$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/242d57c0-e5f0-36c5-862c-bc7552e62a9a.roa File: 242d57c0-e5f0-36c5-862c-bc7552e62a9a.roa (raw, json) Hash identifier: Pn0gOulHZdbwUpaD1Gzj7Ir2BJsTqFLACWKAqPE3a2A= Subject key identifier: 18:01:08:3B:4F:2C:60:89:67:CE:38:91:EF:5B:42:B2:B7:EF:F4:47 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848C63805B70307EBE524A47B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/242d57c0-e5f0-36c5-862c-bc7552e62a9a.roa Signing time: Tue 04 Feb 2025 20:09:49 +0000 ROA not before: Tue 04 Feb 2025 20:09:49 +0000 ROA not after: Mon 05 May 2025 19:09:49 +0000 asID: 6167 IP address blocks: 2600:1001:a111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:38:05:b7:03:07:eb:e5:24:a4:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 4 20:09:49 2025 GMT Not After : May 5 19:09:49 2025 GMT Subject: CN=39b86f98-810b-4086-b0ef-7bd155417473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:b4:d1:bb:44:1b:1e:54:c6:47:5f:6d:20: e3:d3:0f:f7:ab:08:7b:51:c7:d7:6a:1d:5a:aa:99: 18:1c:5a:e4:4f:49:fd:e3:35:e4:09:03:43:41:ee: 24:6a:71:87:7d:be:df:11:31:fe:05:5d:5f:a8:f9: 97:a9:45:38:c6:c0:2f:01:d7:25:5b:af:06:ec:85: 57:c3:b0:1d:bc:ad:15:7a:15:3f:4f:b3:54:29:31: f2:15:d0:10:b3:55:5d:1b:1d:19:2d:76:90:5c:84: a2:87:60:82:be:8e:e4:33:e6:78:7e:e4:5e:70:f2: 55:9e:6c:f7:16:b7:4c:d5:58:76:98:20:2b:94:cf: 0e:d8:00:bf:6c:61:c4:a2:cb:4b:8e:21:a6:83:40: 39:82:f5:20:81:02:4d:09:e5:67:fa:05:3f:59:fe: a3:f9:88:22:f7:5c:7b:25:ac:51:0b:54:f8:27:d8: 51:8d:d5:bc:14:06:82:bb:c0:02:14:f1:71:7d:d3: 8b:84:01:27:3f:05:97:5e:4d:1b:f7:4e:f4:0a:8a: 4d:00:08:85:85:22:16:f5:52:c0:4f:be:d3:29:5b: 97:c8:93:b8:ae:43:7f:30:97:4d:51:32:56:30:ae: 30:0d:fb:e4:62:82:b0:c8:62:33:db:d9:97:99:96: 1f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:01:08:3B:4F:2C:60:89:67:CE:38:91:EF:5B:42:B2:B7:EF:F4:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/242d57c0-e5f0-36c5-862c-bc7552e62a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1001:a111::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:da:a0:15:51:a6:af:d4:05:4c:25:c0:35:f4:0d:a8:c3:5c: 3d:a7:d2:03:a7:6a:b4:65:4b:a8:19:10:9f:c2:53:cc:26:39: bb:6e:dd:55:5c:95:0f:30:29:88:33:29:e4:6d:ae:aa:0b:21: 5c:0d:f0:55:eb:c7:c5:81:43:9b:04:ff:b2:d6:01:f1:9f:db: 6f:03:45:c9:1b:8c:5f:53:af:8a:8d:5e:e0:cc:45:f9:c5:78: 62:8c:b8:72:a1:70:77:40:89:78:1d:4a:bd:05:17:05:5c:61: c8:6c:fb:b2:ed:d7:15:a0:67:d0:ed:11:eb:5a:99:e7:25:7c: 6e:b2:c7:1c:ca:e0:34:51:ae:fa:16:a8:fb:04:fa:ac:02:80: 5c:a0:da:d0:98:9c:de:1a:6b:fb:05:d4:09:7f:35:8d:17:25: 21:51:cb:47:f7:3a:43:bc:6d:85:64:99:52:93:84:5a:0d:c9: 93:80:e0:8f:04:58:9b:2e:4f:ef:e3:1f:ec:26:88:7e:a8:09: 2c:9b:61:90:8b:d4:ba:2e:e9:db:66:65:60:37:85:ad:6f:f1: 38:cc:94:87:f3:ed:7a:c4:10:28:da:8e:4a:5d:68:77:69:b3: 91:cf:4f:6a:f2:39:6e:64:01:5b:46:68:2c:ed:ce:32:62:7e: a9:5b:56:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjGOAW3Awfr5SSkewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIwNDIwMDk0OVoXDTI1MDUwNTE5MDk0OVowLzEtMCsGA1UEAxMk MzliODZmOTgtODEwYi00MDg2LWIwZWYtN2JkMTU1NDE3NDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZO00btEGx5UxkdfbSDj0w/3qwh7UcfXah1a qpkYHFrkT0n94zXkCQNDQe4kanGHfb7fETH+BV1fqPmXqUU4xsAvAdclW68G7IVX w7AdvK0VehU/T7NUKTHyFdAQs1VdGx0ZLXaQXISih2CCvo7kM+Z4fuRecPJVnmz3 FrdM1Vh2mCArlM8O2AC/bGHEostLjiGmg0A5gvUggQJNCeVn+gU/Wf6j+Ygi91x7 JaxRC1T4J9hRjdW8FAaCu8ACFPFxfdOLhAEnPwWXXk0b9070CopNAAiFhSIW9VLA T77TKVuXyJO4rkN/MJdNUTJWMK4wDfvkYoKwyGIz29mXmZYf0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBgBCDtPLGCJZ844ke9bQrK37/RHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjQyZDU3YzAtZTVmMC0z NmM1LTg2MmMtYmM3NTUyZTYyYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQAaER MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG3aoBVRpq/UBUwlwDX0DajDXD2n0gOnarRlS6gZEJ/CU8wmObtu 3VVclQ8wKYgzKeRtrqoLIVwN8FXrx8WBQ5sE/7LWAfGf228DRckbjF9Tr4qNXuDM RfnFeGKMuHKhcHdAiXgdSr0FFwVcYchs+7Lt1xWgZ9DtEetameclfG6yxxzK4DRR rvoWqPsE+qwCgFyg2tCYnN4aa/sF1Al/NY0XJSFRy0f3OkO8bYVkmVKThFoNyZOA 4I8EWJsuT+/jH+wmiH6oCSybYZCL1Lou6dtmZWA3ha1v8TjMlIfz7XrEECjajkpd aHdps5HPT2ryOW5kAVtGaCztzjJifqlbVks= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:29 2025 by rpki-client