$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2c64a59-f187-39b3-a84f-4da6d91a197b.roa File: a2c64a59-f187-39b3-a84f-4da6d91a197b.roa (raw, json) Hash identifier: 0TJCPLLrRoCOmUToSqhd3MaHbC7iNBCJdqc6/O3gF+I= Subject key identifier: C5:C6:AB:8F:A7:F2:3E:E1:42:C3:67:2F:70:E3:D4:42:B6:B3:35:E1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400D49221822CF382DDAFC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2c64a59-f187-39b3-a84f-4da6d91a197b.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100e:b300::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:d4:92:21:82:2c:f3:82:dd:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=77f0f2cc-0815-438e-af2b-4959ef5e08e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:9e:0e:2e:24:f0:9a:9c:0e:e4:24:0e:db: 63:d6:59:37:f8:8a:ba:22:27:a2:8e:77:df:62:05: 78:51:c7:b5:c0:55:8c:bc:8c:60:ce:e4:a3:27:59: 5c:a7:94:d9:cc:1e:9e:f6:5e:0a:05:30:9c:eb:ee: f9:07:bc:22:5c:89:6b:fb:0f:ea:4e:95:85:e1:37: 5d:4c:b7:ff:18:c6:29:ee:13:69:4a:6e:b7:13:d4: 2b:73:c0:00:1b:cf:f9:64:f4:c9:36:48:e5:35:bf: 4e:18:c4:8e:8a:21:ec:7a:02:61:cd:d4:1a:91:25: 38:35:d1:c8:12:b0:f2:15:f5:e1:fe:91:70:f9:71: 14:e6:2b:6b:64:b1:aa:46:70:2b:7e:6f:70:a6:05: a6:a8:61:8b:3c:39:5e:a8:85:c1:c5:6c:2e:04:70: 97:ef:ef:99:c2:32:8b:a2:83:5a:d0:50:5c:51:c0: 48:f0:1d:5b:3a:75:6f:1c:19:a7:28:80:f7:52:99: f5:10:16:ce:8b:27:60:b7:9c:50:cf:8e:f3:6c:5d: 73:7c:ba:2f:f8:4e:55:a3:56:89:cb:30:9f:28:70: a7:4f:6b:86:35:c8:6c:26:d2:af:a7:db:c1:3d:03: 54:09:c7:00:21:1b:14:81:bf:c9:cc:55:3b:9d:f7: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C6:AB:8F:A7:F2:3E:E1:42:C3:67:2F:70:E3:D4:42:B6:B3:35:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2c64a59-f187-39b3-a84f-4da6d91a197b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100e:b300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:04:8d:b5:2f:2f:92:77:52:29:e9:6e:87:bd:49:b4:67:c5: 08:fc:2b:fd:e2:fe:13:8e:04:0c:ab:ed:db:f3:e3:22:0a:f5: 04:58:86:aa:df:44:74:34:6c:4b:18:ea:f6:55:e2:76:ad:58: 2b:53:93:e1:9f:dd:1e:ea:d9:e5:a2:22:b8:12:1d:84:29:52: ad:ba:1d:cf:65:b2:2e:67:f7:5b:3e:7d:b8:c4:67:e3:5b:d3: 8a:5b:07:2a:eb:35:3e:73:6e:92:8d:ef:5b:8a:e3:7c:49:73: bd:a8:97:02:08:f3:15:1d:6e:79:03:19:32:c9:00:3a:33:c9: be:95:e2:1e:bd:9e:2e:a9:74:f4:5b:ef:2b:06:6f:73:a1:87: 4a:bc:80:ff:86:5e:b2:e7:dd:5c:10:e3:89:74:20:a4:12:b6: 67:8b:6f:23:67:5c:2b:86:f0:f4:bb:7f:49:5f:a8:d8:e7:58: fe:64:83:34:e2:ef:0d:08:93:5b:6e:09:68:dc:85:9f:ee:12: fb:93:a3:42:b0:c3:dd:cb:7c:71:71:8d:e8:25:6e:c5:db:0a: 87:e2:44:60:89:95:5a:f3:ee:bf:45:86:db:66:9b:18:40:82: 69:e6:fd:52:47:07:df:70:7d:7e:4f:83:16:08:a3:e3:c9:ad: f8:99:94:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikANSSIYIs84Ldr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk NzdmMGYyY2MtMDgxNS00MzhlLWFmMmItNDk1OWVmNWUwOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7yeDi4k8JqcDuQkDttj1lk3+Iq6Iieijnff YgV4Uce1wFWMvIxgzuSjJ1lcp5TZzB6e9l4KBTCc6+75B7wiXIlr+w/qTpWF4Tdd TLf/GMYp7hNpSm63E9Qrc8AAG8/5ZPTJNkjlNb9OGMSOiiHsegJhzdQakSU4NdHI ErDyFfXh/pFw+XEU5itrZLGqRnArfm9wpgWmqGGLPDleqIXBxWwuBHCX7++ZwjKL ooNa0FBcUcBI8B1bOnVvHBmnKID3Upn1EBbOiydgt5xQz47zbF1zfLov+E5Vo1aJ yzCfKHCnT2uGNchsJtKvp9vBPQNUCccAIRsUgb/JzFU7nfe9pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMXGq4+n8j7hQsNnL3Dj1EK2szXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTJjNjRhNTktZjE4Ny0z OWIzLWE4NGYtNGRhNmQ5MWExOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDrMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA8EjbUvL5J3Uinpboe9SbRnxQj8K/3i/hOOBAyr7dvz4yIK9QRY hqrfRHQ0bEsY6vZV4natWCtTk+Gf3R7q2eWiIrgSHYQpUq26Hc9lsi5n91s+fbjE Z+Nb04pbByrrNT5zbpKN71uK43xJc72olwII8xUdbnkDGTLJADozyb6V4h69ni6p dPRb7ysGb3Ohh0q8gP+GXrLn3VwQ44l0IKQStmeLbyNnXCuG8PS7f0lfqNjnWP5k gzTi7w0Ik1tuCWjchZ/uEvuTo0Kww93LfHFxjeglbsXbCofiRGCJlVrz7r9Fhttm mxhAgmnm/VJHB99wfX5PgxYIo+PJrfiZlB8= -----END CERTIFICATE-----Generated at Wed Apr 9 17:59:46 2025 by rpki-client