$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa File: 02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa (raw, json) Hash identifier: s35+WQ3oaA+yEgc6d0QG2rS4eYNyq5KltU8yxuA6ocA= Subject key identifier: 5E:CD:15:77:D2:54:3B:63:40:D1:21:0B:CA:D6:8D:D1:FB:14:BE:E0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400EB47178680248727F980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100d:9100::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:eb:47:17:86:80:24:87:27:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=d63e0440-a9a9-40ed-a286-2e1063aa80a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:26:34:83:08:6d:da:28:b2:85:ee:80:42:c1: 06:87:8b:53:2d:d4:fa:d7:f5:45:05:dd:75:1d:4b: e2:df:9a:7d:11:20:c2:47:80:cc:68:07:98:04:7e: 39:98:55:c5:36:2c:f4:7d:a9:25:63:57:c2:d2:62: a7:34:e0:64:8c:46:c0:ea:bb:cb:6e:fe:13:11:34: 1d:5e:89:61:fa:09:04:31:57:51:13:43:6d:de:bb: d0:19:1c:1e:4c:42:4f:d9:d3:22:6e:23:08:e4:25: 26:11:09:0e:44:2c:31:db:ce:7e:ff:98:06:21:9e: 27:da:46:66:9a:d8:88:3b:83:02:ff:4f:2c:05:20: 0d:47:8e:94:34:e6:2c:ef:ca:ab:5c:1d:09:2f:cb: 66:eb:44:f0:33:f4:eb:60:cd:59:6f:16:c0:b0:80: 4a:82:5d:f3:81:f6:23:be:b7:3a:13:b3:2f:bf:3e: e3:ae:21:a7:bd:3e:0e:ea:c7:7d:b6:45:80:c9:36: e3:58:71:f9:5c:f8:ee:ba:ea:0e:da:cd:ec:84:99: ca:d0:32:39:09:3f:08:3c:dd:d0:90:cf:be:83:fa: 13:89:96:46:ba:53:37:ad:f3:c0:fd:b2:aa:78:40: 44:41:2b:12:8c:4a:f5:11:f3:ac:90:f5:d5:c1:d9: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CD:15:77:D2:54:3B:63:40:D1:21:0B:CA:D6:8D:D1:FB:14:BE:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02e8ca16-a0ef-3b93-853e-62adf72da7a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:9100::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:40:fb:3c:14:55:20:d7:fc:43:a7:05:6f:e7:32:81:79:40: 28:43:61:1f:e4:4e:81:a6:7b:5a:4b:d5:87:5c:86:f7:d6:d4: 4a:54:bb:c1:32:ec:61:82:8d:a7:20:3d:96:e3:3d:bd:8d:ac: 30:67:7f:f9:13:0d:b7:ca:c6:1f:b5:86:c2:de:f6:6a:53:2e: 71:fd:57:db:03:f9:3e:b5:54:ab:f2:db:d7:18:95:d3:e1:d3: cf:10:bf:45:34:96:ab:5b:a5:16:3a:24:55:c2:cc:7f:32:81: f2:09:2a:14:20:37:95:f7:f2:1b:aa:0c:48:a3:69:49:de:5b: 40:4b:c7:b4:94:c7:16:35:3a:4e:8d:8c:06:01:61:47:e4:6f: 50:bf:7d:a6:25:18:85:5c:0e:14:08:7b:aa:21:2c:0e:c6:d6: 86:fc:de:07:f9:6a:c8:66:e7:ee:6a:1f:95:2f:91:8d:8f:5f: 19:a4:12:4a:06:5a:89:0a:e3:66:f0:e1:b2:56:11:08:f0:63: ba:c9:16:62:5b:4e:48:14:14:78:36:94:e7:68:1f:ac:ee:a9: 67:8c:51:90:11:39:c4:1c:6f:1f:82:15:3d:2b:ee:10:46:a7: 92:4d:9b:15:7e:28:70:c1:cb:ce:12:68:07:3c:c2:2f:e7:a6: 79:54:07:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOtHF4aAJIcn+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZDYzZTA0NDAtYTlhOS00MGVkLWEyODYtMmUxMDYzYWE4MGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyY0gwht2iiyhe6AQsEGh4tTLdT61/VFBd11 HUvi35p9ESDCR4DMaAeYBH45mFXFNiz0faklY1fC0mKnNOBkjEbA6rvLbv4TETQd Xolh+gkEMVdRE0Nt3rvQGRweTEJP2dMibiMI5CUmEQkORCwx285+/5gGIZ4n2kZm mtiIO4MC/08sBSANR46UNOYs78qrXB0JL8tm60TwM/TrYM1ZbxbAsIBKgl3zgfYj vrc6E7Mvvz7jriGnvT4O6sd9tkWAyTbjWHH5XPjuuuoO2s3shJnK0DI5CT8IPN3Q kM++g/oTiZZGulM3rfPA/bKqeEBEQSsSjEr1EfOskPXVwdk5LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF7NFXfSVDtjQNEhC8rWjdH7FL7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDJlOGNhMTYtYTBlZi0z YjkzLTg1M2UtNjJhZGY3MmRhN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDZEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALhA+zwUVSDX/EOnBW/nMoF5QChDYR/kToGme1pL1YdchvfW1EpU u8Ey7GGCjacgPZbjPb2NrDBnf/kTDbfKxh+1hsLe9mpTLnH9V9sD+T61VKvy29cY ldPh088Qv0U0lqtbpRY6JFXCzH8ygfIJKhQgN5X38huqDEijaUneW0BLx7SUxxY1 Ok6NjAYBYUfkb1C/faYlGIVcDhQIe6ohLA7G1ob83gf5ashm5+5qH5UvkY2PXxmk EkoGWokK42bw4bJWEQjwY7rJFmJbTkgUFHg2lOdoH6zuqWeMUZAROcQcbx+CFT0r 7hBGp5JNmxV+KHDBy84SaAc8wi/npnlUB4o= -----END CERTIFICATE-----Generated at Sat Apr 5 18:19:59 2025 by rpki-client