$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a80c300f-4db8-3625-97ff-d3ad5de0636b.roa File: a80c300f-4db8-3625-97ff-d3ad5de0636b.roa (raw, json) Hash identifier: 1NNsLhpUuYhwIoW2GqFTbRUX3NQrBNrZzEqU9snMvSo= Subject key identifier: 4B:24:0B:62:71:D1:21:60:C9:CD:81:2A:76:8F:14:F7:4A:DC:8C:36 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584949FEA27673E5F428766CAFE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a80c300f-4db8-3625-97ff-d3ad5de0636b.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 6167 IP address blocks: 2600:1014:b170::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:a2:76:73:e5:f4:28:76:6c:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=b2eef2e8-11d7-4c86-a43b-3e9767b60174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cb:e6:99:2b:f5:fd:6f:16:66:40:b7:a6:82: ee:cc:13:03:de:33:65:f6:7c:0e:92:14:fe:0d:a7: 2a:2c:7f:28:e5:c4:f9:f2:a6:12:48:64:4d:bb:10: 30:c8:e8:e5:cc:dc:64:c2:aa:c9:a0:77:73:5f:0b: cc:9f:cb:e6:50:a4:37:71:32:63:47:88:2d:53:8f: e0:37:3c:ac:e8:04:eb:61:e4:a0:3b:71:07:c6:4c: fa:80:fe:33:d2:33:5c:e8:ed:61:d9:4f:1c:70:e0: e8:d5:5a:a6:bc:53:7a:6e:3e:73:c6:12:95:ed:81: 19:fb:18:c2:13:d5:9c:0f:e1:4f:66:7a:bc:22:eb: 05:85:fa:fb:88:12:fc:1a:69:aa:2f:a3:5d:25:7d: 17:c7:5c:f8:09:74:08:67:9d:31:4a:3b:48:8d:f4: 06:64:bd:56:55:c7:50:bc:c9:0a:fb:7c:b5:d6:84: d5:a1:b6:01:00:39:a4:76:d8:78:44:78:1c:b1:1a: 96:00:0e:dc:1d:80:6b:64:47:44:03:4d:05:9d:a5: d3:3a:ff:3c:dd:bd:89:ad:05:4f:0b:7c:0f:03:a7: f5:8d:a4:68:42:1e:cb:a5:29:9a:ab:3e:9e:dd:a1: 4d:4f:12:59:ef:aa:ea:fd:3f:1b:c9:95:d7:78:02: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:24:0B:62:71:D1:21:60:C9:CD:81:2A:76:8F:14:F7:4A:DC:8C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a80c300f-4db8-3625-97ff-d3ad5de0636b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1014:b170::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8b:34:5a:02:05:9e:24:0d:bd:2e:c6:25:79:e3:11:9b:10: d9:4d:01:4e:e5:2a:00:21:31:02:f9:3d:10:3b:55:37:c4:13: 2e:9e:f7:56:f2:5b:8b:2a:ba:70:58:b0:66:ca:cf:0c:bc:f8: ac:d9:17:e5:8a:95:4c:7a:43:21:0f:2f:de:7c:fd:94:a1:1e: 07:3c:92:8c:5c:64:d1:54:90:8e:0f:88:08:5c:e3:0c:51:a8: 0a:7d:9b:df:de:0a:8e:38:11:27:24:87:35:b3:73:bc:b5:1f: f7:4a:dc:08:85:40:67:8d:b4:8c:ed:24:ea:75:d2:06:b4:b5: 90:43:e1:de:08:f5:da:33:53:79:a4:8f:b6:22:7d:f0:5b:28: 7f:1a:57:0d:1d:d7:ac:e1:07:38:49:46:57:a6:e4:48:0d:24: 98:f0:66:24:85:6c:b6:30:8f:9a:c3:eb:c1:2d:75:44:50:7e: 0a:36:47:25:4e:0e:b4:f1:83:4b:43:19:0a:9d:1e:68:4d:49: 2e:5d:b3:6b:ba:e7:89:43:64:95:18:ed:29:82:35:4d:b3:ea: ea:d0:1c:30:3e:dc:f2:ba:86:d8:ec:0d:14:a8:a8:d5:16:e6: f3:e4:d7:a3:43:f4:55:b3:49:61:f3:20:a2:2d:30:d5:83:da: 38:a8:50:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/qJ2c+X0KHZsr+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk YjJlZWYyZTgtMTFkNy00Yzg2LWE0M2ItM2U5NzY3YjYwMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsvmmSv1/W8WZkC3poLuzBMD3jNl9nwOkhT+ DacqLH8o5cT58qYSSGRNuxAwyOjlzNxkwqrJoHdzXwvMn8vmUKQ3cTJjR4gtU4/g Nzys6ATrYeSgO3EHxkz6gP4z0jNc6O1h2U8ccODo1VqmvFN6bj5zxhKV7YEZ+xjC E9WcD+FPZnq8IusFhfr7iBL8GmmqL6NdJX0Xx1z4CXQIZ50xSjtIjfQGZL1WVcdQ vMkK+3y11oTVobYBADmkdth4RHgcsRqWAA7cHYBrZEdEA00FnaXTOv883b2JrQVP C3wPA6f1jaRoQh7LpSmaqz6e3aFNTxJZ76rq/T8byZXXeAKotQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEskC2Jx0SFgyc2BKnaPFPdK3Iw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTgwYzMwMGYtNGRiOC0z NjI1LTk3ZmYtZDNhZDVkZTA2MzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFLFw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECLNFoCBZ4kDb0uxiV54xGbENlNAU7lKgAhMQL5PRA7VTfEEy6e 91byW4squnBYsGbKzwy8+KzZF+WKlUx6QyEPL958/ZShHgc8koxcZNFUkI4PiAhc 4wxRqAp9m9/eCo44ESckhzWzc7y1H/dK3AiFQGeNtIztJOp10ga0tZBD4d4I9doz U3mkj7YiffBbKH8aVw0d16zhBzhJRlem5EgNJJjwZiSFbLYwj5rD68EtdURQfgo2 RyVODrTxg0tDGQqdHmhNSS5ds2u654lDZJUY7SmCNU2z6urQHDA+3PK6htjsDRSo qNUW5vPk16ND9FWzSWHzIKItMNWD2jioUNA= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:31 2025 by rpki-client