$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a42ace-7265-3d68-8644-3148a7c5ce90.roa File: 34a42ace-7265-3d68-8644-3148a7c5ce90.roa (raw, json) Hash identifier: D7kB0So+YLoge+IKoqQ0R10JFvJ3RO/KGk934IdTtxs= Subject key identifier: A2:6A:43:7A:42:58:A9:EE:81:73:5A:CA:65:3C:68:6C:3D:28:33:28 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400E97FB7E7D290BC462400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a42ace-7265-3d68-8644-3148a7c5ce90.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100c:b200::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:e9:7f:b7:e7:d2:90:bc:46:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=df5b829d-59cc-411e-b6f9-5e95a9ade932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:07:93:fa:a5:d2:4c:61:ca:e8:17:0c:71: e5:95:9b:ff:ff:c9:49:e1:35:db:62:0b:74:48:52: da:15:49:7c:d5:fb:0d:c6:68:ec:56:c3:4a:5e:ba: 11:f8:41:d4:be:b3:ea:85:19:b2:6c:a8:be:8b:99: 52:61:e6:e8:73:c6:bf:84:8a:76:d5:1a:42:a7:a6: 20:46:32:c3:4a:05:b6:f6:ed:ee:00:3d:53:73:15: d9:bd:a3:59:ca:71:37:60:5e:2a:4e:a2:52:5f:1d: e6:78:e6:53:a2:c5:64:62:93:be:e9:89:db:24:68: 1b:b1:59:d3:f9:da:4b:42:8d:aa:ba:86:18:fc:ba: 7d:2c:f1:28:84:eb:fc:25:52:22:6c:49:a3:56:93: a0:ff:c8:8d:2a:c9:f9:68:e6:bd:f9:ff:21:e5:ef: 25:fc:55:4c:c8:39:1b:0f:cc:84:3b:9f:b3:cf:4c: dd:45:25:fc:11:0b:5d:98:d5:5b:47:f1:31:d9:01: 58:37:7f:08:54:7b:15:d4:57:ee:65:dc:73:f8:26: 8e:82:50:09:f8:7d:46:d5:56:f7:0a:f1:9b:68:6b: dd:74:d8:3f:84:49:9c:dc:51:ac:4f:48:bf:1c:b7: a6:53:ae:b6:8f:61:f8:17:35:95:ee:0c:eb:a8:83: e9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6A:43:7A:42:58:A9:EE:81:73:5A:CA:65:3C:68:6C:3D:28:33:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a42ace-7265-3d68-8644-3148a7c5ce90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100c:b200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:a7:71:8b:e5:aa:16:5e:8b:19:fc:5d:a3:fe:f8:85:4b:81: 26:ef:0f:50:fd:2b:c5:4c:1f:be:cd:18:1b:75:d3:fd:5b:8c: c9:d9:6d:62:ef:bf:fb:8d:2c:74:38:6f:1f:eb:2c:e5:d3:4f: d9:82:b9:c4:3f:68:84:fe:46:b8:60:8d:98:50:30:28:1a:43: 9d:ec:e0:ba:54:88:31:14:0e:bd:36:76:cf:da:6c:1f:ee:1d: 5b:7f:9d:c7:1f:93:a4:36:fb:d2:37:51:d7:71:df:db:1b:c2: aa:08:ef:a6:aa:ca:91:80:e5:88:3b:0f:f0:ce:52:83:51:9f: 80:b9:ad:72:5e:bc:d2:fe:ff:5a:55:f2:4c:3d:41:07:eb:dd: 77:62:82:7b:c0:13:38:ba:c6:34:fe:e0:c6:80:e1:1d:d1:05: 24:30:07:33:4d:b1:44:57:ba:c7:34:a5:9b:19:bf:a8:00:0b: 6f:c5:13:e2:d4:a7:ae:9e:27:5c:aa:a9:b2:f7:6b:09:5e:3d: e6:f1:dd:b1:a8:5b:76:92:6c:aa:08:22:0d:44:9c:7d:a6:f9: 42:a6:26:ad:2a:fa:d8:f3:4f:0a:f6:76:de:7c:37:0e:65:a5: a4:33:18:7b:97:3c:9e:a4:31:64:00:3e:ed:41:65:79:54:a5: 26:48:16:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOl/t+fSkLxGJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZGY1YjgyOWQtNTljYy00MTFlLWI2ZjktNWU5NWE5YWRlOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKIHk/ql0kxhyugXDHHllZv//8lJ4TXbYgt0 SFLaFUl81fsNxmjsVsNKXroR+EHUvrPqhRmybKi+i5lSYeboc8a/hIp21RpCp6Yg RjLDSgW29u3uAD1TcxXZvaNZynE3YF4qTqJSXx3meOZTosVkYpO+6YnbJGgbsVnT +dpLQo2quoYY/Lp9LPEohOv8JVIibEmjVpOg/8iNKsn5aOa9+f8h5e8l/FVMyDkb D8yEO5+zz0zdRSX8EQtdmNVbR/Ex2QFYN38IVHsV1FfuZdxz+CaOglAJ+H1G1Vb3 CvGbaGvddNg/hEmc3FGsT0i/HLemU662j2H4FzWV7gzrqIPpkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKJqQ3pCWKnugXNaymU8aGw9KDMoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzRhNDJhY2UtNzI2NS0z ZDY4LTg2NDQtMzE0OGE3YzVjZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDLIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKCncYvlqhZeixn8XaP++IVLgSbvD1D9K8VMH77NGBt10/1bjMnZ bWLvv/uNLHQ4bx/rLOXTT9mCucQ/aIT+RrhgjZhQMCgaQ53s4LpUiDEUDr02ds/a bB/uHVt/nccfk6Q2+9I3Uddx39sbwqoI76aqypGA5Yg7D/DOUoNRn4C5rXJevNL+ /1pV8kw9QQfr3XdignvAEzi6xjT+4MaA4R3RBSQwBzNNsURXusc0pZsZv6gAC2/F E+LUp66eJ1yqqbL3awlePebx3bGoW3aSbKoIIg1EnH2m+UKmJq0q+tjzTwr2dt58 Nw5lpaQzGHuXPJ6kMWQAPu1BZXlUpSZIFuE= -----END CERTIFICATE-----Generated at Sun Apr 6 02:23:42 2025 by rpki-client