$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa File: 31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa (raw, json) Hash identifier: OYl7aqpdU7I8z378oNiO4ztNom2PTFKVnBfXYVnhVJE= Subject key identifier: 65:B0:BC:1C:12:D6:40:40:77:C3:8F:AF:2B:41:5E:1A:51:E9:A7:CF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400EB164D515BB9B5FF3400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100d:9e00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:eb:16:4d:51:5b:b9:b5:ff:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=8e8b9b52-a5e1-49a7-be5e-1fdf8fcf4379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:96:86:95:2d:b5:fe:18:d6:c0:c4:a4:d2: c3:96:44:86:a0:28:45:4a:d7:c3:9f:d0:55:1d:38: f1:da:55:34:1b:d0:2f:ff:26:d2:83:38:18:ca:3d: a4:cf:d5:03:73:86:5d:e2:3e:4a:0b:32:e4:48:71: e7:58:ac:2a:69:22:d3:ce:1c:7b:16:07:65:a6:cf: 93:9f:0a:db:a1:0c:9c:eb:d3:c0:57:47:81:19:63: 32:48:10:07:20:75:93:20:dc:4c:ab:d7:d4:e6:5a: 26:e5:fa:cb:66:59:2d:61:94:cf:02:69:78:ab:cd: 27:e6:70:bb:ce:5e:70:8b:04:0b:26:a1:67:20:35: a3:25:b2:5e:ca:04:22:10:a1:51:5f:0f:cf:ea:22: d9:1b:6f:46:23:5f:dc:37:02:78:bb:4f:fe:95:5b: 91:6a:7f:fd:fa:7d:6e:5e:65:75:db:41:70:d4:27: 09:f4:97:fe:e3:a5:6f:22:bc:54:3f:de:6b:10:54: 06:66:0c:ef:aa:0c:8c:e7:db:fe:e1:42:ae:c5:2a: 7b:97:0f:5e:c1:e1:49:f7:b1:99:01:a2:96:d7:3d: e3:09:a4:7b:63:35:84:4a:dd:8f:a8:34:55:f3:5f: bc:a4:08:b7:58:2e:13:c1:d5:b8:f2:84:7c:28:ff: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B0:BC:1C:12:D6:40:40:77:C3:8F:AF:2B:41:5E:1A:51:E9:A7:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:9e00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:5f:d7:8f:28:f6:6b:bc:5b:0d:25:19:27:f0:92:6a:a3:6a: ed:57:44:b6:7e:8a:02:cd:9d:5c:ac:3d:05:5b:cd:a0:79:12: de:4a:5f:d6:bb:a9:1e:b6:fa:0e:14:39:73:6b:ee:97:e1:08: 38:a5:68:75:fb:19:77:db:57:87:10:5e:f2:18:19:ef:62:02: 5c:e6:4d:44:be:25:41:30:b2:0d:da:2c:ce:16:39:b1:cb:4f: e5:03:93:13:8a:5b:b1:85:ec:18:7a:50:73:32:5b:60:ff:08: 8e:de:1a:19:11:9d:b3:1c:10:1a:37:d4:1d:0d:f4:eb:91:6a: e3:de:c8:46:43:b9:55:99:e9:f6:7b:fc:23:8b:41:c0:0c:c5: a2:b5:8b:9a:bb:a8:bc:bb:8a:83:66:f0:1d:33:aa:fc:1c:cc: 12:a2:af:f7:ee:5a:13:98:96:3f:6b:98:dc:26:b5:ae:1d:80: 20:81:e7:38:ae:c0:5a:06:0f:53:5b:b8:7b:07:ed:97:7a:48: d4:dd:2d:7b:c2:99:4c:68:7b:54:d4:c0:a9:78:47:16:5a:68: 7a:4e:20:3c:0d:90:32:5d:f9:d5:1a:75:37:ae:97:66:60:70: 24:a5:08:11:46:60:cb:b5:25:2c:c7:d0:1b:a8:09:4b:c7:20: a2:d8:42:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOsWTVFbubX/NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk OGU4YjliNTItYTVlMS00OWE3LWJlNWUtMWZkZjhmY2Y0Mzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBGWhpUttf4Y1sDEpNLDlkSGoChFStfDn9BV HTjx2lU0G9Av/ybSgzgYyj2kz9UDc4Zd4j5KCzLkSHHnWKwqaSLTzhx7Fgdlps+T nwrboQyc69PAV0eBGWMySBAHIHWTINxMq9fU5lom5frLZlktYZTPAml4q80n5nC7 zl5wiwQLJqFnIDWjJbJeygQiEKFRXw/P6iLZG29GI1/cNwJ4u0/+lVuRan/9+n1u XmV120Fw1CcJ9Jf+46VvIrxUP95rEFQGZgzvqgyM59v+4UKuxSp7lw9eweFJ97GZ AaKW1z3jCaR7YzWESt2PqDRV81+8pAi3WC4TwdW48oR8KP83mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGWwvBwS1kBAd8OPrytBXhpR6afPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzFhYTlkM2EtMmMyMC0z YmNkLTk5MjAtNzg0NWU2Y2QxZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDZ4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNf148o9mu8Ww0lGSfwkmqjau1XRLZ+igLNnVysPQVbzaB5Et5K X9a7qR62+g4UOXNr7pfhCDilaHX7GXfbV4cQXvIYGe9iAlzmTUS+JUEwsg3aLM4W ObHLT+UDkxOKW7GF7Bh6UHMyW2D/CI7eGhkRnbMcEBo31B0N9OuRauPeyEZDuVWZ 6fZ7/COLQcAMxaK1i5q7qLy7ioNm8B0zqvwczBKir/fuWhOYlj9rmNwmta4dgCCB 5ziuwFoGD1NbuHsH7Zd6SNTdLXvCmUxoe1TUwKl4RxZaaHpOIDwNkDJd+dUadTeu l2ZgcCSlCBFGYMu1JSzH0BuoCUvHIKLYQjM= -----END CERTIFICATE-----Generated at Sun Apr 6 07:27:07 2025 by rpki-client