$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3621aa37-6fe0-31e8-9213-7d53a0191b9e.roa File: 3621aa37-6fe0-31e8-9213-7d53a0191b9e.roa (raw, json) Hash identifier: ybPb4mqIhq1gPkW0SeDi3fu9s1q5TW6YV0BISqL9J/A= Subject key identifier: B6:27:FB:4B:5C:5B:F3:60:E7:02:B6:4A:06:75:91:6E:2E:DA:BB:34 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C245FBD8693A9872D35BE80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3621aa37-6fe0-31e8-9213-7d53a0191b9e.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1006:b1d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:5f:bd:86:93:a9:87:2d:35:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=411f3f94-436b-495f-88ff-31581270c7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:b9:b8:60:67:38:85:58:15:6d:f3:0c:75: 04:5f:6c:95:43:75:06:4e:fb:60:75:04:4e:e0:b8: 6a:43:ae:61:2b:ab:8a:29:43:68:0d:37:da:1d:6f: c5:c2:1b:67:d5:06:e9:79:23:1a:98:f8:6f:bd:4f: 5e:44:89:c7:20:6f:65:85:43:f5:98:21:d8:0e:1f: 48:1b:64:a9:c1:18:36:83:22:56:95:45:f3:78:b6: 2c:00:b4:07:de:82:8e:11:b9:60:11:2e:8f:62:cf: f8:69:93:ee:11:79:6d:33:f1:f2:45:b0:27:c8:5b: 37:9b:5b:11:44:18:d7:b1:8d:ed:da:45:ac:9b:22: 39:f1:f1:86:80:c7:6e:42:11:9a:27:24:e3:38:6d: c5:05:2b:9f:b8:80:50:d9:67:62:cd:4c:cc:23:35: 39:55:be:e6:c9:ed:12:8f:2e:3f:9e:d9:eb:63:97: bd:26:39:2b:ce:35:23:47:6d:99:31:c9:61:87:0a: bc:a7:15:4e:38:eb:a1:95:6b:66:2f:a8:39:2a:59: 66:1a:f4:05:45:f3:6d:fc:66:25:78:7b:45:31:5f: 4c:b1:32:29:be:3e:16:e0:7e:6b:91:e8:09:71:90: c0:5a:81:77:bd:a9:79:8d:74:a2:62:87:db:0f:35: 51:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:27:FB:4B:5C:5B:F3:60:E7:02:B6:4A:06:75:91:6E:2E:DA:BB:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3621aa37-6fe0-31e8-9213-7d53a0191b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1006:b1d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:30:e5:c6:ea:a8:1a:6f:dd:91:fb:49:e6:b9:d0:51:58:59: 6c:04:8f:b1:03:d0:75:13:6d:9a:64:46:93:52:89:6e:7a:1f: e7:42:94:8c:6a:f3:46:3b:8e:cb:aa:9c:fc:8b:50:cc:e4:81: 9d:cb:d7:01:a6:17:d5:7d:ab:65:52:b5:26:bd:13:a7:34:e5: 22:ba:8f:41:15:bd:7e:b8:16:02:0b:72:db:68:38:c4:43:17: 90:98:91:fa:3b:20:db:1e:29:ff:2f:70:39:70:e0:89:22:a4: c7:40:b7:06:66:2c:e7:d8:44:66:cf:81:6e:57:22:42:cf:2f: aa:ed:ae:d2:b5:66:68:67:c2:0c:4b:42:5c:aa:1f:31:1c:1f: 4f:3a:7f:54:ec:0e:ab:bc:8e:1e:f3:08:8b:b4:6f:25:51:78: da:d7:4c:6b:70:a8:12:60:9c:97:78:51:6f:90:8e:1a:ef:97: 10:14:d1:db:93:52:17:d8:d6:19:fc:5b:f4:43:1d:ac:93:62: 14:03:0e:8d:ce:ae:10:92:9c:ce:4d:b4:ac:73:08:e3:ae:2b: 37:db:87:d3:d1:8a:22:8a:6a:af:58:79:1d:a7:cb:6c:0c:4e: 8b:8b:d3:d9:89:d8:59:9c:a9:46:d9:41:09:70:34:fb:91:24: a2:23:1f:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJF+9hpOphy01voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NDExZjNmOTQtNDM2Yi00OTVmLTg4ZmYtMzE1ODEyNzBjN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibi5uGBnOIVYFW3zDHUEX2yVQ3UGTvtgdQRO 4LhqQ65hK6uKKUNoDTfaHW/Fwhtn1QbpeSMamPhvvU9eRInHIG9lhUP1mCHYDh9I G2SpwRg2gyJWlUXzeLYsALQH3oKOEblgES6PYs/4aZPuEXltM/HyRbAnyFs3m1sR RBjXsY3t2kWsmyI58fGGgMduQhGaJyTjOG3FBSufuIBQ2WdizUzMIzU5Vb7mye0S jy4/ntnrY5e9JjkrzjUjR22ZMclhhwq8pxVOOOuhlWtmL6g5KllmGvQFRfNt/GYl eHtFMV9MsTIpvj4W4H5rkegJcZDAWoF3val5jXSiYofbDzVRVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLYn+0tcW/Ng5wK2SgZ1kW4u2rs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzYyMWFhMzctNmZlMC0z MWU4LTkyMTMtN2Q1M2EwMTkxYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBrHQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEUw5cbqqBpv3ZH7Sea50FFYWWwEj7ED0HUTbZpkRpNSiW56H+dC lIxq80Y7jsuqnPyLUMzkgZ3L1wGmF9V9q2VStSa9E6c05SK6j0EVvX64FgILctto OMRDF5CYkfo7INseKf8vcDlw4IkipMdAtwZmLOfYRGbPgW5XIkLPL6rtrtK1Zmhn wgxLQlyqHzEcH086f1TsDqu8jh7zCIu0byVReNrXTGtwqBJgnJd4UW+QjhrvlxAU 0duTUhfY1hn8W/RDHayTYhQDDo3OrhCSnM5NtKxzCOOuKzfbh9PRiiKKaq9YeR2n y2wMTouL09mJ2FmcqUbZQQlwNPuRJKIjH5s= -----END CERTIFICATE-----Generated at Sat Apr 5 18:42:38 2025 by rpki-client