$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b72c15e9-8d67-38d7-831c-d30e452b815a.roa File: b72c15e9-8d67-38d7-831c-d30e452b815a.roa (raw, json) Hash identifier: cPuJatZhqJQHRIxm2l3ULux8evdROJ5ZgK4yWSl1xbg= Subject key identifier: 65:08:59:21:E0:0A:CB:D2:F1:E2:17:3A:0E:1F:FD:B2:CD:D7:92:53 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A00DAF48DAA1DA13EA964F900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b72c15e9-8d67-38d7-831c-d30e452b815a.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 22394 IP address blocks: 2001:4888:801f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f4:8d:aa:1d:a1:3e:a9:64:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=3f9e61fc-ed47-408a-8ffa-f4d9e4f8c691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:e9:c0:cb:f7:f5:60:47:42:55:24:d5:da: 64:f6:a2:a2:14:d5:69:ca:d2:4a:20:27:7d:bc:e7: 7e:c9:f2:74:7c:79:de:5a:21:14:e1:a0:75:d8:02: 34:ce:f5:c2:83:8b:f9:85:e4:37:66:53:1b:40:65: 99:2b:8c:d1:14:70:ad:13:39:4c:64:15:96:1c:b0: de:ba:af:77:aa:97:ce:7e:93:6d:1c:3c:2f:8e:87: b7:8d:1b:b9:d9:6c:cb:4c:ba:8f:48:08:b9:1f:7f: 9a:c1:52:1b:a9:e2:5b:8e:e2:76:ff:7e:53:3c:d5: dd:ce:a8:e8:cd:f8:1f:15:c5:37:92:37:39:4e:f8: 2e:1a:8e:c0:4c:05:4f:be:28:f1:8e:35:6c:c2:0d: d4:07:c3:77:ec:b0:e0:54:c5:2b:a5:22:a9:37:36: 6c:58:02:0f:42:23:75:8b:93:a8:53:09:8f:93:6f: 9c:cd:dd:35:20:6e:c1:90:91:68:42:91:85:46:72: c3:12:7b:da:a6:e9:95:22:7b:5b:8c:4a:e0:e0:2a: 88:9f:ef:c0:53:6f:7f:ac:a4:34:4d:91:89:8c:16: f6:77:34:f6:12:09:c5:cc:1c:a4:12:88:e8:fc:7c: c7:37:e9:72:05:e9:b2:76:37:f9:06:31:f2:bc:94: e8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:08:59:21:E0:0A:CB:D2:F1:E2:17:3A:0E:1F:FD:B2:CD:D7:92:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b72c15e9-8d67-38d7-831c-d30e452b815a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:801f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:14:e5:85:48:22:9b:94:6c:57:e6:86:e2:10:ee:8c:aa:ea: 8a:5a:ea:6b:12:b4:ee:67:2f:a7:50:f4:37:c4:75:59:b4:2d: af:fc:ee:8c:8e:f5:9d:5f:d8:12:ba:3f:12:75:75:54:e9:9b: e1:13:57:c3:ee:14:d3:cd:f1:3b:d7:60:e5:fd:a3:99:66:53: 0c:c6:83:28:fe:4e:aa:d0:eb:f3:ac:b2:58:ed:d6:ac:1f:54: 89:d5:ee:58:61:31:53:79:fc:95:44:89:d6:ae:c6:30:ec:bf: 5c:43:35:53:e2:7b:53:2b:9c:b1:36:ba:85:fe:e6:b3:fb:1d: 16:92:df:29:91:e7:63:a5:c1:52:6f:9e:db:64:9c:37:ed:d7: 52:96:98:ef:94:50:46:0a:a8:eb:9e:49:26:38:d4:c7:f6:62: f6:b1:00:e8:2e:8d:83:9c:b4:a9:4a:e8:41:64:4d:01:43:44: 7b:bc:c2:6f:83:1a:21:f0:30:5c:85:1e:31:31:96:72:3b:9b: 52:19:ed:db:63:8b:09:b8:81:cd:00:89:eb:01:ae:50:23:5d: 6c:1d:84:28:5b:dc:de:3b:34:b9:27:01:8b:6c:90:b0:61:96: ae:98:9d:26:ba:be:4d:65:1d:e7:eb:48:05:7f:05:6a:33:b1: e9:19:91:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoA2vSNqh2hPqlk+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk M2Y5ZTYxZmMtZWQ0Ny00MDhhLThmZmEtZjRkOWU0ZjhjNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyfpwMv39WBHQlUk1dpk9qKiFNVpytJKICd9 vOd+yfJ0fHneWiEU4aB12AI0zvXCg4v5heQ3ZlMbQGWZK4zRFHCtEzlMZBWWHLDe uq93qpfOfpNtHDwvjoe3jRu52WzLTLqPSAi5H3+awVIbqeJbjuJ2/35TPNXdzqjo zfgfFcU3kjc5TvguGo7ATAVPvijxjjVswg3UB8N37LDgVMUrpSKpNzZsWAIPQiN1 i5OoUwmPk2+czd01IG7BkJFoQpGFRnLDEnvapumVIntbjErg4CqIn+/AU29/rKQ0 TZGJjBb2dzT2EgnFzBykEojo/HzHN+lyBemydjf5BjHyvJTokwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGUIWSHgCsvS8eIXOg4f/bLN15JTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjcyYzE1ZTktOGQ2Ny0z OGQ3LTgzMWMtZDMwZTQ1MmI4MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwU5YVIIpuUbFfmhuIQ7oyq6opa6msStO5nL6dQ9DfEdVm0La/8 7oyO9Z1f2BK6PxJ1dVTpm+ETV8PuFNPN8TvXYOX9o5lmUwzGgyj+TqrQ6/Ossljt 1qwfVInV7lhhMVN5/JVEidauxjDsv1xDNVPie1MrnLE2uoX+5rP7HRaS3ymR52Ol wVJvnttknDft11KWmO+UUEYKqOueSSY41Mf2YvaxAOgujYOctKlK6EFkTQFDRHu8 wm+DGiHwMFyFHjExlnI7m1IZ7dtjiwm4gc0AiesBrlAjXWwdhChb3N47NLknAYts kLBhlq6YnSa6vk1lHefrSAV/BWozsekZkbY= -----END CERTIFICATE-----Generated at Thu Jul 3 06:49:53 2025 by rpki-client