$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa File: 95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa (raw, json) Hash identifier: K1ohuWahqWQ/OjqbbPJci7R1lwhtX8WUwBX4anF7SNs= Subject key identifier: A3:40:A1:A0:6C:8F:81:03:7D:AF:84:70:4C:C8:55:49:03:15:0B:F9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400CDBA0E3FD0E8B9478B40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100d:b1ca::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:cd:ba:0e:3f:d0:e8:b9:47:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=74fc76d8-c5a1-4839-a884-8474a04843a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:9c:3d:b1:44:86:05:82:2c:31:5f:51:3d: 0f:9b:97:82:ad:3d:4d:91:f0:3f:88:a5:77:9b:0e: 92:30:2c:4c:19:64:a8:b3:cd:ff:23:61:6a:ce:aa: 7b:bf:91:25:fb:5d:c1:73:04:18:f4:74:b6:3d:21: 2e:f1:29:88:5e:af:b8:20:8b:1c:b9:4b:2e:a3:26: 63:6d:01:2c:06:78:93:84:d0:6a:fd:a8:34:3f:56: ad:d9:f0:42:a0:f0:af:7a:3d:0c:ab:60:3c:f3:37: 73:0f:47:bc:e7:ce:ab:26:7a:cc:27:0d:0c:34:39: 9b:59:01:cd:c0:bc:cd:54:50:8c:57:5d:32:f4:3a: a2:cb:26:5c:0e:a4:4b:ee:7c:24:34:f1:9b:3c:1b: ec:6b:57:7a:e0:bc:44:eb:46:a6:23:98:49:8b:49: b7:f5:67:a6:18:ed:ab:8c:0d:3d:a1:06:4b:e3:85: a9:99:c4:c8:55:5f:22:15:5e:fa:9c:f0:5b:c4:0c: 2a:07:24:ae:fd:0f:d0:0e:85:75:9f:96:7f:87:93: 65:54:f8:35:91:03:80:55:e1:08:ea:0d:82:76:93: e5:af:39:4f:b7:a3:ab:a4:20:df:13:32:78:76:4e: dd:32:af:3b:ed:51:02:9e:47:88:89:68:5c:ad:f3: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:40:A1:A0:6C:8F:81:03:7D:AF:84:70:4C:C8:55:49:03:15:0B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:b1ca::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:cc:98:11:84:2e:8e:96:03:6d:e0:b2:75:ab:d9:31:02:a9: 41:e9:b3:0a:0e:fd:44:de:3d:32:d1:b1:2f:09:8a:91:6a:88: 8b:f9:26:fa:33:d9:4b:4a:1f:94:e4:0c:a4:09:64:45:be:51: 3f:13:51:8d:da:8f:02:7f:6c:da:46:f1:b6:9f:b8:1f:71:ed: 0f:9f:3b:dd:83:89:77:00:d6:10:ad:de:9e:69:02:a6:1e:af: 18:98:2a:d2:db:3d:9d:4d:f2:c2:21:55:14:ba:32:f1:e3:6e: a1:b3:d3:01:66:96:cd:eb:86:80:96:82:eb:19:e6:b6:84:e4: e3:b1:32:2f:e0:96:b3:2e:b0:de:57:17:5a:0c:96:62:42:8e: 8c:1c:8d:7c:9c:18:ae:fb:24:95:6d:a9:98:10:a6:c0:e3:8c: 31:29:57:9d:c8:d4:a1:c3:43:90:2e:26:54:98:5c:7e:fb:ad: 95:a7:5c:cf:c2:38:91:8d:50:3c:9c:16:8e:f9:ee:40:2c:37: 45:4b:be:17:80:95:a9:22:e6:f4:dc:dc:31:51:c4:a5:22:f1: d7:81:4a:16:cc:6d:ab:ef:1f:5c:c5:1a:1d:79:6e:ec:7f:32: dd:c8:8b:e6:5f:ec:d6:91:b8:d4:0e:99:ab:a2:fd:c2:f9:8c: 38:40:78:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAM26Dj/Q6LlHi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NzRmYzc2ZDgtYzVhMS00ODM5LWE4ODQtODQ3NGEwNDg0M2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUucPbFEhgWCLDFfUT0Pm5eCrT1NkfA/iKV3 mw6SMCxMGWSos83/I2Fqzqp7v5El+13BcwQY9HS2PSEu8SmIXq+4IIscuUsuoyZj bQEsBniThNBq/ag0P1at2fBCoPCvej0Mq2A88zdzD0e8586rJnrMJw0MNDmbWQHN wLzNVFCMV10y9DqiyyZcDqRL7nwkNPGbPBvsa1d64LxE60amI5hJi0m39WemGO2r jA09oQZL44WpmcTIVV8iFV76nPBbxAwqBySu/Q/QDoV1n5Z/h5NlVPg1kQOAVeEI 6g2CdpPlrzlPt6OrpCDfEzJ4dk7dMq877VECnkeIiWhcrfM0ywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNAoaBsj4EDfa+EcEzIVUkDFQv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTViMGVkMWItYmMxMi0z YWUzLWE5YmUtYTczOWZiNzdkODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbHK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAELMmBGELo6WA23gsnWr2TECqUHpswoO/UTePTLRsS8JipFqiIv5 Jvoz2UtKH5TkDKQJZEW+UT8TUY3ajwJ/bNpG8bafuB9x7Q+fO92DiXcA1hCt3p5p AqYerxiYKtLbPZ1N8sIhVRS6MvHjbqGz0wFmls3rhoCWgusZ5raE5OOxMi/glrMu sN5XF1oMlmJCjowcjXycGK77JJVtqZgQpsDjjDEpV53I1KHDQ5AuJlSYXH77rZWn XM/COJGNUDycFo757kAsN0VLvheAlaki5vTc3DFRxKUi8deBShbMbavvH1zFGh15 bux/Mt3Ii+Zf7NaRuNQOmaui/cL5jDhAeDY= -----END CERTIFICATE-----Generated at Sat Apr 5 18:10:34 2025 by rpki-client