$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e8108f7-ba51-345a-9293-4fce36e3d4be.roa File: 8e8108f7-ba51-345a-9293-4fce36e3d4be.roa (raw, json) Hash identifier: FnwK9vpT/ENIiD+TtpTZKLniUYNUdF9Hj1zF6D1C18A= Subject key identifier: 58:B5:C7:A6:11:D5:2C:9E:66:5F:13:A9:66:D1:A3:7A:C8:78:3C:A5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584949FEB0834EC680B209D077C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e8108f7-ba51-345a-9293-4fce36e3d4be.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 6167 IP address blocks: 2600:1017:b830::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:b0:83:4e:c6:80:b2:09:d0:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=2bec155d-cbcd-414f-abbc-cb8149631f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:24:95:9f:5a:2c:33:e7:75:01:8b:a1:5b: 2d:94:ef:30:02:b4:6e:6f:62:7c:1e:c1:0a:9e:aa: f0:53:8d:33:92:ba:f6:16:fb:6c:dc:28:76:ad:91: 56:71:9d:1d:c0:e0:00:49:97:70:53:55:9e:d0:5c: 25:88:33:0f:87:c5:19:e1:bc:9a:69:4f:78:16:6d: 06:00:e1:4e:db:49:8c:d3:4e:c1:9b:c8:6a:4f:53: 99:c3:04:23:47:20:23:6f:a9:e7:17:7a:95:58:8d: e7:54:10:87:84:a0:f3:b2:4a:06:4a:0e:5f:ae:52: d7:c0:f9:15:eb:46:70:f4:cb:d5:8b:3e:f2:7f:20: 84:0e:0c:a2:27:ed:5e:a8:4e:42:4a:84:8c:ce:7a: ce:61:32:88:74:0b:7a:d9:87:ae:1f:61:03:84:aa: 8f:16:ff:92:d9:1f:54:56:21:99:93:d5:1a:e5:6d: e8:c6:32:eb:be:b5:bc:0d:32:8d:4b:35:be:c8:93: f5:e3:c7:d0:eb:db:e3:8e:39:d4:c1:6a:7f:1f:41: 9e:35:c3:60:6b:86:59:a8:9f:99:9c:af:38:30:21: 38:a8:25:bc:ef:9a:8e:a7:4f:d0:ab:a6:9b:b0:84: e5:fd:1c:b0:f1:c7:f0:30:35:19:1d:84:8f:00:ee: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B5:C7:A6:11:D5:2C:9E:66:5F:13:A9:66:D1:A3:7A:C8:78:3C:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e8108f7-ba51-345a-9293-4fce36e3d4be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1017:b830::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:6e:40:69:e0:38:f8:89:2d:6a:ff:e4:0c:7d:55:d7:e7:50: f1:9e:a9:52:ad:98:bb:ec:2f:de:7e:ae:a8:2c:33:73:c7:22: 26:11:f8:00:4e:31:47:6c:91:ef:e1:63:57:3d:d9:ea:44:03: 86:2c:48:17:d6:f7:5b:58:48:89:7f:d2:7c:e8:9f:d0:8a:58: a7:34:87:4b:9a:f7:12:73:4a:44:31:3f:69:e8:d5:5e:8d:c3: 5e:df:6a:97:9f:f3:7f:b3:13:14:da:46:e5:33:43:78:90:54: 62:15:b7:b0:e5:ed:4b:44:d3:34:04:ed:1a:0d:f1:13:6f:c8: 97:8d:9f:16:07:96:14:41:3f:70:62:e9:42:9c:44:84:3b:2f: 42:a7:86:ec:72:e2:03:99:1b:78:93:b2:b1:69:ae:fd:fb:3a: 87:42:41:55:54:94:ff:bb:40:23:cb:66:02:13:08:ed:d1:4d: 44:64:66:ce:49:40:2c:a3:1e:53:43:c0:96:58:9a:ca:43:35: 8c:db:f3:d8:24:3c:19:7c:f1:70:9c:03:99:f2:21:3a:76:25: 54:1f:ec:a5:98:b7:10:d0:cb:e0:ad:90:53:3e:74:b7:8a:62: 83:19:21:04:34:14:83:f0:55:0b:fa:3f:44:f5:ef:33:7f:11: 27:d3:c1:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/rCDTsaAsgnQd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MmJlYzE1NWQtY2JjZC00MTRmLWFiYmMtY2I4MTQ5NjMxZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxEklZ9aLDPndQGLoVstlO8wArRub2J8HsEK nqrwU40zkrr2Fvts3Ch2rZFWcZ0dwOAASZdwU1We0FwliDMPh8UZ4byaaU94Fm0G AOFO20mM007Bm8hqT1OZwwQjRyAjb6nnF3qVWI3nVBCHhKDzskoGSg5frlLXwPkV 60Zw9MvViz7yfyCEDgyiJ+1eqE5CSoSMznrOYTKIdAt62YeuH2EDhKqPFv+S2R9U ViGZk9Ua5W3oxjLrvrW8DTKNSzW+yJP148fQ69vjjjnUwWp/H0GeNcNga4ZZqJ+Z nK84MCE4qCW875qOp0/Qq6absITl/Ryw8cfwMDUZHYSPAO4aqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFi1x6YR1SyeZl8TqWbRo3rIeDylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGU4MTA4ZjctYmE1MS0z NDVhLTkyOTMtNGZjZTM2ZTNkNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQF7gw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHxuQGngOPiJLWr/5Ax9VdfnUPGeqVKtmLvsL95+rqgsM3PHIiYR +ABOMUdske/hY1c92epEA4YsSBfW91tYSIl/0nzon9CKWKc0h0ua9xJzSkQxP2no 1V6Nw17fapef83+zExTaRuUzQ3iQVGIVt7Dl7UtE0zQE7RoN8RNvyJeNnxYHlhRB P3Bi6UKcRIQ7L0Knhuxy4gOZG3iTsrFprv37OodCQVVUlP+7QCPLZgITCO3RTURk Zs5JQCyjHlNDwJZYmspDNYzb89gkPBl88XCcA5nyITp2JVQf7KWYtxDQy+CtkFM+ dLeKYoMZIQQ0FIPwVQv6P0T17zN/ESfTwUA= -----END CERTIFICATE-----Generated at Sat Apr 5 21:46:22 2025 by rpki-client