$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89df20a6-ace3-37e5-b230-192ae5eee438.roa File: 89df20a6-ace3-37e5-b230-192ae5eee438.roa (raw, json) Hash identifier: bVK3EIoy1ptlc9wqmVyT9f080ohkGXba0P7qJfvBnZ4= Subject key identifier: 4D:72:9C:28:E4:95:35:40:8E:3B:6F:3C:2D:A9:71:AC:51:07:62:F5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C24897D0CE19DD68A08BF80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89df20a6-ace3-37e5-b230-192ae5eee438.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1004:b170::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:89:7d:0c:e1:9d:d6:8a:08:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=e7bf9f0c-659c-4e04-a357-e79ed4ad34e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e6:66:af:7a:8f:30:e6:e4:27:89:98:a8:be: 4f:39:d3:e9:ca:bb:fe:dd:ed:fb:47:63:75:bf:f1: 63:35:85:0e:8b:5b:89:85:4f:f2:9e:a1:f0:a0:cc: 5c:9e:31:5c:4d:3e:21:21:c6:bc:0a:18:c4:7b:c0: cf:eb:ab:c3:8b:f2:ef:26:b1:ef:98:eb:75:03:7a: b7:e8:90:cf:f4:32:be:b4:cd:2c:7a:6b:c8:51:71: 1c:e2:35:e8:ff:43:58:43:47:cd:6c:30:35:8c:04: 22:d4:8a:00:36:5a:12:78:4e:28:b2:df:9e:fb:75: d1:74:28:ba:b1:e4:a9:40:9e:b6:cd:d5:89:af:ac: 2f:ad:a2:f0:0c:eb:a7:f9:8c:4e:01:21:f5:75:87: 52:32:a8:7b:9d:9a:c8:33:85:64:4c:c3:31:dc:8a: 73:1f:64:d4:c0:f1:f6:e3:8c:fb:9b:f0:44:df:c1: 04:38:66:10:0a:11:38:ed:88:cb:89:0c:1a:45:72: 13:1d:cd:0e:88:91:f2:49:f3:76:0b:60:38:44:9c: b8:27:d5:c8:f2:03:69:53:4f:52:c0:b4:0b:54:5b: da:e9:d6:cb:40:01:45:ea:fe:6a:d5:75:e8:c5:78: 05:86:04:a0:cc:fc:bd:fb:19:e3:47:29:a5:3f:46: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:72:9C:28:E4:95:35:40:8E:3B:6F:3C:2D:A9:71:AC:51:07:62:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89df20a6-ace3-37e5-b230-192ae5eee438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1004:b170::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:4b:eb:71:8b:c4:14:70:42:6c:37:ef:3d:6c:4d:fd:04:30: 3d:46:29:14:c9:d4:e4:73:3b:6c:4b:19:ea:9d:ba:09:48:0d: f5:2a:c3:5f:93:61:4a:c7:bf:d6:af:2a:6e:59:d2:d9:dc:0d: a1:08:19:55:84:9c:b5:fb:74:db:54:1d:e2:34:9f:a3:86:a6: a3:92:84:90:6a:22:eb:97:02:90:c2:a5:7c:38:6f:1a:0a:4d: e0:ce:7c:52:05:c8:c2:82:c9:f1:b8:f3:23:81:72:ee:b8:af: d7:4d:e6:6f:c1:de:be:ba:79:5f:62:6c:28:1b:3e:65:31:76: f5:1e:29:de:82:fd:73:b7:d7:79:60:1f:de:4a:90:95:00:dc: 4a:0c:7f:fd:33:c6:37:05:5b:d3:66:5a:08:f1:1d:03:25:53: 0e:f2:90:c9:76:6c:fb:18:5b:f4:15:f3:02:f7:d0:cb:3d:9b: 7e:aa:fb:cf:6d:ab:0f:4c:a9:63:fb:31:4d:29:e5:92:cb:ca: b6:dd:7b:27:57:32:f3:f6:97:92:99:08:09:ca:1b:8e:4f:ae: f2:d1:64:f2:43:0f:bf:fd:81:d9:11:1f:d6:dd:b9:2c:7e:49: 1d:55:4e:84:83:a0:4b:4f:b5:50:6b:b5:cb:82:78:62:2a:91: 77:89:8b:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIl9DOGd1ooIv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZTdiZjlmMGMtNjU5Yy00ZTA0LWEzNTctZTc5ZWQ0YWQzNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuZmr3qPMObkJ4mYqL5POdPpyrv+3e37R2N1 v/FjNYUOi1uJhU/ynqHwoMxcnjFcTT4hIca8ChjEe8DP66vDi/LvJrHvmOt1A3q3 6JDP9DK+tM0semvIUXEc4jXo/0NYQ0fNbDA1jAQi1IoANloSeE4ost+e+3XRdCi6 seSpQJ62zdWJr6wvraLwDOun+YxOASH1dYdSMqh7nZrIM4VkTMMx3IpzH2TUwPH2 44z7m/BE38EEOGYQChE47YjLiQwaRXITHc0OiJHySfN2C2A4RJy4J9XI8gNpU09S wLQLVFva6dbLQAFF6v5q1XXoxXgFhgSgzPy9+xnjRymlP0bZowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE1ynCjklTVAjjtvPC2pcaxRB2L1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODlkZjIwYTYtYWNlMy0z N2U1LWIyMzAtMTkyYWU1ZWVlNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBLFw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNL63GLxBRwQmw37z1sTf0EMD1GKRTJ1ORzO2xLGeqduglIDfUq w1+TYUrHv9avKm5Z0tncDaEIGVWEnLX7dNtUHeI0n6OGpqOShJBqIuuXApDCpXw4 bxoKTeDOfFIFyMKCyfG48yOBcu64r9dN5m/B3r66eV9ibCgbPmUxdvUeKd6C/XO3 13lgH95KkJUA3EoMf/0zxjcFW9NmWgjxHQMlUw7ykMl2bPsYW/QV8wL30Ms9m36q +89tqw9MqWP7MU0p5ZLLyrbdeydXMvP2l5KZCAnKG45PrvLRZPJDD7/9gdkRH9bd uSx+SR1VToSDoEtPtVBrtcuCeGIqkXeJi6g= -----END CERTIFICATE-----Generated at Sun Apr 6 03:50:08 2025 by rpki-client