$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38841677-5f6e-30b1-861a-90e041d8a8a5.roa File: 38841677-5f6e-30b1-861a-90e041d8a8a5.roa (raw, json) Hash identifier: NkFVlB/wBUisMeHSBHzRGkYu9agccMW6mPRM+Pmk92k= Subject key identifier: 15:E1:E2:67:9F:FA:88:0F:8E:9F:CE:A5:9C:47:6F:8C:FC:A0:08:6B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400E7B495CBB4304FCE8380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38841677-5f6e-30b1-861a-90e041d8a8a5.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100b:b1d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:e7:b4:95:cb:b4:30:4f:ce:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=c801aa87-fbed-48d6-950f-a76d28d78600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:56:33:dc:b8:9f:57:12:80:26:19:59:3b: d7:ce:d1:0c:00:0d:20:13:79:58:85:f9:6e:39:0a: 0c:9d:9f:ab:a5:43:ef:6a:b8:8d:3e:60:84:d6:da: b1:de:ac:05:1d:f7:a9:1a:19:2b:76:e3:31:dd:3c: bd:d3:36:9f:68:f2:7c:5b:da:70:83:c7:ad:a6:d3: a9:a3:a2:22:62:4d:48:43:86:a0:53:0b:cb:8c:53: 1e:49:f1:08:c7:20:9f:ab:03:aa:e6:d9:cf:98:b8: 22:15:95:96:b5:32:92:db:1c:23:30:22:5e:9b:39: d9:21:97:86:1a:40:3f:19:0f:0f:69:91:32:ff:27: bf:a2:2f:af:88:c5:b5:7e:2b:7e:b9:f2:c4:5d:74: c8:ca:0a:ba:9d:51:8b:c9:a3:b9:44:3b:c1:2e:bc: 00:bb:9d:51:0e:89:1f:f3:78:89:51:15:48:c8:cd: ad:e8:c1:b2:50:e2:33:fc:7a:47:9d:f8:bd:c4:22: f1:21:b8:2f:ed:39:14:c3:88:48:71:1a:dc:e6:60: 5e:06:2c:3f:ce:94:6b:c5:4e:0e:52:07:7f:45:a3: d1:a1:f4:af:ed:b4:74:e2:ca:b4:3b:31:70:f6:52: ec:81:fa:8e:59:33:1d:fa:76:0d:30:8d:a4:4a:2f: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E1:E2:67:9F:FA:88:0F:8E:9F:CE:A5:9C:47:6F:8C:FC:A0:08:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38841677-5f6e-30b1-861a-90e041d8a8a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100b:b1d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ae:70:ba:4d:09:31:3a:7d:cb:94:e0:c7:ad:78:79:da:44: fd:14:5f:29:73:80:39:39:f4:52:19:94:be:c8:e5:2c:d3:c7: 92:90:2e:c1:c1:3a:f0:ba:20:e8:fc:3a:ab:33:4a:02:f7:e6: e3:e2:5e:0c:41:7f:fd:8d:55:b2:58:09:aa:9b:8c:cf:39:f6: a2:7d:5e:a3:d5:a8:20:a1:4a:3d:b4:b0:0e:19:32:f1:8c:ba: 4f:d5:b2:fc:77:cc:f5:1f:26:68:bd:90:be:fb:46:ea:5d:3f: 5f:85:e7:ef:a7:3b:36:ad:06:3f:6b:2f:34:87:56:10:46:27: 94:5a:c3:38:ba:72:8b:95:f3:db:d9:b4:1c:34:1a:51:e1:1a: 1f:99:5a:09:98:94:ff:7a:ac:e3:e2:c6:fa:d1:1c:13:25:9a: b1:92:b6:0f:c4:8a:8e:e4:7f:20:87:37:1f:c2:e7:73:29:80: f0:4e:bc:85:1e:e4:11:15:26:ed:2e:f0:b5:23:5f:59:87:69: 08:15:89:18:ee:2f:98:9d:f9:10:b3:4a:cd:2e:cc:3a:08:69: 8b:72:c6:92:a3:5a:5b:40:ed:ad:55:4e:a4:5b:40:5d:27:1a: ab:c4:1d:ed:54:59:7e:29:21:56:2f:d6:ce:53:e9:e4:22:0b: 77:3e:f9:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOe0lcu0ME/Og4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk YzgwMWFhODctZmJlZC00OGQ2LTk1MGYtYTc2ZDI4ZDc4NjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh1WM9y4n1cSgCYZWTvXztEMAA0gE3lYhflu OQoMnZ+rpUPvariNPmCE1tqx3qwFHfepGhkrduMx3Ty90zafaPJ8W9pwg8etptOp o6IiYk1IQ4agUwvLjFMeSfEIxyCfqwOq5tnPmLgiFZWWtTKS2xwjMCJemznZIZeG GkA/GQ8PaZEy/ye/oi+viMW1fit+ufLEXXTIygq6nVGLyaO5RDvBLrwAu51RDokf 83iJURVIyM2t6MGyUOIz/HpHnfi9xCLxIbgv7TkUw4hIcRrc5mBeBiw/zpRrxU4O Ugd/RaPRofSv7bR04sq0OzFw9lLsgfqOWTMd+nYNMI2kSi/lFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBXh4mef+ogPjp/OpZxHb4z8oAhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzg4NDE2NzctNWY2ZS0z MGIxLTg2MWEtOTBlMDQxZDhhOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQC7HQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKaucLpNCTE6fcuU4MeteHnaRP0UXylzgDk59FIZlL7I5SzTx5KQ LsHBOvC6IOj8OqszSgL35uPiXgxBf/2NVbJYCaqbjM859qJ9XqPVqCChSj20sA4Z MvGMuk/Vsvx3zPUfJmi9kL77RupdP1+F5++nOzatBj9rLzSHVhBGJ5Rawzi6couV 89vZtBw0GlHhGh+ZWgmYlP96rOPixvrRHBMlmrGStg/Eio7kfyCHNx/C53MpgPBO vIUe5BEVJu0u8LUjX1mHaQgViRjuL5id+RCzSs0uzDoIaYtyxpKjWltA7a1VTqRb QF0nGqvEHe1UWX4pIVYv1s5T6eQiC3c++TY= -----END CERTIFICATE-----Generated at Sat Apr 5 21:56:02 2025 by rpki-client