$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1fc19f-f9a7-326b-a648-89502ad49ab2.roa File: 8e1fc19f-f9a7-326b-a648-89502ad49ab2.roa (raw, json) Hash identifier: v8pG8qX5MdlcCDLv3B2Ptx385G4eaIcXqiEI9PjHiJM= Subject key identifier: 61:D8:AB:A3:BE:50:E6:46:8F:8A:36:F2:AA:62:53:14:5B:9B:68:9E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C246441CE1A7407FD6D1A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1fc19f-f9a7-326b-a648-89502ad49ab2.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1008:b110::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:64:41:ce:1a:74:07:fd:6d:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=c8e8af98-71f8-4b49-bd86-91f5a4d9219c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d6:48:93:6c:de:42:5a:fc:84:bb:97:f0:9b: 80:61:26:28:e7:ff:45:e7:b7:70:00:44:a1:dd:93: 0f:47:84:d5:02:c3:46:1c:57:c8:a3:e1:1c:51:4d: b6:4f:78:94:a5:bc:44:61:8d:59:91:51:20:a0:37: 20:7b:f8:5a:c0:67:24:33:7c:79:e8:d7:16:ae:4f: a3:e6:59:fe:99:2e:3b:f7:20:c3:89:03:f1:ba:20: d3:f0:e2:31:5b:05:cd:e3:5a:1b:42:79:8f:57:d2: 0f:75:ff:2e:11:22:8f:2d:6b:fe:e6:62:50:ae:de: 41:25:6b:e4:36:47:25:42:e8:3d:a1:e1:5a:8b:ec: 92:2a:c9:a4:d6:bc:09:e0:29:83:a2:4a:d2:40:b3: ce:44:25:07:00:c9:87:7b:8c:91:c2:bb:2f:77:61: 3e:a3:e5:3d:77:9b:6b:93:36:d1:c9:99:52:03:44: df:41:92:e3:fb:a5:c3:96:d5:c8:35:c2:94:c1:cc: f3:1e:c4:46:58:7c:08:cd:96:ba:e2:c3:6b:bd:24: a6:c9:bf:14:d5:d0:2e:45:2a:9b:70:7a:f9:09:2e: 51:fd:58:44:ce:f0:91:d7:70:c0:35:59:ce:78:44: 9b:65:7c:69:b2:d6:94:ec:08:5f:66:e3:b9:31:08: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D8:AB:A3:BE:50:E6:46:8F:8A:36:F2:AA:62:53:14:5B:9B:68:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e1fc19f-f9a7-326b-a648-89502ad49ab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:b110::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:2d:d0:1f:4e:2d:9b:56:d9:f0:02:0e:45:4f:5b:81:bc:3b: f3:e6:66:54:00:22:6e:3a:90:75:e9:bd:43:f6:ac:cc:e4:9d: e8:db:e8:60:bc:08:80:65:30:5a:dc:b8:35:b8:5e:84:79:0b: 68:b0:02:db:bc:f9:db:a6:20:16:34:45:18:d4:b5:7a:36:bf: 68:64:18:a0:b9:e8:04:32:e1:cb:bb:b2:19:c7:60:58:77:d5: 7c:1e:ec:ea:b5:ac:6b:c3:d8:65:25:3e:a0:f6:bc:a7:bd:06: 89:2c:e7:f0:43:45:af:73:a3:63:8c:83:5f:aa:98:a2:19:41: bc:b5:f7:cf:cd:75:46:1c:67:eb:4f:b1:30:e6:eb:89:cd:e5: 50:e3:e8:fd:0a:bd:aa:60:22:a1:b4:29:28:be:71:ff:d9:74: 2f:3a:2b:21:ec:13:fd:00:ea:eb:a5:8c:d6:bc:ca:1f:46:6d: 05:c4:11:90:4a:3e:b4:c2:3d:47:3f:a0:a2:e3:7e:16:5e:15: 38:b6:d1:9d:93:9a:50:ae:43:aa:aa:b5:16:63:fa:a3:fa:ce: 57:3a:50:44:03:0f:a6:36:be:97:08:20:b4:14:40:e8:e5:69: 08:a6:2a:b0:9d:d4:74:03:e0:ed:0c:4e:7c:f0:8b:99:d7:fd: 39:43:52:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJGRBzhp0B/1tGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YzhlOGFmOTgtNzFmOC00YjQ5LWJkODYtOTFmNWE0ZDkyMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtZIk2zeQlr8hLuX8JuAYSYo5/9F57dwAESh 3ZMPR4TVAsNGHFfIo+EcUU22T3iUpbxEYY1ZkVEgoDcge/hawGckM3x56NcWrk+j 5ln+mS479yDDiQPxuiDT8OIxWwXN41obQnmPV9IPdf8uESKPLWv+5mJQrt5BJWvk NkclQug9oeFai+ySKsmk1rwJ4CmDokrSQLPORCUHAMmHe4yRwrsvd2E+o+U9d5tr kzbRyZlSA0TfQZLj+6XDltXINcKUwczzHsRGWHwIzZa64sNrvSSmyb8U1dAuRSqb cHr5CS5R/VhEzvCR13DANVnOeESbZXxpstaU7AhfZuO5MQho5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGHYq6O+UOZGj4o28qpiUxRbm2ieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGUxZmMxOWYtZjlhNy0z MjZiLWE2NDgtODk1MDJhZDQ5YWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCLEQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYt0B9OLZtW2fACDkVPW4G8O/PmZlQAIm46kHXpvUP2rMzknejb 6GC8CIBlMFrcuDW4XoR5C2iwAtu8+dumIBY0RRjUtXo2v2hkGKC56AQy4cu7shnH YFh31Xwe7Oq1rGvD2GUlPqD2vKe9Boks5/BDRa9zo2OMg1+qmKIZQby198/NdUYc Z+tPsTDm64nN5VDj6P0KvapgIqG0KSi+cf/ZdC86KyHsE/0A6uuljNa8yh9GbQXE EZBKPrTCPUc/oKLjfhZeFTi20Z2TmlCuQ6qqtRZj+qP6zlc6UEQDD6Y2vpcIILQU QOjlaQimKrCd1HQD4O0MTnzwi5nX/TlDUuA= -----END CERTIFICATE-----Generated at Sat Apr 5 18:41:40 2025 by rpki-client