$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80a469b8-5f2b-305c-a57c-93cdc38a3206.roa File: 80a469b8-5f2b-305c-a57c-93cdc38a3206.roa (raw, json) Hash identifier: q0iQw09Zj9VpITohywviZJ7Lp7ofTefEfpcA5A6fv4Y= Subject key identifier: 9C:34:E5:33:DD:9C:7C:42:DA:DE:B0:59:C5:4D:91:97:7F:C9:83:59 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400D6DE50DA08FC2A433640 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80a469b8-5f2b-305c-a57c-93cdc38a3206.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100f:b020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:d6:de:50:da:08:fc:2a:43:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=4d4122f0-6300-443e-906d-12f629048426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:a8:58:3b:d1:9e:aa:7c:9b:07:25:5c:21: 6d:d9:5e:24:a7:5e:34:56:1a:f4:e9:ab:55:37:23: 68:03:9c:7d:76:61:4f:33:be:8b:e9:d3:32:b7:f6: b0:5f:27:0c:f2:1d:7e:f2:a8:ae:ec:f2:8b:56:8a: 6f:03:7e:86:95:4a:f7:cd:8d:86:a3:34:55:a0:a9: c3:52:11:b1:cc:ae:25:97:85:8f:50:1c:4c:60:44: e0:f6:4c:bd:23:a8:39:8d:96:64:12:db:c9:de:ad: c1:33:84:19:8d:7c:6d:be:4a:2e:8c:64:3f:4a:ac: 9b:f8:d6:91:e6:b3:e2:59:50:36:88:ee:33:0c:10: 1f:46:04:f6:06:36:86:fc:18:3e:c6:01:9e:a9:69: cc:ba:ce:50:fb:79:1c:65:a2:3e:aa:c1:20:38:43: 9e:bd:00:c1:35:5f:8b:9f:a6:23:1e:1d:df:2b:d7: af:45:2d:3f:92:4a:5d:9f:38:ef:99:c0:ab:91:9e: 50:d5:5a:b2:0c:32:e8:84:3f:ac:6a:01:26:71:e5: c4:1b:96:bf:c7:8c:31:9a:c9:c9:4b:d9:50:81:d3: c5:fa:7f:37:3c:1f:0d:41:73:4d:a8:0e:37:1d:33: f1:6c:3e:98:f1:06:13:bb:1a:59:49:2d:ad:fa:64: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:34:E5:33:DD:9C:7C:42:DA:DE:B0:59:C5:4D:91:97:7F:C9:83:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/80a469b8-5f2b-305c-a57c-93cdc38a3206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100f:b020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f4:db:3e:ab:51:6d:04:3c:3b:a1:6e:5a:3c:3b:34:a0:5b: 60:1b:90:3c:cf:84:3a:69:97:55:d4:a3:1c:5a:cf:f8:94:06: 14:8a:e8:b2:0c:12:e2:c9:5e:09:c5:c6:91:75:70:87:6f:4c: 66:b6:f9:57:82:e8:2c:be:61:c4:53:03:6a:f4:ab:59:92:c0: 51:c7:98:7c:e3:ec:2c:1e:06:ca:8d:3c:13:8d:40:37:1a:37: 23:45:e0:37:24:a1:3e:79:20:93:dc:28:24:02:1f:10:8e:65: 08:b7:d0:c3:ae:ce:ed:c4:32:5c:ba:a4:7a:f0:58:47:e3:fa: da:82:f8:08:55:b1:2b:02:e3:72:85:d7:c7:67:4f:40:ad:d7: e1:a3:64:22:20:2c:98:22:12:a5:ea:49:10:71:49:0f:e0:1c: 69:41:e7:45:d5:56:b3:9f:3a:ed:ad:42:0a:c7:84:16:b7:11: 99:2d:d1:d9:16:34:73:2a:63:fe:13:10:13:f6:ef:e8:f3:3a: e2:95:5c:dc:3a:a3:6f:36:8d:9d:6c:c4:de:e7:2d:3b:f8:8b: 75:a7:a0:1d:4f:e2:ef:b2:68:fb:ec:df:56:a5:ab:41:42:df: 68:a3:92:d3:34:a4:5b:04:cc:2c:0b:7b:d7:e8:14:a9:be:2e: 64:b1:8f:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikANbeUNoI/CpDNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NGQ0MTIyZjAtNjMwMC00NDNlLTkwNmQtMTJmNjI5MDQ4NDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxGoWDvRnqp8mwclXCFt2V4kp140Vhr06atV NyNoA5x9dmFPM76L6dMyt/awXycM8h1+8qiu7PKLVopvA36GlUr3zY2GozRVoKnD UhGxzK4ll4WPUBxMYETg9ky9I6g5jZZkEtvJ3q3BM4QZjXxtvkoujGQ/Sqyb+NaR 5rPiWVA2iO4zDBAfRgT2BjaG/Bg+xgGeqWnMus5Q+3kcZaI+qsEgOEOevQDBNV+L n6YjHh3fK9evRS0/kkpdnzjvmcCrkZ5Q1VqyDDLohD+sagEmceXEG5a/x4wxmsnJ S9lQgdPF+n83PB8NQXNNqA43HTPxbD6Y8QYTuxpZSS2t+mRgzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJw05TPdnHxC2t6wWcVNkZd/yYNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODBhNDY5YjgtNWYyYi0z MDVjLWE1N2MtOTNjZGMzOGEzMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQD7Ag MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEv02z6rUW0EPDuhblo8OzSgW2AbkDzPhDppl1XUoxxaz/iUBhSK 6LIMEuLJXgnFxpF1cIdvTGa2+VeC6Cy+YcRTA2r0q1mSwFHHmHzj7CweBsqNPBON QDcaNyNF4DckoT55IJPcKCQCHxCOZQi30MOuzu3EMly6pHrwWEfj+tqC+AhVsSsC 43KF18dnT0Ct1+GjZCIgLJgiEqXqSRBxSQ/gHGlB50XVVrOfOu2tQgrHhBa3EZkt 0dkWNHMqY/4TEBP27+jzOuKVXNw6o282jZ1sxN7nLTv4i3WnoB1P4u+yaPvs31al q0FC32ijktM0pFsEzCwLe9foFKm+LmSxj2s= -----END CERTIFICATE-----Generated at Sun Apr 6 07:22:29 2025 by rpki-client