$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08bf8618-5c93-3c70-8a91-f933fcc0b856.roa File: 08bf8618-5c93-3c70-8a91-f933fcc0b856.roa (raw, json) Hash identifier: YhynskvlxOgobTDEf7PpdYGVym2CXvyMzr2Dg+qOhRA= Subject key identifier: 2A:9F:58:6D:77:63:ED:FC:07:36:8F:CD:6F:88:76:81:26:77:FD:41 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C24822D2BDAA0EB635DBF80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08bf8618-5c93-3c70-8a91-f933fcc0b856.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1000:b140::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:82:2d:2b:da:a0:eb:63:5d:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=4d2b5f21-4101-407b-bfa6-0d87e721fa54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:81:48:2e:9c:38:42:aa:19:c7:a8:c3:88: 8c:d9:4d:85:cc:07:ae:b4:25:7d:f9:ec:6c:b1:a4: 7c:f1:52:28:6c:ca:bc:60:87:e7:a3:41:95:b1:4e: 36:e3:88:c9:aa:08:a4:c7:99:6b:3c:5b:ac:fc:5b: fb:8d:fb:de:98:90:c6:57:0a:e5:d2:e8:1c:4b:58: a5:54:73:7d:6d:90:9a:48:e0:af:e3:d7:49:c5:51: c1:e2:0e:15:99:6d:c1:49:0c:09:dc:5c:2a:72:ab: bc:cc:c7:34:77:8e:3a:87:92:82:ad:e8:b9:2a:d5: fd:e6:25:d3:64:c3:c2:f2:a1:9f:9b:0f:74:2d:60: 61:0d:78:26:21:50:c6:3f:94:d3:d4:42:11:18:ee: f2:49:02:98:07:b0:a4:59:15:66:ee:5e:63:41:b4: dc:f9:3a:c5:2e:46:6a:ba:df:6f:2a:bd:39:0f:78: ab:29:38:8d:32:af:53:28:9c:db:f8:69:db:ee:93: bb:1f:26:aa:fb:b8:b8:cd:f5:35:ec:a3:a9:69:16: 15:fa:86:16:68:98:08:4b:20:d1:6b:f6:c3:05:64: fe:70:0b:fa:cb:16:5e:7f:00:6a:4d:18:0e:d9:c8: 4b:36:36:d6:fd:f9:21:ab:7f:39:c1:47:87:51:c3: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9F:58:6D:77:63:ED:FC:07:36:8F:CD:6F:88:76:81:26:77:FD:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08bf8618-5c93-3c70-8a91-f933fcc0b856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1000:b140::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:03:18:dc:1e:a3:5a:fb:96:42:ee:29:0d:37:26:e4:04:f5: 24:6f:fd:01:69:f8:cf:48:59:2e:71:b0:16:af:1e:81:4b:99: ce:46:57:b2:64:18:69:e7:35:a2:cc:93:b3:6d:7c:49:a4:5d: 27:da:19:2e:ad:12:29:73:3a:31:d3:25:64:37:08:6e:08:d2: c0:e1:b7:45:aa:73:0a:a8:e0:23:c3:cf:27:a2:81:71:98:ba: f8:93:62:24:7a:0c:ad:19:ba:3c:b2:84:1a:15:01:ae:69:2b: 78:1a:5a:2a:7d:13:b9:f5:04:47:44:d8:cb:fb:b0:7c:1b:1c: 63:8f:9a:67:d0:3d:e6:6b:bd:f3:f0:01:0f:f7:f8:d0:c2:72: 3e:44:33:a1:fb:5a:f6:d0:c6:d5:75:6a:7e:d2:3a:01:cb:5e: eb:34:c8:02:1d:95:dd:a3:16:fa:33:c9:5f:22:3a:00:df:44: 0a:b9:08:f0:fd:64:cc:15:f9:55:61:c4:0b:c0:3c:e4:7b:9c: d4:54:f2:16:9d:83:00:17:51:0e:d6:06:80:4b:1e:a2:54:db: 3e:30:13:c3:83:5f:fb:20:39:2c:7f:1e:8a:93:56:d2:83:5e: d7:3b:ae:13:29:1a:b9:51:ac:ee:26:6c:55:96:19:32:19:8c: cf:6d:32:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIItK9qg62Ndv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NGQyYjVmMjEtNDEwMS00MDdiLWJmYTYtMGQ4N2U3MjFmYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXSBSC6cOEKqGceow4iM2U2FzAeutCV9+exs saR88VIobMq8YIfno0GVsU4244jJqgikx5lrPFus/Fv7jfvemJDGVwrl0ugcS1il VHN9bZCaSOCv49dJxVHB4g4VmW3BSQwJ3Fwqcqu8zMc0d446h5KCrei5KtX95iXT ZMPC8qGfmw90LWBhDXgmIVDGP5TT1EIRGO7ySQKYB7CkWRVm7l5jQbTc+TrFLkZq ut9vKr05D3irKTiNMq9TKJzb+Gnb7pO7Hyaq+7i4zfU17KOpaRYV+oYWaJgISyDR a/bDBWT+cAv6yxZefwBqTRgO2chLNjbW/fkhq385wUeHUcNi2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCqfWG13Y+38BzaPzW+IdoEmd/1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDhiZjg2MTgtNWM5My0z YzcwLThhOTEtZjkzM2ZjYzBiODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQALFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD8DGNweo1r7lkLuKQ03JuQE9SRv/QFp+M9IWS5xsBavHoFLmc5G V7JkGGnnNaLMk7NtfEmkXSfaGS6tEilzOjHTJWQ3CG4I0sDht0Wqcwqo4CPDzyei gXGYuviTYiR6DK0ZujyyhBoVAa5pK3gaWip9E7n1BEdE2Mv7sHwbHGOPmmfQPeZr vfPwAQ/3+NDCcj5EM6H7WvbQxtV1an7SOgHLXus0yAIdld2jFvozyV8iOgDfRAq5 CPD9ZMwV+VVhxAvAPOR7nNRU8hadgwAXUQ7WBoBLHqJU2z4wE8ODX/sgOSx/HoqT VtKDXtc7rhMpGrlRrO4mbFWWGTIZjM9tMpg= -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:34 2025 by rpki-client