$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2650e404-c694-39ab-b9b2-28198fd950b0.roa File: 2650e404-c694-39ab-b9b2-28198fd950b0.roa (raw, json) Hash identifier: Z6zLrIbBp1VGP1Bdw74jiIn+BphFqJx92D+KYR+VAMI= Subject key identifier: 65:47:D5:31:A6:CA:46:10:B5:D8:2D:81:EC:25:24:D4:07:EA:2F:72 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400D527C7A227192CE38680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2650e404-c694-39ab-b9b2-28198fd950b0.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100e:bf10::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:d5:27:c7:a2:27:19:2c:e3:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=068f561a-e035-4bb1-8642-df804ade3e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:98:71:e6:6c:4a:f4:b9:87:23:da:9c:f8: 65:3b:8d:31:ab:44:71:91:99:8e:ab:5c:76:a2:af: 0e:85:89:7c:fd:78:a2:c7:8b:68:ec:9b:63:f2:71: 5b:d0:85:0b:d0:b1:6c:c9:41:6b:b5:39:51:c3:2b: 46:b7:af:32:26:1a:d0:33:79:b6:0f:5d:97:e6:6b: 26:aa:ed:50:26:82:ed:cf:ec:a9:dc:24:d7:8e:b3: 00:cd:84:30:3f:23:fa:54:b4:20:eb:0e:12:2c:90: d3:eb:e3:f5:be:81:d5:5a:ff:40:42:4e:ed:b8:ff: bb:4e:d5:fd:87:ae:3e:12:dc:a2:d1:84:04:5a:69: 07:14:95:ce:6b:ad:69:1d:83:ae:80:24:c0:f6:0c: 9e:e2:1c:ea:44:bf:e7:59:a2:2f:5e:b2:34:e0:ad: 94:c0:b4:bd:7f:d9:9f:c7:74:af:a6:79:e0:be:24: 32:a6:c6:83:a4:58:8b:ba:2e:3e:40:aa:62:0c:3b: f6:d5:5d:da:1d:82:61:d2:64:fe:88:5b:0d:09:84: 94:ca:34:a0:f7:f3:38:fe:0d:b6:c0:49:9b:08:63: d1:2e:9d:9b:bf:37:b4:be:09:c3:6e:72:d8:12:0a: d4:88:14:36:51:23:df:04:ad:4f:76:c0:e7:a2:d3: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:47:D5:31:A6:CA:46:10:B5:D8:2D:81:EC:25:24:D4:07:EA:2F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2650e404-c694-39ab-b9b2-28198fd950b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100e:bf10::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b2:18:31:f1:08:44:ec:0a:2e:4e:62:dd:66:7f:06:40:15: 38:e7:34:8c:98:c7:73:a6:b4:9f:92:7a:8b:37:2b:d2:db:c8: 4f:64:f4:e4:0d:e9:91:73:01:6c:5c:9b:d4:a1:11:b7:9c:64: 3b:8b:4e:a8:00:53:7a:88:ec:49:d2:9a:01:14:fb:15:2a:61: 62:71:40:f8:21:f5:6a:f5:58:8a:78:a7:26:2b:0d:d1:9a:13: 5e:4a:af:50:eb:36:5d:37:2d:6a:09:a0:93:69:c4:65:41:98: 1a:f4:f7:ac:a8:f3:a4:eb:5b:1f:ca:77:92:25:0e:c9:2b:ec: c2:3b:11:60:76:1e:60:f2:83:62:f2:a4:cd:58:83:af:40:65: 0a:6d:f0:69:4c:c2:c6:f1:d1:d9:91:40:c5:a6:19:f1:b2:e6: c7:95:fe:ea:a9:6f:b3:2a:1f:a2:61:33:88:f6:01:a4:76:db: 10:8e:2a:83:c8:b1:7a:da:06:69:48:57:5c:f4:58:e2:8e:51: cf:c7:49:ac:30:cb:66:5c:1e:17:3f:58:96:20:69:56:22:2c: 3e:d9:bd:03:0a:71:45:2a:d9:47:c9:de:97:8a:d3:89:5c:6f: d7:4a:27:e1:cb:5f:24:6f:d4:4a:f5:27:c9:00:d6:69:bf:45: 46:ba:23:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikANUnx6InGSzjhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MDY4ZjU2MWEtZTAzNS00YmIxLTg2NDItZGY4MDRhZGUzZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKCYceZsSvS5hyPanPhlO40xq0RxkZmOq1x2 oq8OhYl8/Xiix4to7Jtj8nFb0IUL0LFsyUFrtTlRwytGt68yJhrQM3m2D12X5msm qu1QJoLtz+yp3CTXjrMAzYQwPyP6VLQg6w4SLJDT6+P1voHVWv9AQk7tuP+7TtX9 h64+Etyi0YQEWmkHFJXOa61pHYOugCTA9gye4hzqRL/nWaIvXrI04K2UwLS9f9mf x3SvpnngviQypsaDpFiLui4+QKpiDDv21V3aHYJh0mT+iFsNCYSUyjSg9/M4/g22 wEmbCGPRLp2bvze0vgnDbnLYEgrUiBQ2USPfBK1PdsDnotOz+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGVH1TGmykYQtdgtgewlJNQH6i9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjY1MGU0MDQtYzY5NC0z OWFiLWI5YjItMjgxOThmZDk1MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDr8Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFSyGDHxCETsCi5OYt1mfwZAFTjnNIyYx3OmtJ+Seos3K9LbyE9k 9OQN6ZFzAWxcm9ShEbecZDuLTqgAU3qI7EnSmgEU+xUqYWJxQPgh9Wr1WIp4pyYr DdGaE15Kr1DrNl03LWoJoJNpxGVBmBr096yo86TrWx/Kd5IlDskr7MI7EWB2HmDy g2LypM1Yg69AZQpt8GlMwsbx0dmRQMWmGfGy5seV/uqpb7MqH6JhM4j2AaR22xCO KoPIsXraBmlIV1z0WOKOUc/HSawwy2ZcHhc/WJYgaVYiLD7ZvQMKcUUq2UfJ3peK 04lcb9dKJ+HLXyRv1Er1J8kA1mm/RUa6Iyw= -----END CERTIFICATE-----Generated at Thu Apr 10 15:03:53 2025 by rpki-client