:42:72:ad: 2d:63:db:93:82:98:3c:7d:96:75:c2:7e:cd:fd:3d:12:b8:61: 37:c7:cf:00:5b:c8:b7:44:c9:ee:47:3f:1d:db:66:41:c8:03: 3c:f7:aa:7a:18:90:7f:71:13:ed:6b:07:54:d9:9e:98:49:96: 25:2f:f0:71:80:73:00:53:24:a3:d0:6c:46:37:f7:37:f1:39: f0:9d:6a:89:4c:4f:54:af:d4:63:0c:b4:8b:46:34:24:d4:e4: 14:46:18:a4:1f:b4:bc:1e:7b:a7:8e:50:cc:a4:50:43:77:d1: 08:54:bf:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDeUlhundWm59oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YWM3OGY1MDEtMDBiZC00ODQ5LWI0NGYtMjdhMGM2YjJjNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrKSAVylzlln/h8mbAGdXomZ4yJPU7uU2awB fsnqIeTttonJw79a2XTYiv80nYzFSTiKuQbr+EvDLeewyltzUaNMXsCG7TtkOX08 qUBwOlqtJWEo9zPe8LJbpNZSVHW9zTCzijfxPbHJFKdivNfeZo6LfXso+Y4GQy+b 4aFn7zcWOJiZIDbfpXWwk3pthVfIjBbP3JH7fhZ0BFxxeKngWgrYRM7AGiIV4IAD FEoVl+Ci9mRubHk2X9n4BodKDhbbCMR6DxupWmj94omANLvizlk3WVmgVxeUKPvN Wl4E4n3Qbkb47sCipQxcz/N48Zn7HDd9Oi91e8XflPaI7Cmn4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEMbJAOatb3T1w6QAFvzzjOzIJDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjVmOTRkYTQtN2VmMi0z N2JhLWI4NjItNGE5MjVhNjU0ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALMCUU3loDQwyLiMXB2MNI1pxHCi9TaMxZbiaicF8jCJ8dB9DZik 8r7dolPjpo0HubYrBDrajrSpBCzIOPSzczowXcIY7G/gGsDAmefZDwN1uOMurSDq W3/psVZvK+n1TJ8pN3knePD24YprUElGh7np0/biDue3jzcwoIwNpoOFPt25UoMn QgvJIvNOf0JyrS1j25OCmDx9lnXCfs39PRK4YTfHzwBbyLdEye5HPx3bZkHIAzz3 qnoYkH9xE+1rB1TZnphJliUv8HGAcwBTJKPQbEY39zfxOfCdaolMT1Sv1GMMtItG NCTU5BRGGKQftLwee6eOUMykUEN30QhUv1U= -----END CERTIFICATE-----Generated at Sun Apr 6 03:55:09 2025 by rpki-client