$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44f61855-3610-3ea0-87d8-50cc9e9137f0.roa File: 44f61855-3610-3ea0-87d8-50cc9e9137f0.roa (raw, json) Hash identifier: xJPPqyqQfDhZWjTozaKLbDyi/vXZ2EZn2Fq2SAjtzMA= Subject key identifier: BA:31:2F:71:5E:65:F2:20:A8:78:4F:71:51:FE:1E:56:16:E1:D2:B1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A15B5EE95B61041BFFD83380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44f61855-3610-3ea0-87d8-50cc9e9137f0.roa Signing time: Wed 22 Jan 2025 15:16:08 +0000 ROA not before: Wed 22 Jan 2025 15:16:08 +0000 ROA not after: Tue 22 Apr 2025 14:16:08 +0000 asID: 6167 IP address blocks: 2600:1000:a123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:5b:5e:e9:5b:61:04:1b:ff:d8:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 22 15:16:08 2025 GMT Not After : Apr 22 14:16:08 2025 GMT Subject: CN=b154d415-8042-41ca-b8d6-ac0429deb74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4f:c8:c1:54:4e:a9:77:9c:ed:db:e1:41:83: 07:24:f9:4a:79:49:20:40:ef:47:b0:e4:e7:48:c2: 78:9e:f9:67:da:1b:1a:92:fd:33:13:d3:6e:42:b4: fc:dd:16:63:c0:ce:9f:c5:5a:cd:6f:f0:fb:87:82: 99:c3:ac:12:1a:fa:ea:7a:38:46:51:7b:d0:3f:d2: 0b:95:86:dc:d9:7a:93:24:97:fe:b9:cc:d5:f3:93: 69:db:5a:af:ee:83:9c:d3:78:9c:a2:61:70:a9:57: f0:3c:dd:0f:2b:35:3c:ab:25:5c:bf:e3:6c:50:9e: 7d:37:ab:57:bc:bd:64:42:d7:84:51:f0:4b:89:14: 3e:dc:66:04:ea:af:28:e8:d6:e5:e0:c3:ff:f9:e2: fe:c6:99:53:15:5d:69:b0:5d:fd:8a:74:4b:66:ca: 72:76:24:3c:55:e6:92:7d:f6:78:5d:aa:63:4a:b0: 8b:b3:bf:3d:c0:25:1b:67:38:92:32:56:a3:1d:d2: 15:d8:b7:7b:99:9a:8d:1c:32:d0:26:54:a9:da:22: ab:30:9b:8d:d0:00:18:2d:4f:0f:60:dc:6f:34:c2: fb:8c:51:ae:1c:c7:52:34:aa:0b:f0:eb:e7:93:5c: c6:5a:f3:c0:f1:eb:ab:b5:43:d8:3b:58:ae:06:e5: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:31:2F:71:5E:65:F2:20:A8:78:4F:71:51:FE:1E:56:16:E1:D2:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44f61855-3610-3ea0-87d8-50cc9e9137f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1000:a123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c7:9a:64:1f:d9:df:1a:ea:ef:40:c8:0a:57:f5:27:00:79: 93:4a:53:bb:81:38:98:b6:22:4a:8e:b3:44:2f:04:36:fd:23: 60:a3:69:52:c3:15:52:08:3e:92:e6:4a:07:f3:28:21:8b:92: 14:5f:25:67:fd:20:75:00:43:0f:9a:13:7e:02:c4:6e:ad:d7: 0e:d1:db:89:b1:ac:ce:8c:6c:83:37:58:84:ac:01:62:1a:af: 2d:8a:8a:41:89:fd:66:67:56:40:c7:1a:91:14:4f:ef:6e:ee: 14:df:a7:19:ef:6d:16:4a:e4:b2:a3:f2:c4:c3:ed:a5:a6:59: d8:92:20:c1:39:6f:5f:d6:75:c7:0a:40:5a:0c:fd:57:e6:52: dd:01:5c:ce:c5:62:bc:e7:9a:48:18:8b:a2:c5:46:3b:ca:0d: 7b:c9:e1:64:94:07:52:da:de:08:68:93:13:dd:43:55:3d:25: ca:e4:b1:ed:fc:cc:2e:be:83:25:cf:83:6d:42:27:95:c3:81: 97:88:af:2c:b0:28:89:2a:0e:5c:a7:73:fb:68:3e:39:6b:2c: 01:69:22:01:b3:67:a2:45:6f:6a:c9:72:20:df:1f:17:d4:3e: 05:39:99:2a:a9:13:28:ec:67:97:82:a2:fb:6d:13:3e:a6:14: e9:be:34:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihW17pW2EEG//YM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMjE1MTYwOFoXDTI1MDQyMjE0MTYwOFowLzEtMCsGA1UEAxMk YjE1NGQ0MTUtODA0Mi00MWNhLWI4ZDYtYWMwNDI5ZGViNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0/IwVROqXec7dvhQYMHJPlKeUkgQO9HsOTn SMJ4nvln2hsakv0zE9NuQrT83RZjwM6fxVrNb/D7h4KZw6wSGvrqejhGUXvQP9IL lYbc2XqTJJf+uczV85Np21qv7oOc03icomFwqVfwPN0PKzU8qyVcv+NsUJ59N6tX vL1kQteEUfBLiRQ+3GYE6q8o6Nbl4MP/+eL+xplTFV1psF39inRLZspydiQ8VeaS ffZ4XapjSrCLs789wCUbZziSMlajHdIV2Ld7mZqNHDLQJlSp2iKrMJuN0AAYLU8P YNxvNML7jFGuHMdSNKoL8Ovnk1zGWvPA8eurtUPYO1iuBuXEZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLoxL3FeZfIgqHhPcVH+HlYW4dKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDRmNjE4NTUtMzYxMC0z ZWEwLTg3ZDgtNTBjYzllOTEzN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQAKEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEPHmmQf2d8a6u9AyApX9ScAeZNKU7uBOJi2IkqOs0QvBDb9I2Cj aVLDFVIIPpLmSgfzKCGLkhRfJWf9IHUAQw+aE34CxG6t1w7R24mxrM6MbIM3WISs AWIary2KikGJ/WZnVkDHGpEUT+9u7hTfpxnvbRZK5LKj8sTD7aWmWdiSIME5b1/W dccKQFoM/VfmUt0BXM7FYrznmkgYi6LFRjvKDXvJ4WSUB1La3ghokxPdQ1U9Jcrk se38zC6+gyXPg21CJ5XDgZeIryywKIkqDlync/toPjlrLAFpIgGzZ6JFb2rJciDf HxfUPgU5mSqpEyjsZ5eCovttEz6mFOm+NJM= -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:13 2025 by rpki-client