$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa File: 2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa (raw, json) Hash identifier: s2tKHEo1Uy6x58B35sw6cJKkkDyXBL7fK3Kid7/S/YI= Subject key identifier: 17:BC:8B:E9:72:C3:54:FC:72:FB:58:14:83:92:EE:80:2E:A3:F3:BE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400E5179E41D3EABC188880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100a:a011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:e5:17:9e:41:d3:ea:bc:18:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=2f8493fc-4761-4c68-bf7a-5dc8cf0c785e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:c0:81:39:93:25:29:d8:9c:79:76:7b:41: 3a:b8:94:d4:39:2d:d4:18:25:f5:a9:13:8a:b1:12: d7:2c:03:35:f1:61:c1:79:08:ea:5b:77:bd:c6:7e: 45:36:95:3d:50:f7:6e:ee:30:d2:d7:20:4d:5a:f8: 06:e2:f3:65:c5:74:d9:6b:2a:cc:15:a5:f5:41:50: 7e:7b:47:79:32:96:3e:92:66:de:d9:de:19:a3:3e: 75:2e:fc:b1:0e:13:00:ca:47:d3:3b:78:26:27:49: 77:f0:e3:bc:9c:64:15:4f:62:11:a3:86:ce:5e:0d: 2e:45:95:af:62:1f:ee:15:a4:cf:58:8e:e8:34:20: 91:29:33:54:14:1e:3b:02:3b:65:3c:67:dc:e3:8f: 44:17:77:43:62:34:23:b7:6c:fb:28:de:e0:9a:3f: 30:e3:df:2f:b7:63:ba:2d:30:71:1f:bd:94:4c:c2: ee:bb:09:43:b0:6e:2f:c5:ec:0a:d0:60:ab:a7:06: d2:03:f6:9a:ef:5c:11:12:2d:e8:02:86:1c:05:03: 03:76:14:3b:09:4d:48:4b:31:5a:65:32:a0:9b:61: 1b:07:b5:86:a0:89:ae:7c:05:d4:4c:a7:f5:37:95: e3:c3:df:16:8f:57:8d:be:ad:14:d7:be:e4:e5:5d: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BC:8B:E9:72:C3:54:FC:72:FB:58:14:83:92:EE:80:2E:A3:F3:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100a:a011::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:96:d7:a9:8c:5c:14:81:e1:98:2b:95:d9:fe:87:1b:d2:f7: 53:21:c4:cc:bf:66:a3:b9:9e:46:d0:08:6a:9c:d2:dc:8f:78: be:75:9e:b4:5a:20:71:d7:c4:2a:ad:78:96:de:b7:3b:b5:7b: f1:c9:92:4c:b1:31:0b:0e:6e:75:c1:99:0d:92:e9:f5:a2:bb: 24:b5:2e:b9:2f:6a:91:9a:8f:75:2a:c0:25:8f:ca:08:b8:10: 04:ed:76:6d:ce:92:bb:c8:e6:10:35:98:60:48:a9:e1:f3:e1: dd:4e:9e:c8:dc:32:99:86:e5:ca:e2:48:f5:19:5a:0c:e2:81: 4f:98:4e:c4:c7:28:45:bc:d8:eb:d6:37:0e:9b:25:31:d8:b7: 56:6d:35:98:61:ce:07:88:5b:63:65:51:56:85:83:5a:ca:d8: 59:e0:54:a3:45:de:f7:71:3c:5e:15:1b:d8:71:1d:56:d0:f9: 60:97:37:3b:b5:df:bf:e7:ed:1d:43:f4:72:c0:e2:bf:18:99: 54:1a:c2:e4:81:55:1c:41:3d:d7:b7:c3:3a:73:fe:b7:57:03: 7e:ca:76:2c:7c:55:97:81:e0:bb:ba:f0:24:5a:35:fe:fe:85: f8:9d:21:79:da:45:b9:a8:53:2f:74:a6:9d:e0:40:94:bd:97: fd:5b:14:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOUXnkHT6rwYiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MmY4NDkzZmMtNDc2MS00YzY4LWJmN2EtNWRjOGNmMGM3ODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQnAgTmTJSnYnHl2e0E6uJTUOS3UGCX1qROK sRLXLAM18WHBeQjqW3e9xn5FNpU9UPdu7jDS1yBNWvgG4vNlxXTZayrMFaX1QVB+ e0d5MpY+kmbe2d4Zoz51LvyxDhMAykfTO3gmJ0l38OO8nGQVT2IRo4bOXg0uRZWv Yh/uFaTPWI7oNCCRKTNUFB47AjtlPGfc449EF3dDYjQjt2z7KN7gmj8w498vt2O6 LTBxH72UTMLuuwlDsG4vxewK0GCrpwbSA/aa71wREi3oAoYcBQMDdhQ7CU1ISzFa ZTKgm2EbB7WGoImufAXUTKf1N5Xjw98Wj1eNvq0U177k5V1QHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBe8i+lyw1T8cvtYFIOS7oAuo/O+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjEyMTIyMmItZDZkZi0z ZDVkLWE3ZWYtMGY3ZDQzNjhhMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCqAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE6W16mMXBSB4Zgrldn+hxvS91MhxMy/ZqO5nkbQCGqc0tyPeL51 nrRaIHHXxCqteJbetzu1e/HJkkyxMQsObnXBmQ2S6fWiuyS1LrkvapGaj3UqwCWP ygi4EATtdm3OkrvI5hA1mGBIqeHz4d1OnsjcMpmG5criSPUZWgzigU+YTsTHKEW8 2OvWNw6bJTHYt1ZtNZhhzgeIW2NlUVaFg1rK2FngVKNF3vdxPF4VG9hxHVbQ+WCX Nzu137/n7R1D9HLA4r8YmVQawuSBVRxBPde3wzpz/rdXA37Kdix8VZeB4Lu68CRa Nf7+hfidIXnaRbmoUy90pp3gQJS9l/1bFBc= -----END CERTIFICATE-----Generated at Sat Apr 5 21:30:17 2025 by rpki-client