$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fda56c3-a63c-326c-bd17-f9810a3262a5.roa File: 8fda56c3-a63c-326c-bd17-f9810a3262a5.roa (raw, json) Hash identifier: xy4XbDFXDv4j0qmb95uCddnx6QW6vgmzwOQen5YFOus= Subject key identifier: 1F:C4:6C:3C:98:05:73:43:BE:F1:63:9D:B0:DE:06:12:6A:FA:52:6E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400EA58937B26BDD6078C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fda56c3-a63c-326c-bd17-f9810a3262a5.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100c:b2fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:ea:58:93:7b:26:bd:d6:07:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=bf601b21-cfc2-4667-b16f-96adc525e797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:27:34:4b:d2:5e:1a:9d:e4:a2:7d:60:31: ff:cf:1a:34:2b:3c:ac:b5:4f:27:b6:ac:59:af:5b: 5e:b5:d1:ea:ea:57:c7:38:ea:09:0f:d8:f5:46:35: 7d:19:50:02:44:13:4c:d4:87:99:d3:5c:ce:97:7f: 9b:e7:5c:19:62:d7:5d:40:fd:ad:15:9f:95:a6:55: 0d:5c:51:0a:ed:8a:a2:fc:d4:44:eb:9c:1f:24:59: 5e:66:c0:b4:a6:a2:86:b5:0f:9c:fe:38:05:fb:7b: ae:1d:69:a5:94:6a:ad:a3:4a:06:b8:00:6b:ab:15: 0f:5c:00:85:0d:86:ed:f4:68:90:81:cf:31:60:5e: 8a:2a:12:0b:e4:2a:cb:e5:3b:28:6c:66:c0:3f:a9: e0:02:bd:9d:47:c7:e7:49:88:2e:86:42:f9:c2:a9: 59:d7:5d:23:29:27:5e:e3:a6:e0:53:93:a9:ff:52: 4a:c5:2b:2b:e8:70:63:e7:f0:be:11:40:0a:fc:28: ad:51:9c:17:ac:2a:f6:17:95:1e:2e:18:d1:80:37: ac:48:86:e8:66:44:b0:ab:8d:20:fb:02:d7:9b:52: cf:7c:68:98:92:81:fe:a1:cb:99:be:d6:70:98:3a: b0:8d:1e:06:17:b4:28:be:a2:59:a9:70:41:55:33: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:6C:3C:98:05:73:43:BE:F1:63:9D:B0:DE:06:12:6A:FA:52:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fda56c3-a63c-326c-bd17-f9810a3262a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100c:b2fc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e6:d5:20:49:ed:cc:ca:6e:f1:35:61:df:5e:6c:82:22:aa: 76:76:b8:e0:04:ec:51:74:97:97:5c:8c:1b:f0:44:40:59:16: 22:d0:ad:6a:a6:a0:11:e5:38:7c:fa:31:d9:dc:b1:64:ee:e5: cd:00:e7:77:41:39:e3:f7:90:ca:34:5e:de:f9:88:65:51:bb: ba:92:8c:c0:37:6a:e8:d2:35:88:05:ea:25:12:67:57:fa:f0: 42:e3:0a:a5:4b:d5:f4:ca:ab:07:d0:5f:e6:78:dc:fa:e7:e2: b1:99:ee:0e:0e:56:cf:a2:5b:96:2e:29:de:72:af:f8:aa:81: 4b:7d:0e:d6:8e:c1:87:0a:f8:b8:7c:96:de:82:9e:f2:d1:5f: 0d:28:9e:69:2f:01:b2:07:e7:06:1a:b7:c2:eb:63:e1:b1:2e: 03:62:fc:4d:6b:9f:a1:3f:93:9a:96:5a:41:6e:5d:3c:56:99: 22:56:5d:b0:e3:65:77:37:e3:97:d4:e9:11:68:66:13:07:32: 1a:80:c5:88:cd:fe:1c:bf:50:97:8e:99:2f:fe:ae:c4:9e:b7: fb:b0:97:91:d9:d5:a9:f9:e8:c9:08:27:31:3b:24:00:e4:ad: 3d:6c:bc:f1:b8:f0:39:79:87:a4:89:91:68:19:ba:a2:4e:90: a7:4c:72:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOpYk3smvdYHjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk YmY2MDFiMjEtY2ZjMi00NjY3LWIxNmYtOTZhZGM1MjVlNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpwnNEvSXhqd5KJ9YDH/zxo0KzystU8ntqxZ r1tetdHq6lfHOOoJD9j1RjV9GVACRBNM1IeZ01zOl3+b51wZYtddQP2tFZ+VplUN XFEK7Yqi/NRE65wfJFleZsC0pqKGtQ+c/jgF+3uuHWmllGqto0oGuABrqxUPXACF DYbt9GiQgc8xYF6KKhIL5CrL5TsobGbAP6ngAr2dR8fnSYguhkL5wqlZ110jKSde 46bgU5Op/1JKxSsr6HBj5/C+EUAK/CitUZwXrCr2F5UeLhjRgDesSIboZkSwq40g +wLXm1LPfGiYkoH+ocuZvtZwmDqwjR4GF7QovqJZqXBBVTNcSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB/EbDyYBXNDvvFjnbDeBhJq+lJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGZkYTU2YzMtYTYzYy0z MjZjLWJkMTctZjk4MTBhMzI2MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQDLL8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTm1SBJ7czKbvE1Yd9ebIIiqnZ2uOAE7FF0l5dcjBvwREBZFiLQ rWqmoBHlOHz6MdncsWTu5c0A53dBOeP3kMo0Xt75iGVRu7qSjMA3aujSNYgF6iUS Z1f68ELjCqVL1fTKqwfQX+Z43Prn4rGZ7g4OVs+iW5YuKd5yr/iqgUt9DtaOwYcK +Lh8lt6CnvLRXw0onmkvAbIH5wYat8LrY+GxLgNi/E1rn6E/k5qWWkFuXTxWmSJW XbDjZXc345fU6RFoZhMHMhqAxYjN/hy/UJeOmS/+rsSet/uwl5HZ1an56MkIJzE7 JADkrT1svPG48Dl5h6SJkWgZuqJOkKdMcrs= -----END CERTIFICATE-----Generated at Wed Apr 9 12:48:42 2025 by rpki-client