$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4d3ea1-0012-3790-8ea3-c8c6ebf85814.roa File: 3b4d3ea1-0012-3790-8ea3-c8c6ebf85814.roa (raw, json) Hash identifier: KD3HFPFmkXXziw+BBsAb2XPTEPRHa/43qLPRfZXRwdA= Subject key identifier: C2:38:24:50:E3:B7:EE:53:D1:C5:D4:82:21:89:44:8E:72:71:9B:B6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400D968D98E29371CCF8880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4d3ea1-0012-3790-8ea3-c8c6ebf85814.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 22394 IP address blocks: 2600:1006::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:d9:68:d9:8e:29:37:1c:cf:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=613174d3-dd86-4f24-a914-d0d27008e494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:33:46:09:03:c7:ec:23:f4:0d:3d:dc:7a: ee:91:5d:38:f8:c3:50:ec:89:93:54:55:04:ed:a5: da:b7:42:3f:58:1b:97:0e:71:49:3c:78:af:d1:58: 1f:df:3b:37:e4:88:a6:96:03:25:6c:27:50:05:63: f2:95:e2:24:78:52:70:79:f9:13:58:e3:01:84:f0: ce:25:bd:82:b6:31:bc:4d:ce:19:d9:1e:05:59:98: c4:9b:f9:6a:8a:3c:78:51:2e:88:89:39:35:03:e6: fb:91:2b:6a:12:af:17:d0:62:00:df:c8:1c:32:f3: 50:24:64:54:f1:cb:4f:24:d5:a4:8b:93:f6:d6:ae: fd:52:8c:d6:64:8a:8b:5f:c8:22:70:4a:79:51:4f: b9:59:5a:3b:0f:43:fe:7f:76:10:e7:13:16:a9:d0: aa:ae:af:91:c2:e1:3e:00:62:53:32:47:07:f1:91: bb:0c:c3:71:2f:4b:76:c2:fc:76:3a:10:8e:d6:cb: 3d:19:07:04:36:08:56:6a:4c:fb:24:80:b9:7d:b9: 95:af:36:74:91:06:78:62:a7:95:1b:1d:80:5f:77: 12:88:1f:96:e4:31:69:04:3c:1b:cf:e0:06:56:68: 84:3a:28:88:d5:0b:b3:7c:90:d0:25:1b:33:a7:4c: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:38:24:50:E3:B7:EE:53:D1:C5:D4:82:21:89:44:8E:72:71:9B:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4d3ea1-0012-3790-8ea3-c8c6ebf85814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1006::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9a:6f:76:57:0c:e0:3c:81:00:89:ad:e3:1e:ca:6a:26:56: de:84:4a:72:4e:d8:e2:d5:ed:8c:00:15:e6:6a:0f:43:26:d4: fb:d9:b2:16:41:b6:d2:45:64:eb:3c:7d:4e:c8:93:40:f1:ed: e7:51:72:00:96:d5:1c:ef:86:f8:41:dc:82:b2:fd:0e:d3:3f: 85:0d:f7:e6:84:f3:38:b3:56:7d:1a:01:83:87:4a:fc:30:8f: bc:9b:1a:62:e8:df:46:10:15:2c:ce:ed:4b:a7:f5:13:f6:e6: 40:d0:31:3e:ab:ce:56:78:50:f2:7a:fb:37:27:6e:42:76:da: 9b:02:57:cf:eb:f3:75:94:c0:88:bb:90:fc:a7:04:1b:a3:cc: 59:52:98:e2:cb:5c:eb:57:df:57:13:40:e9:5d:0c:e0:d0:f6: a2:77:c2:ed:a4:f9:76:a8:58:88:38:bb:89:2c:fc:0b:ff:95: 81:8e:59:9d:be:ae:75:ef:43:03:57:cb:3a:c4:f4:74:25:1f: 1a:84:b5:59:d3:c7:85:e5:ca:ad:90:77:d2:99:6b:70:ef:47: 19:39:1b:d5:4e:85:da:ce:ca:26:85:52:6c:6b:cf:b9:97:ce: e9:6e:b9:3b:ef:11:26:86:a8:1a:aa:42:99:ca:77:65:73:6b: 0e:d4:d1:9f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEikANlo2Y4pNxzPiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NjEzMTc0ZDMtZGQ4Ni00ZjI0LWE5MTQtZDBkMjcwMDhlNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNkzRgkDx+wj9A093HrukV04+MNQ7ImTVFUE 7aXat0I/WBuXDnFJPHiv0Vgf3zs35IimlgMlbCdQBWPyleIkeFJwefkTWOMBhPDO Jb2CtjG8Tc4Z2R4FWZjEm/lqijx4US6IiTk1A+b7kStqEq8X0GIA38gcMvNQJGRU 8ctPJNWki5P21q79UozWZIqLX8gicEp5UU+5WVo7D0P+f3YQ5xMWqdCqrq+RwuE+ AGJTMkcH8ZG7DMNxL0t2wvx2OhCO1ss9GQcENghWakz7JIC5fbmVrzZ0kQZ4YqeV Gx2AX3cSiB+W5DFpBDwbz+AGVmiEOiiI1QuzfJDQJRszp0w6OwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMI4JFDjt+5T0cXUgiGJRI5ycZu2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2I0ZDNlYTEtMDAxMi0z NzkwLThlYTMtYzhjNmViZjg1ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAQBjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBOmm92VwzgPIEAia3jHspqJlbehEpyTtji1e2MABXmag9DJtT72bIW QbbSRWTrPH1OyJNA8e3nUXIAltUc74b4QdyCsv0O0z+FDffmhPM4s1Z9GgGDh0r8 MI+8mxpi6N9GEBUszu1Lp/UT9uZA0DE+q85WeFDyevs3J25CdtqbAlfP6/N1lMCI u5D8pwQbo8xZUpjiy1zrV99XE0DpXQzg0Paid8LtpPl2qFiIOLuJLPwL/5WBjlmd vq5170MDV8s6xPR0JR8ahLVZ08eF5cqtkHfSmWtw70cZORvVToXazsomhVJsa8+5 l87pbrk77xEmhqgaqkKZyndlc2sO1NGf -----END CERTIFICATE-----Generated at Thu Apr 10 07:23:48 2025 by rpki-client