$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0dcb295-65c7-3879-82b7-a007cc35322a.roa File: c0dcb295-65c7-3879-82b7-a007cc35322a.roa (raw, json) Hash identifier: wvFBg440MLUo5lkOgQqKEh7XCiI12FxT/uEAV9yxQc0= Subject key identifier: 98:9A:96:E8:77:54:7A:FB:91:2E:E6:F4:44:DB:66:8C:2E:D3:44:D0 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D2122FE9F75FF667696880 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0dcb295-65c7-3879-82b7-a007cc35322a.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 2600:6c08::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d2:12:2f:e9:f7:5f:f6:67:69:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=ad322c26-ef18-48fe-8779-5ec89b8723f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2d:d7:62:96:5a:cf:f3:17:46:01:39:d4:c2: fb:05:cc:59:cc:21:d8:be:3c:c2:c4:6d:f8:6b:b3: 9e:16:18:c9:09:1c:2c:8d:1a:b2:b0:d8:c5:91:f7: 15:4f:2d:20:2a:57:3c:24:0d:40:b9:25:29:fa:da: 29:5d:47:16:70:54:1f:83:27:bf:b2:f3:94:36:50: 9f:2f:db:5e:c6:6f:51:c7:37:4a:19:1e:7a:08:34: ae:a1:bd:6e:51:da:1b:fd:b4:a0:a8:dd:74:30:c0: 84:47:41:65:ca:8c:4b:6a:5e:51:94:03:b5:65:18: ed:03:07:3b:a3:75:db:5f:19:80:18:65:83:8f:e4: 76:ed:fd:64:74:95:6b:63:96:49:8c:3e:f1:9d:ce: 8b:4f:d9:eb:1f:61:fa:5e:96:f5:9f:c9:8a:b6:2f: c0:ec:a0:72:ec:7c:33:ab:78:7c:ed:70:82:e9:58: 92:4e:d7:02:96:82:8c:1f:f6:0c:32:dc:eb:8f:b3: 5b:7f:0b:d0:0f:d2:d4:72:b5:bd:66:37:7e:58:47: 54:c7:bd:e6:ae:9d:28:28:ea:cc:2b:68:17:e3:95: 33:4e:1f:43:0d:06:be:eb:f9:66:6b:15:49:fc:69: 69:a2:8e:26:18:77:c7:3f:95:cd:95:4a:5c:fe:eb: ad:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9A:96:E8:77:54:7A:FB:91:2E:E6:F4:44:DB:66:8C:2E:D3:44:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c0dcb295-65c7-3879-82b7-a007cc35322a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv6: 2600:6c08::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:f3:91:5c:bc:4d:cd:97:73:f4:fb:fd:98:1f:7e:4b:ac:d4: e9:65:9a:09:d4:82:00:f0:c1:89:a9:f0:2a:3c:1e:db:74:25: 1d:0b:19:18:9c:16:b6:de:3a:4d:32:cb:f6:90:4b:af:b0:21: 65:3e:65:fe:98:bb:ee:53:5a:cd:f4:09:91:7a:44:38:32:0d: 9b:53:75:d2:1d:ca:0e:91:ec:4e:11:53:9c:97:bf:6c:be:df: 3b:af:5c:13:89:47:12:88:3d:8b:62:1b:53:df:2c:e7:f2:d0: 7d:02:c9:40:3c:3c:aa:db:bf:68:10:6f:e3:ec:0f:64:c2:25: 09:4d:68:13:62:b5:7d:0c:31:2e:4b:22:d4:4a:88:fd:e5:62: 46:2e:fb:f8:9c:5e:e4:b7:77:a4:3b:13:a7:5d:41:56:1d:79: 10:be:98:30:c5:21:3a:77:b5:66:2f:11:aa:89:75:a5:5b:38: 63:11:2a:0d:14:22:f5:68:77:68:b0:c4:1d:f8:ee:1a:f0:cc: b7:bd:a5:c9:b3:d1:e7:fd:40:df:37:45:30:e4:c6:46:07:b3: b3:51:da:41:68:85:54:a0:7c:60:00:34:cf:5e:74:02:a9:14: 4f:bc:f6:de:1e:75:d8:5e:67:fe:9b:59:de:81:5e:b8:20:c9: a1:cc:20:a0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEji0hIv6fdf9mdpaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YWQzMjJjMjYtZWYxOC00OGZlLTg3NzktNWVjODliODcyM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C3XYpZaz/MXRgE51ML7BcxZzCHYvjzCxG34 a7OeFhjJCRwsjRqysNjFkfcVTy0gKlc8JA1AuSUp+topXUcWcFQfgye/svOUNlCf L9texm9RxzdKGR56CDSuob1uUdob/bSgqN10MMCER0FlyoxLal5RlAO1ZRjtAwc7 o3XbXxmAGGWDj+R27f1kdJVrY5ZJjD7xnc6LT9nrH2H6Xpb1n8mKti/A7KBy7Hwz q3h87XCC6ViSTtcCloKMH/YMMtzrj7NbfwvQD9LUcrW9Zjd+WEdUx73mrp0oKOrM K2gX45UzTh9DDQa+6/lmaxVJ/Glpoo4mGHfHP5XNlUpc/uutAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJialuh3VHr7kS7m9ETbZowu00TQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYzBkY2IyOTUtNjVjNy0z ODc5LTgyYjctYTAwN2NjMzUzMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC485FcvE3Nl3P0+/2YH35LrNTpZZoJ1IIA8MGJqfAqPB7bdCUdCxkY nBa23jpNMsv2kEuvsCFlPmX+mLvuU1rN9AmRekQ4Mg2bU3XSHcoOkexOEVOcl79s vt87r1wTiUcSiD2LYhtT3yzn8tB9AslAPDyq279oEG/j7A9kwiUJTWgTYrV9DDEu SyLUSoj95WJGLvv4nF7kt3ekOxOnXUFWHXkQvpgwxSE6d7VmLxGqiXWlWzhjESoN FCL1aHdosMQd+O4a8My3vaXJs9Hn/UDfN0Uw5MZGB7OzUdpBaIVUoHxgADTPXnQC qRRPvPbeHnXYXmf+m1negV64IMmhzCCg -----END CERTIFICATE-----Generated at Sun Apr 6 23:05:46 2025 by rpki-client