$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5358dd2f-7aa5-3c81-a43f-bda35954d12c.roa File: 5358dd2f-7aa5-3c81-a43f-bda35954d12c.roa (raw, json) Hash identifier: TT9/OUyxhXzzDVTzOgOobsQtDXiPFs2PuTX7THV4/dQ= Subject key identifier: 4B:04:AC:32:34:9B:BA:8A:87:99:D0:08:CF:4B:4F:F1:CA:43:1D:60 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848D9C2102115487E9B8602D880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5358dd2f-7aa5-3c81-a43f-bda35954d12c.roa Signing time: Tue 11 Feb 2025 20:08:19 +0000 ROA not before: Tue 11 Feb 2025 20:08:19 +0000 ROA not after: Mon 12 May 2025 19:08:19 +0000 asID: 6167 IP address blocks: 2607:f160:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:c2:10:21:15:48:7e:9b:86:02:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 11 20:08:19 2025 GMT Not After : May 12 19:08:19 2025 GMT Subject: CN=c7a417ee-94ec-47eb-8ad1-9131cf7c137b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c4:b7:2e:b0:73:0f:2e:6a:35:bb:41:cf:a6: 5e:18:fd:d8:63:ae:0b:4a:79:b1:78:42:32:05:d9: c1:35:eb:cb:49:00:9d:ec:cb:f6:7b:bd:35:f3:2b: f9:d4:27:6a:4f:35:0a:1f:13:09:00:ab:cc:ce:cc: 99:d9:43:c8:65:d0:fa:5c:4e:e4:55:4e:4e:ae:44: 3a:ce:fd:90:f7:d2:db:13:dc:03:55:35:fa:c3:ba: f7:ac:32:7e:5f:ea:04:0c:10:59:e9:33:12:b9:19: e1:19:32:16:ca:96:a0:13:99:11:10:5f:8d:43:9a: 03:a7:5c:81:49:3a:91:b3:b1:00:13:98:fa:2f:93: b0:53:9b:7e:4a:1b:0d:bd:ad:12:f1:db:fa:b3:67: c0:1e:fa:c4:07:28:e1:84:b9:a9:d8:99:83:24:3e: c3:04:92:b3:29:ac:1b:3c:e6:ff:0f:9a:8a:f3:90: bc:50:1d:7b:ab:9f:8f:a0:d6:68:97:c3:15:76:e6: 7e:f6:3a:f0:03:88:82:bf:d0:cd:82:4b:a8:2c:c1: ee:9f:aa:02:cd:b0:dd:71:d8:71:d4:39:c1:09:da: ce:89:76:a2:ae:e0:96:6f:a0:52:10:e1:3c:03:cd: a3:3a:4c:6b:9e:63:02:50:16:19:0b:1a:6b:eb:f6: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:04:AC:32:34:9B:BA:8A:87:99:D0:08:CF:4B:4F:F1:CA:43:1D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5358dd2f-7aa5-3c81-a43f-bda35954d12c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2607:f160:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8a:78:78:2e:88:a8:02:0d:59:8d:6f:ed:51:dd:41:f3:85: 95:26:69:7c:e1:b3:8e:57:ba:46:a8:43:e8:4d:2c:4d:45:f8: 6a:2f:19:51:0d:76:dc:9c:15:8c:1e:e5:f8:24:ca:eb:7d:37: 5a:a1:51:2b:26:35:8f:55:d1:ea:b4:a5:e5:7e:04:5b:b9:fd: b7:86:02:7e:fd:b5:cd:5d:d9:76:eb:ce:02:0d:3d:1c:e9:39: 81:ee:2b:f0:79:fb:ad:ff:fc:8a:87:07:b8:07:92:b1:49:9a: 07:3e:d2:5f:bc:d2:1f:23:08:3c:fb:09:4b:e4:77:18:45:87: f0:9b:4d:ee:5c:76:10:a3:06:b4:9f:ca:97:d1:b4:af:c9:39: ed:9e:ac:7b:57:d1:89:68:76:ae:4f:17:4f:26:1f:92:1f:fd: f9:4e:eb:42:e1:ea:cf:ec:49:ba:57:86:53:a3:c9:02:2e:f6: cd:ad:1e:ac:59:a7:5b:3d:e0:26:49:31:05:5e:aa:69:f0:a8: e1:0e:32:2b:6b:5e:38:6b:02:e4:f4:96:25:b4:1f:c8:9c:7a: ef:1a:b8:24:ab:12:b0:c1:e1:60:b9:1d:df:6f:46:ac:13:41: 63:23:35:93:5f:54:97:a8:91:17:3d:bb:30:12:22:af:52:26: 5d:aa:c4:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjZwhAhFUh+m4YC2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxMTIwMDgxOVoXDTI1MDUxMjE5MDgxOVowLzEtMCsGA1UEAxMk YzdhNDE3ZWUtOTRlYy00N2ViLThhZDEtOTEzMWNmN2MxMzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8S3LrBzDy5qNbtBz6ZeGP3YY64LSnmxeEIy BdnBNevLSQCd7Mv2e7018yv51CdqTzUKHxMJAKvMzsyZ2UPIZdD6XE7kVU5OrkQ6 zv2Q99LbE9wDVTX6w7r3rDJ+X+oEDBBZ6TMSuRnhGTIWypagE5kREF+NQ5oDp1yB STqRs7EAE5j6L5OwU5t+ShsNva0S8dv6s2fAHvrEByjhhLmp2JmDJD7DBJKzKawb POb/D5qK85C8UB17q5+PoNZol8MVduZ+9jrwA4iCv9DNgkuoLMHun6oCzbDdcdhx 1DnBCdrOiXairuCWb6BSEOE8A82jOkxrnmMCUBYZCxpr6/bJnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEsErDI0m7qKh5nQCM9LT/HKQx1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTM1OGRkMmYtN2FhNS0z YzgxLWE0M2YtYmRhMzU5NTRkMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfxYABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESKeHguiKgCDVmNb+1R3UHzhZUmaXzhs45XukaoQ+hNLE1F+Gov GVENdtycFYwe5fgkyut9N1qhUSsmNY9V0eq0peV+BFu5/beGAn79tc1d2XbrzgIN PRzpOYHuK/B5+63//IqHB7gHkrFJmgc+0l+80h8jCDz7CUvkdxhFh/CbTe5cdhCj BrSfypfRtK/JOe2erHtX0Ylodq5PF08mH5If/flO60Lh6s/sSbpXhlOjyQIu9s2t HqxZp1s94CZJMQVeqmnwqOEOMitrXjhrAuT0liW0H8iceu8auCSrErDB4WC5Hd9v RqwTQWMjNZNfVJeokRc9uzASIq9SJl2qxPw= -----END CERTIFICATE-----Generated at Sat Apr 5 18:08:18 2025 by rpki-client