$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa File: a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa (raw, json) Hash identifier: h4l0znU7u4u/q+IrHkBffO6YEFGCKjPgqTWD5GBJzLM= Subject key identifier: 17:34:C2:78:6E:59:A2:BA:E5:AD:75:B1:AF:89:DF:F9:14:D0:D7:87 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584949FEB0E08F55A647EED3E900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 6167 IP address blocks: 2600:1017:d010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:b0:e0:8f:55:a6:47:ee:d3:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=43ac5ea0-3f0f-4d61-9d39-bf43062db1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:1b:7e:83:cf:5b:45:60:51:ec:89:41:c2: bd:8f:0a:10:4e:ca:94:8a:49:30:05:ea:38:d5:29: ca:10:ea:ad:aa:96:e5:d7:a5:7d:51:f1:64:82:80: 9a:d0:3a:b5:16:9a:66:d1:00:14:91:61:6a:b3:09: 98:d1:a1:f2:b1:59:26:2d:f8:23:6e:9b:47:f2:bd: 37:ca:a3:55:f0:65:9f:b2:17:e4:fd:50:e8:22:96: 04:b1:7e:dd:d9:26:04:38:2f:2d:69:e3:c9:d6:18: 4f:6b:5b:cd:21:23:dc:85:94:ec:55:ec:cf:bc:9e: 5c:07:01:70:8f:a2:b8:a9:10:a4:a1:55:9b:cc:36: 08:39:c0:22:6c:88:8a:42:e0:11:96:fa:3a:4e:58: b3:74:9c:47:79:d2:51:a9:71:c5:01:b0:1b:06:6e: a3:fe:92:14:5f:10:44:d5:18:82:40:81:39:36:eb: 44:29:cf:18:19:77:f5:b4:44:95:1d:c7:0f:95:d0: 74:6e:87:97:e4:51:70:e9:22:1a:4c:23:a3:c7:98: f0:0a:b8:ee:6f:a3:eb:44:f8:1b:dc:14:88:d6:10: 03:b8:ff:e1:fb:19:3d:7b:ab:b7:85:f8:9b:67:2a: b1:52:4f:d3:64:29:1e:d6:a2:dd:e2:16:1a:35:d0: 13:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:34:C2:78:6E:59:A2:BA:E5:AD:75:B1:AF:89:DF:F9:14:D0:D7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2665f7f-fb4d-3daa-8d8a-1016e0d07c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1017:d010::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:4b:60:48:06:58:b8:09:bb:cb:81:46:e7:ae:9f:ad:dd:82: 40:e6:c5:30:aa:30:06:4b:6d:f7:35:03:d9:9f:f8:61:c5:48: 90:39:61:9b:74:b6:97:e1:84:4a:b7:83:8d:c7:96:c2:50:98: 24:e4:0f:c0:48:66:c2:bc:44:2f:7b:3c:17:ec:83:bc:a1:3f: 47:8f:03:7d:e1:c5:11:42:a8:75:90:84:b0:86:bf:62:ca:f9: 44:e0:b9:22:50:8f:32:5b:dc:75:38:9d:28:1f:e1:9b:85:b7: c7:ba:76:65:c1:5b:64:27:24:c3:f8:31:f9:51:5f:b7:90:ff: b3:6e:64:d1:79:f1:d3:4c:24:04:13:82:69:ea:25:5c:66:09: e0:ae:34:02:a9:40:ce:61:ce:d5:95:44:0a:e8:d4:4c:8c:82: 5e:9f:56:db:05:bd:cc:e2:e1:81:af:b9:ba:b3:ba:dd:9e:62: ca:55:b4:37:2d:d6:dc:cf:eb:2c:de:5a:2e:98:df:24:dc:f1: 56:e9:ef:26:b3:a4:30:cd:1d:d5:5a:65:5f:e0:48:8d:c6:41: a1:b0:53:a3:11:48:66:a9:86:75:e6:68:6f:ae:7c:9f:df:20: 20:17:fa:91:00:a9:e9:9b:b6:9b:0b:4c:b6:92:70:6c:ac:1f: 79:41:3e:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/rDgj1WmR+7T6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NDNhYzVlYTAtM2YwZi00ZDYxLTlkMzktYmY0MzA2MmRiMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsUbfoPPW0VgUeyJQcK9jwoQTsqUikkwBeo4 1SnKEOqtqpbl16V9UfFkgoCa0Dq1Fppm0QAUkWFqswmY0aHysVkmLfgjbptH8r03 yqNV8GWfshfk/VDoIpYEsX7d2SYEOC8taePJ1hhPa1vNISPchZTsVezPvJ5cBwFw j6K4qRCkoVWbzDYIOcAibIiKQuARlvo6TlizdJxHedJRqXHFAbAbBm6j/pIUXxBE 1RiCQIE5NutEKc8YGXf1tESVHccPldB0boeX5FFw6SIaTCOjx5jwCrjub6PrRPgb 3BSI1hADuP/h+xk9e6u3hfibZyqxUk/TZCke1qLd4hYaNdATZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBc0wnhuWaK65a11sa+J3/kU0NeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTI2NjVmN2YtZmI0ZC0z ZGFhLThkOGEtMTAxNmUwZDA3YzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQF9AQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1LYEgGWLgJu8uBRueun63dgkDmxTCqMAZLbfc1A9mf+GHFSJA5 YZt0tpfhhEq3g43HlsJQmCTkD8BIZsK8RC97PBfsg7yhP0ePA33hxRFCqHWQhLCG v2LK+UTguSJQjzJb3HU4nSgf4ZuFt8e6dmXBW2QnJMP4MflRX7eQ/7NuZNF58dNM JAQTgmnqJVxmCeCuNAKpQM5hztWVRAro1EyMgl6fVtsFvczi4YGvubqzut2eYspV tDct1tzP6yzeWi6Y3yTc8Vbp7yazpDDNHdVaZV/gSI3GQaGwU6MRSGaphnXmaG+u fJ/fICAX+pEAqembtpsLTLaScGysH3lBPqQ= -----END CERTIFICATE-----Generated at Sun Apr 6 01:07:46 2025 by rpki-client