$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5289aa19-a2d8-3480-8db0-07af7b747a41.roa File: 5289aa19-a2d8-3480-8db0-07af7b747a41.roa (raw, json) Hash identifier: 1aj2kHF4HdiZqNaHwkuY3z/4M23qCpVrbHeN6Vge91E= Subject key identifier: 2D:4C:9E:0A:04:40:D3:3C:83:22:6F:F9:0A:11:DB:B9:A4:AE:8D:78 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400E4184312366BB6CE95A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5289aa19-a2d8-3480-8db0-07af7b747a41.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:1009:b170::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:e4:18:43:12:36:6b:b6:ce:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=4b08086f-56ef-48ea-8abc-bfc65d61fd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:58:f3:81:18:c4:04:20:41:97:f7:08:7b: e4:91:57:91:4a:84:2b:b6:ff:4d:1f:2e:6c:2a:c9: 08:59:02:89:61:75:e1:79:82:c8:0b:cd:48:c6:85: 7c:89:6d:df:31:d4:6a:89:4c:ea:e1:72:a1:91:11: 02:2a:82:32:af:ae:25:e7:54:e9:a8:e9:70:33:ca: 94:d7:5f:57:5b:66:ff:12:7a:90:81:f2:dd:80:84: 18:58:19:e4:3b:d9:ff:f0:e5:57:86:b8:c2:87:e0: d6:4c:3c:9a:6d:9d:58:e9:5e:e6:ed:92:03:7c:47: 60:f5:27:65:b4:5c:f2:5d:a9:b7:90:94:56:a3:70: 7f:4b:21:b4:e6:28:e0:cc:79:48:39:14:4b:06:2d: 08:be:d8:60:f3:10:e7:08:6f:fa:39:7d:8a:bb:3b: 51:3b:29:98:c8:31:15:4f:52:b8:ee:8d:31:96:d1: c3:2b:ef:19:47:3e:cb:f2:56:88:2e:d2:6e:63:b4: 90:71:a0:81:e0:2f:d7:14:14:2e:37:84:13:3a:57: 02:0d:84:a9:0b:5e:0f:fe:f8:99:bf:2c:84:52:2c: 1e:dc:43:36:5d:94:78:05:58:80:b9:cc:0c:3c:95: 06:8f:b0:24:1d:bc:7d:a3:16:6d:65:3b:ee:3d:2e: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4C:9E:0A:04:40:D3:3C:83:22:6F:F9:0A:11:DB:B9:A4:AE:8D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5289aa19-a2d8-3480-8db0-07af7b747a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1009:b170::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ac:51:df:c8:2f:04:ba:e2:50:81:cf:4b:4f:5a:d8:d0:e4: a2:ec:a4:4b:75:67:90:f7:41:78:c0:20:35:80:ec:0d:e9:44: 87:24:aa:05:37:79:04:a8:13:7e:6a:72:84:d0:80:b2:57:88: 98:a0:e3:f0:33:04:11:d2:8f:55:93:2c:dc:c0:b9:db:ed:d7: 05:45:75:d8:ab:94:2e:66:9e:94:7b:19:de:a9:d8:a7:3e:dc: 20:5b:04:55:48:a0:ae:24:2a:1d:22:96:9d:35:d5:e2:57:db: d8:4f:60:f4:2c:88:7c:7b:d0:c8:ee:4f:6c:ef:7c:da:4e:0a: 32:4b:f3:29:64:25:8c:a9:6f:14:96:33:9d:a6:56:04:0a:4f: bd:02:34:c3:9b:a3:8d:2c:85:c7:98:1f:d3:1d:96:41:27:17: 17:84:26:e7:0c:11:ae:cf:f5:fa:70:06:cd:69:31:70:b5:fd: 32:c7:13:7b:42:52:98:1c:e4:82:3c:d4:21:cd:d8:cd:ea:6d: f5:8e:1a:3d:77:61:96:fb:37:fb:da:31:4c:ff:9c:99:42:ca: f9:4a:2b:5d:20:ff:4f:d6:10:0f:dd:70:77:ce:e6:ba:42:a0: 81:78:da:38:4c:92:66:d3:aa:83:b2:2e:5f:19:89:db:1a:4b: 5f:8b:72:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOQYQxI2a7bOlaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NGIwODA4NmYtNTZlZi00OGVhLThhYmMtYmZjNjVkNjFmZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJVY84EYxAQgQZf3CHvkkVeRSoQrtv9NHy5s KskIWQKJYXXheYLIC81IxoV8iW3fMdRqiUzq4XKhkRECKoIyr64l51TpqOlwM8qU 119XW2b/EnqQgfLdgIQYWBnkO9n/8OVXhrjCh+DWTDyabZ1Y6V7m7ZIDfEdg9Sdl tFzyXam3kJRWo3B/SyG05ijgzHlIORRLBi0Ivthg8xDnCG/6OX2KuztROymYyDEV T1K47o0xltHDK+8ZRz7L8laILtJuY7SQcaCB4C/XFBQuN4QTOlcCDYSpC14P/viZ vyyEUiwe3EM2XZR4BViAucwMPJUGj7AkHbx9oxZtZTvuPS6ZEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC1MngoEQNM8gyJv+QoR27mkro14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTI4OWFhMTktYTJkOC0z NDgwLThkYjAtMDdhZjdiNzQ3YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCbFw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqsUd/ILwS64lCBz0tPWtjQ5KLspEt1Z5D3QXjAIDWA7A3pRIck qgU3eQSoE35qcoTQgLJXiJig4/AzBBHSj1WTLNzAudvt1wVFddirlC5mnpR7Gd6p 2Kc+3CBbBFVIoK4kKh0ilp011eJX29hPYPQsiHx70MjuT2zvfNpOCjJL8ylkJYyp bxSWM52mVgQKT70CNMObo40shceYH9MdlkEnFxeEJucMEa7P9fpwBs1pMXC1/TLH E3tCUpgc5II81CHN2M3qbfWOGj13YZb7N/vaMUz/nJlCyvlKK10g/0/WEA/dcHfO 5rpCoIF42jhMkmbTqoOyLl8ZidsaS1+Lcqg= -----END CERTIFICATE-----Generated at Sun Apr 6 03:49:59 2025 by rpki-client