$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/025337ba-3cc4-3849-acc3-e33fa60c1749.roa File: 025337ba-3cc4-3849-acc3-e33fa60c1749.roa (raw, json) Hash identifier: co+JaV7CT5je6AdpDodYd1g/uCEUa1ZC5iXK7cKmYxk= Subject key identifier: 46:10:E7:FA:FD:A9:D7:43:89:D3:0A:D9:91:8E:43:B2:95:C5:36:E9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400E936883EE8AE38DC85C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/025337ba-3cc4-3849-acc3-e33fa60c1749.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100c:b080::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:e9:36:88:3e:e8:ae:38:dc:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=9ab55e66-6cb8-43ee-b856-6d8943f2a561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:82:61:84:93:0b:20:4f:72:a0:4f:0d:d5: 4c:a3:23:d0:ee:4d:23:1b:a8:48:b6:85:34:35:ef: 17:6f:7e:15:a6:0d:a5:82:d7:1c:c4:c0:ee:16:8f: 43:88:1f:84:a0:55:04:7f:ae:95:89:9f:a0:aa:17: 11:6a:a8:93:b2:2e:32:e4:b8:56:5a:51:b4:2a:dc: 1a:38:87:34:97:ae:36:3a:93:3b:0c:8b:54:3d:bc: 96:94:db:ba:1c:f0:ab:36:d4:b4:fa:d3:be:59:f9: 82:86:f3:31:c8:ac:07:63:a8:4f:1f:56:fa:5e:a1: 47:3d:7f:d5:be:20:f8:cc:7d:7c:bb:c5:f1:96:9d: 01:47:c9:79:3b:fc:39:07:33:25:8e:a2:f8:bd:d8: e7:74:62:06:c9:4d:a6:cc:90:4c:9d:54:bf:08:17: aa:d4:71:bf:c9:73:12:48:a1:f1:9b:5a:bb:9d:36: 2c:5e:24:c5:cf:a7:ba:81:16:a5:1b:4b:ad:a0:a3: 74:38:88:07:be:09:0c:ba:43:84:e8:03:dc:5b:9d: ae:73:c9:19:5a:27:b5:b2:99:38:e8:a5:3c:a6:9c: 41:91:4d:35:c9:af:e1:2f:db:ca:8b:6c:dc:b6:6a: 50:38:a3:ae:40:fb:b0:fc:9f:a0:ff:97:8c:dc:f8: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:10:E7:FA:FD:A9:D7:43:89:D3:0A:D9:91:8E:43:B2:95:C5:36:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/025337ba-3cc4-3849-acc3-e33fa60c1749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100c:b080::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b8:d3:97:58:2a:92:47:82:9a:0f:a8:12:27:f0:06:49:78: 7c:6d:1c:bf:c3:ee:c1:88:d0:5b:7a:4a:d0:36:24:06:26:cd: 99:04:33:24:2b:ce:c2:d6:ae:72:78:78:c9:a4:79:e9:5e:18: 43:e4:55:c8:40:89:20:ed:83:d3:01:36:a8:de:d6:60:9d:b5: 7c:a3:75:6f:d3:98:89:69:c9:f5:ad:bb:fb:92:51:a6:39:44: f0:af:eb:ea:c4:41:0c:12:27:de:e5:05:5a:c1:44:33:b0:59: d1:26:aa:7a:22:5d:e1:24:3e:eb:0b:49:d4:40:3d:71:f7:34: 86:ed:2a:bd:5f:83:21:24:12:35:44:c9:18:ea:8c:30:42:87: 87:22:50:a4:95:c5:4c:12:b5:86:0c:69:59:c2:6f:0f:c6:9b: 5b:d8:56:df:4f:2c:1b:d6:b5:fa:97:a5:f0:d6:7c:72:ff:ac: e6:60:c7:56:11:3d:4d:2d:ff:77:11:f7:0e:62:3c:a7:ae:f0: cf:4f:9d:80:ac:13:db:09:b7:4c:a7:80:20:0c:e1:6a:11:5f: 2c:73:00:34:ec:7b:49:47:24:8c:a4:55:86:72:1e:33:7f:30: ed:b1:ae:df:0b:45:17:ad:5b:85:c7:5f:13:87:d5:92:7d:b6: 70:95:12:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOk2iD7orjjchcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk OWFiNTVlNjYtNmNiOC00M2VlLWI4NTYtNmQ4OTQzZjJhNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsiCYYSTCyBPcqBPDdVMoyPQ7k0jG6hItoU0 Ne8Xb34Vpg2lgtccxMDuFo9DiB+EoFUEf66ViZ+gqhcRaqiTsi4y5LhWWlG0Ktwa OIc0l642OpM7DItUPbyWlNu6HPCrNtS0+tO+WfmChvMxyKwHY6hPH1b6XqFHPX/V viD4zH18u8Xxlp0BR8l5O/w5BzMljqL4vdjndGIGyU2mzJBMnVS/CBeq1HG/yXMS SKHxm1q7nTYsXiTFz6e6gRalG0utoKN0OIgHvgkMukOE6APcW52uc8kZWie1spk4 6KU8ppxBkU01ya/hL9vKi2zctmpQOKOuQPuw/J+g/5eM3PjDuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEYQ5/r9qddDidMK2ZGOQ7KVxTbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDI1MzM3YmEtM2NjNC0z ODQ5LWFjYzMtZTMzZmE2MGMxNzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDLCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKS405dYKpJHgpoPqBIn8AZJeHxtHL/D7sGI0Ft6StA2JAYmzZkE MyQrzsLWrnJ4eMmkeeleGEPkVchAiSDtg9MBNqje1mCdtXyjdW/TmIlpyfWtu/uS UaY5RPCv6+rEQQwSJ97lBVrBRDOwWdEmqnoiXeEkPusLSdRAPXH3NIbtKr1fgyEk EjVEyRjqjDBCh4ciUKSVxUwStYYMaVnCbw/Gm1vYVt9PLBvWtfqXpfDWfHL/rOZg x1YRPU0t/3cR9w5iPKeu8M9PnYCsE9sJt0yngCAM4WoRXyxzADTse0lHJIykVYZy HjN/MO2xrt8LRRetW4XHXxOH1ZJ9tnCVEkE= -----END CERTIFICATE-----Generated at Sun Apr 6 08:44:05 2025 by rpki-client