$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4335ed12-7f1b-3f81-b427-cf6b47b0fffd.roa File: 4335ed12-7f1b-3f81-b427-cf6b47b0fffd.roa (raw, json) Hash identifier: kcSSm0c0lzTWciBbLSNbWzQFk8CiSPZayXmYqU6VyYY= Subject key identifier: C2:69:56:83:D9:4A:C8:5F:A4:DB:1A:02:AF:5E:A4:72:DB:9B:14:A2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400CE762798D87C1A39A360 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4335ed12-7f1b-3f81-b427-cf6b47b0fffd.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100d:bf02::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:ce:76:27:98:d8:7c:1a:39:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=419c1db5-b3a0-4d2e-9a3d-dd716b34709b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:24:98:67:7f:cb:d5:b8:5a:f2:8c:47:9a:23: 26:d6:c9:7d:cc:3b:92:2d:13:aa:c6:e3:e5:46:9e: b6:a4:13:c3:4d:c8:f3:b6:33:26:7a:18:c7:08:79: cf:52:48:2a:b6:88:e0:e3:2f:59:4a:0c:eb:5f:47: b9:6c:da:44:f6:73:86:72:f8:eb:6a:6d:33:42:2c: 3b:c8:c1:94:42:e5:58:f3:d0:d2:ac:9d:70:bd:d5: 72:61:a5:63:4c:7e:bc:52:69:51:2e:b6:c3:2d:53: 12:da:dc:b4:49:06:1b:f7:5d:9f:bf:76:da:a2:df: c9:e8:45:f9:3b:da:e2:19:fe:7e:c9:1b:f7:ab:00: dc:94:86:b6:6f:4a:c2:24:c0:96:58:a9:0e:08:43: 12:61:cc:ce:f4:50:fd:d2:5c:a8:68:38:5e:80:8a: 89:70:3c:a3:72:a8:a6:52:c0:81:ed:0f:0b:ba:eb: 41:95:ea:c6:a4:9d:9d:ac:29:ac:75:75:18:f7:49: df:a0:b4:09:e2:22:0f:c7:b3:02:83:e9:f8:2d:20: f1:d1:bd:39:27:96:62:a2:b7:f8:bf:43:66:eb:34: 30:37:ba:8a:e9:87:ec:fa:30:97:4e:bf:df:5a:c1: be:6b:8b:fe:c8:2f:bc:d3:56:f1:a7:39:f4:83:5f: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:69:56:83:D9:4A:C8:5F:A4:DB:1A:02:AF:5E:A4:72:DB:9B:14:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4335ed12-7f1b-3f81-b427-cf6b47b0fffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:bf02::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:fd:8d:9f:0c:6d:47:aa:1e:16:b6:47:a0:ce:89:bb:88:a7: 7d:f0:35:55:e0:2f:0a:0d:07:8c:d7:0f:1d:31:3f:e3:82:9f: e9:3d:bf:9f:38:d7:fa:cb:ef:4e:ff:d6:5d:3e:23:0c:a9:94: 68:c9:cc:67:50:b0:d3:fc:25:53:63:8c:43:e4:a1:67:c4:bc: ad:3f:6f:55:ec:c7:43:25:3d:bb:3d:65:19:54:e2:00:71:a2: a3:9a:3d:73:83:42:a0:f6:20:c5:8e:73:26:80:be:82:68:d5: 8e:9e:97:4e:18:77:2e:45:28:e3:1b:e2:c7:72:06:61:e9:62: de:e7:7d:c2:70:ea:7f:2f:41:a5:af:88:0f:2d:59:dd:88:19: 35:22:08:96:a7:80:69:c3:1a:e2:80:83:38:58:86:45:b8:70: 4c:89:e3:fb:55:fb:34:ef:d1:12:81:54:68:82:5e:b2:e4:c3: 34:b2:e8:81:e6:72:d6:16:87:98:aa:16:fc:8f:ff:49:6f:dd: 1d:fa:0d:48:ba:65:5c:85:78:31:5a:8b:c4:c6:a1:e4:02:42: a5:81:0b:79:63:98:ec:18:75:32:7b:d9:d0:c3:af:ec:e8:07: 7e:08:d5:7d:cf:3c:24:ed:1e:58:5c:c7:5f:b3:dd:ab:11:7b: fc:dc:cf:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAM52J5jYfBo5o2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NDE5YzFkYjUtYjNhMC00ZDJlLTlhM2QtZGQ3MTZiMzQ3MDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCSYZ3/L1bha8oxHmiMm1sl9zDuSLROqxuPl Rp62pBPDTcjztjMmehjHCHnPUkgqtojg4y9ZSgzrX0e5bNpE9nOGcvjram0zQiw7 yMGUQuVY89DSrJ1wvdVyYaVjTH68UmlRLrbDLVMS2ty0SQYb912fv3baot/J6EX5 O9riGf5+yRv3qwDclIa2b0rCJMCWWKkOCEMSYczO9FD90lyoaDhegIqJcDyjcqim UsCB7Q8LuutBlerGpJ2drCmsdXUY90nfoLQJ4iIPx7MCg+n4LSDx0b05J5Ziorf4 v0Nm6zQwN7qK6Yfs+jCXTr/fWsG+a4v+yC+801bxpzn0g18UjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJpVoPZSshfpNsaAq9epHLbmxSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDMzNWVkMTItN2YxYi0z ZjgxLWI0MjctY2Y2YjQ3YjBmZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDb8C MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ79jZ8MbUeqHha2R6DOibuIp33wNVXgLwoNB4zXDx0xP+OCn+k9 v5841/rL707/1l0+IwyplGjJzGdQsNP8JVNjjEPkoWfEvK0/b1Xsx0MlPbs9ZRlU 4gBxoqOaPXODQqD2IMWOcyaAvoJo1Y6el04Ydy5FKOMb4sdyBmHpYt7nfcJw6n8v QaWviA8tWd2IGTUiCJangGnDGuKAgzhYhkW4cEyJ4/tV+zTv0RKBVGiCXrLkwzSy 6IHmctYWh5iqFvyP/0lv3R36DUi6ZVyFeDFai8TGoeQCQqWBC3ljmOwYdTJ72dDD r+zoB34I1X3PPCTtHlhcx1+z3asRe/zczzI= -----END CERTIFICATE-----Generated at Sat Apr 5 18:14:25 2025 by rpki-client