$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b39a0af-c021-3fa4-89db-994d894801bd.roa File: 7b39a0af-c021-3fa4-89db-994d894801bd.roa (raw, json) Hash identifier: xL9eLYdxW2BPb6w6TQ9LXmdKNN0V0BM2KzTOLeqC+Ls= Subject key identifier: D9:30:92:FF:A5:91:D0:94:D6:36:02:81:3E:E4:12:42:07:4F:B9:29 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400ECC2095044A6AEE91880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b39a0af-c021-3fa4-89db-994d894801bd.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100d:b0c6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:ec:c2:09:50:44:a6:ae:e9:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=0c3ca502-95a5-4bfb-95fe-247dca39c2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:58:8f:93:a5:b6:2f:23:25:26:b9:ea:6c:83: e1:d2:f3:01:c7:3b:b6:89:08:44:3c:ad:0a:e1:ff: 62:9b:bd:b9:0b:6d:d5:d1:a0:d1:f5:3f:a0:c6:42: 25:3c:6a:0d:fc:a2:db:8e:9d:d6:47:98:a5:b8:76: b5:e7:90:85:8c:5f:7e:5e:be:49:2a:dd:9f:c3:86: bd:17:85:0c:ee:e5:5c:88:1f:19:1d:f0:65:35:f1: b3:fb:0a:d9:f3:04:b2:5d:83:57:02:be:0c:8d:a5: d3:7c:b0:d4:29:8a:b6:b2:3f:31:83:6b:93:88:38: 06:f2:ee:9d:4a:2f:91:48:65:dd:58:21:d1:9d:38: 1a:b2:15:b5:4d:e2:8b:a3:74:f8:18:40:88:82:6b: 68:97:64:d9:fe:5b:2d:fb:c3:9c:ce:0c:e0:67:48: 87:09:5d:25:be:68:96:14:42:fb:d3:aa:49:6c:e2: f9:19:f2:e7:71:75:90:59:ab:c6:8e:ea:d7:20:0a: d6:f4:9f:00:cc:fc:51:e4:ce:ab:d1:62:e8:97:2b: 2f:cb:5c:1c:07:f2:28:83:4b:48:ce:bb:fd:95:98: 5e:85:04:b1:a6:37:71:08:5a:5c:4f:99:f1:8a:49: 24:44:7a:87:98:d0:9c:67:79:af:f5:73:f9:94:a8: a0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:30:92:FF:A5:91:D0:94:D6:36:02:81:3E:E4:12:42:07:4F:B9:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7b39a0af-c021-3fa4-89db-994d894801bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:b0c6::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d0:ff:f3:e3:66:da:be:0a:ef:b0:17:89:4b:0d:b0:af:49: 0d:78:ad:21:d5:14:bb:a2:a3:91:5a:79:bd:4f:e0:b8:15:2f: 52:85:97:3c:58:4f:6b:0c:00:22:7c:62:92:39:36:1f:32:f0: 15:9a:e6:58:02:69:3d:94:8b:40:07:ca:5d:42:ac:35:42:ad: e8:24:84:5b:24:b2:56:31:d6:da:d9:93:48:dc:c5:05:18:a5: 21:54:24:03:ae:e4:2b:13:15:74:79:3b:b1:ac:c9:03:08:4d: 72:0c:d1:dc:0d:80:ff:d5:db:bc:31:f5:51:55:cf:7e:a0:5d: 0e:e5:a4:18:6b:47:a7:f0:b0:8a:5d:e0:03:e0:f9:ab:88:76: 7e:1e:81:8d:30:3c:06:95:0f:7c:32:32:ed:6f:3f:ee:02:bd: f5:2e:06:d8:61:bf:8f:e8:65:22:b9:19:cf:56:8c:01:e9:44: f6:c6:e5:2f:17:ee:f2:e4:1d:91:e8:0e:c7:69:7a:b1:48:b9: e8:18:07:b3:b4:6d:ef:ad:48:70:b6:fa:20:5f:3a:b5:51:d8: e2:f4:a5:da:1e:90:f9:67:ee:b0:e8:d0:86:3f:3b:13:dd:a5: 63:a6:f9:67:f6:29:76:3a:20:80:09:31:1e:e2:0f:48:34:0e: c3:ce:df:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOzCCVBEpq7pGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MGMzY2E1MDItOTVhNS00YmZiLTk1ZmUtMjQ3ZGNhMzljMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkliPk6W2LyMlJrnqbIPh0vMBxzu2iQhEPK0K 4f9im725C23V0aDR9T+gxkIlPGoN/KLbjp3WR5iluHa155CFjF9+Xr5JKt2fw4a9 F4UM7uVciB8ZHfBlNfGz+wrZ8wSyXYNXAr4MjaXTfLDUKYq2sj8xg2uTiDgG8u6d Si+RSGXdWCHRnTgashW1TeKLo3T4GECIgmtol2TZ/lst+8OczgzgZ0iHCV0lvmiW FEL706pJbOL5GfLncXWQWavGjurXIArW9J8AzPxR5M6r0WLolysvy1wcB/Iog0tI zrv9lZhehQSxpjdxCFpcT5nxikkkRHqHmNCcZ3mv9XP5lKigdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNkwkv+lkdCU1jYCgT7kEkIHT7kpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2IzOWEwYWYtYzAyMS0z ZmE0LTg5ZGItOTk0ZDg5NDgwMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbDG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFfQ//PjZtq+Cu+wF4lLDbCvSQ14rSHVFLuio5Faeb1P4LgVL1KF lzxYT2sMACJ8YpI5Nh8y8BWa5lgCaT2Ui0AHyl1CrDVCregkhFskslYx1trZk0jc xQUYpSFUJAOu5CsTFXR5O7GsyQMITXIM0dwNgP/V27wx9VFVz36gXQ7lpBhrR6fw sIpd4APg+auIdn4egY0wPAaVD3wyMu1vP+4CvfUuBthhv4/oZSK5Gc9WjAHpRPbG 5S8X7vLkHZHoDsdperFIuegYB7O0be+tSHC2+iBfOrVR2OL0pdoekPln7rDo0IY/ OxPdpWOm+Wf2KXY6IIAJMR7iD0g0DsPO38I= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:34 2025 by rpki-client