$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/941f84bb-b643-3daa-8455-81b8d1796c57.roa File: 941f84bb-b643-3daa-8455-81b8d1796c57.roa (raw, json) Hash identifier: jME2oRfCzhSm4pvNu1286bKNtjaK8a3qZGrAOUbPxGA= Subject key identifier: 54:F1:4B:25:69:A9:79:96:2C:76:21:46:7A:C9:6A:02:D7:4F:00:25 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C248B1998D719C46F0ADF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/941f84bb-b643-3daa-8455-81b8d1796c57.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1008:b300::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:8b:19:98:d7:19:c4:6f:0a:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=bc3d591a-c9b9-470a-9dd2-1457c83777c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:46:8e:37:ee:ec:64:23:90:9d:08:c3:14: cb:07:d3:8f:4d:d0:6c:52:65:f6:10:22:92:18:b5: 7e:d2:30:83:65:24:29:7e:d0:02:8b:57:c6:58:63: 23:3f:e0:bd:83:2a:ec:d8:53:dc:70:30:6c:cf:8f: ad:ad:5d:33:61:a3:ad:ce:91:7c:f9:eb:28:04:a4: 99:d6:62:d2:46:e2:35:3c:18:99:77:c6:9a:b4:a8: bc:72:64:47:9f:fa:3a:28:ef:29:72:9b:f3:77:ca: c9:1c:96:29:f5:8e:96:6a:7f:80:44:a3:00:e1:7e: f6:60:c8:50:8d:88:da:2e:c0:d0:63:57:25:39:67: f5:f3:44:50:af:b8:27:d9:a3:95:ad:7f:d7:b0:61: e8:72:b0:d2:59:ae:bf:13:eb:d5:c6:54:09:a4:40: ee:cc:05:16:10:79:00:d9:0d:5f:57:59:1e:5b:a2: c3:e4:87:bb:c0:6f:a5:9b:2c:7f:d0:da:2c:75:c7: cf:df:f8:86:b0:bb:66:c3:e2:41:71:db:33:ab:07: f3:de:f6:67:6e:5e:df:c0:41:7d:c5:7b:09:93:26: 8b:1d:60:8b:8e:fc:f9:f7:ba:3a:31:c9:e4:b1:47: de:75:26:3c:bf:43:98:76:56:6f:b5:53:01:25:91: 2b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F1:4B:25:69:A9:79:96:2C:76:21:46:7A:C9:6A:02:D7:4F:00:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/941f84bb-b643-3daa-8455-81b8d1796c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:b300::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:78:6d:92:b6:55:74:0c:95:66:95:0f:29:b8:9b:8c:15:98: b8:58:ae:64:ee:23:7a:8b:c9:e9:ea:06:b7:f2:6e:5b:ca:93: 19:23:74:7a:05:16:db:cb:56:dc:85:69:af:6c:2e:32:d6:e3: 70:6d:53:1f:4b:69:4f:4b:6b:85:55:7a:59:3f:08:b8:ec:7d: e7:4c:0a:b7:75:6f:80:30:7e:66:49:61:25:73:b9:40:97:a2: b7:fa:9a:67:50:ac:12:7a:d2:22:8d:84:8f:3e:74:c5:f5:6d: 5b:1d:73:aa:92:78:ae:01:23:55:39:91:e5:cb:d3:2a:6e:78: 12:36:0d:8f:c3:dc:18:58:92:4e:2d:3a:1b:5e:1a:22:13:c9: bf:9c:9e:a3:0a:00:ba:2e:18:99:da:2a:58:38:38:69:ed:5e: ff:70:bd:16:22:d9:64:34:a8:7e:b2:47:19:75:75:04:b8:13: 4a:b0:3a:a8:0a:0e:7d:57:b0:a0:ae:25:b6:3b:58:58:42:55: 80:b8:1d:21:1a:48:30:37:40:68:61:78:59:05:04:99:96:02: 45:dd:b6:17:20:ad:1c:ee:16:37:a1:28:90:1f:11:e0:70:b1: 9f:91:3b:cb:f2:79:2c:44:37:45:1b:60:50:79:12:04:8c:1a: 2d:e8:df:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIsZmNcZxG8K3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YmMzZDU5MWEtYzliOS00NzBhLTlkZDItMTQ1N2M4Mzc3N2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlihGjjfu7GQjkJ0IwxTLB9OPTdBsUmX2ECKS GLV+0jCDZSQpftACi1fGWGMjP+C9gyrs2FPccDBsz4+trV0zYaOtzpF8+esoBKSZ 1mLSRuI1PBiZd8aatKi8cmRHn/o6KO8pcpvzd8rJHJYp9Y6Wan+ARKMA4X72YMhQ jYjaLsDQY1clOWf180RQr7gn2aOVrX/XsGHocrDSWa6/E+vVxlQJpEDuzAUWEHkA 2Q1fV1keW6LD5Ie7wG+lmyx/0NosdcfP3/iGsLtmw+JBcdszqwfz3vZnbl7fwEF9 xXsJkyaLHWCLjvz597o6McnksUfedSY8v0OYdlZvtVMBJZErOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFTxSyVpqXmWLHYhRnrJagLXTwAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTQxZjg0YmItYjY0My0z ZGFhLTg0NTUtODFiOGQxNzk2YzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQCLMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEB4bZK2VXQMlWaVDym4m4wVmLhYrmTuI3qLyenqBrfyblvKkxkj dHoFFtvLVtyFaa9sLjLW43BtUx9LaU9La4VVelk/CLjsfedMCrd1b4AwfmZJYSVz uUCXorf6mmdQrBJ60iKNhI8+dMX1bVsdc6qSeK4BI1U5keXL0ypueBI2DY/D3BhY kk4tOhteGiITyb+cnqMKALouGJnaKlg4OGntXv9wvRYi2WQ0qH6yRxl1dQS4E0qw OqgKDn1XsKCuJbY7WFhCVYC4HSEaSDA3QGhheFkFBJmWAkXdthcgrRzuFjehKJAf EeBwsZ+RO8vyeSxEN0UbYFB5EgSMGi3o30A= -----END CERTIFICATE-----Generated at Sun Apr 6 03:50:04 2025 by rpki-client