$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a998199a-5a34-3db8-b702-81f969250e1d.roa File: a998199a-5a34-3db8-b702-81f969250e1d.roa (raw, json) Hash identifier: POfZHI6ZrBZpeBfAmcBZ7MePhdCXshMF1HMQI1Dnsm8= Subject key identifier: C8:52:82:E9:7B:1D:5E:6E:BA:0E:17:03:7D:3C:62:73:CA:A6:7D:CF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400CE219982AC2EF9159D40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a998199a-5a34-3db8-b702-81f969250e1d.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100d:be04::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:ce:21:99:82:ac:2e:f9:15:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=df0f308f-9af0-4a19-88d3-5505aa211846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:f2:68:ad:2e:62:0f:ac:4f:d7:49:4a:a8: 2f:7c:7d:7a:6b:72:e9:f0:3d:82:71:59:da:ee:65: b1:59:48:37:6e:45:7a:38:0d:51:27:5c:b5:5b:33: 30:c2:c8:67:bf:21:e3:d6:3e:20:66:15:3c:fa:a8: 99:ec:83:81:03:fa:73:91:b4:74:57:5a:d6:83:ba: 20:2f:45:4c:a6:5b:9e:f6:05:c6:39:d2:08:74:9b: 9e:1e:e4:b8:df:33:4e:93:54:4b:81:e1:5a:51:cc: 98:e1:00:11:f9:41:e8:8a:a7:68:95:e2:3f:40:fa: ef:c9:81:4f:7a:c3:db:93:80:5a:75:d4:ff:7d:a3: c5:02:ec:83:da:6c:fe:25:4a:a1:77:69:0c:23:3a: 34:2f:c4:63:e3:f3:ef:5d:e1:dd:a0:18:ce:e0:ab: 22:55:c3:df:b6:41:3b:d0:35:66:1d:d0:e7:7c:2d: 67:fe:a7:c5:06:18:5a:4b:ab:eb:44:d6:b5:35:86: 40:64:18:ce:20:47:16:4b:fc:2f:f3:69:f6:74:f7: 07:1c:b9:40:f5:97:93:c9:35:90:a5:df:52:85:4d: 19:fc:c3:15:f4:e7:1e:5f:e5:29:ab:03:dc:f8:b6: 41:05:63:71:9b:ca:60:b9:78:03:d1:86:7b:ef:01: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:52:82:E9:7B:1D:5E:6E:BA:0E:17:03:7D:3C:62:73:CA:A6:7D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a998199a-5a34-3db8-b702-81f969250e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:be04::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:64:c5:c0:d3:a2:6a:d1:fa:b8:84:2a:7f:94:87:19:64:d0: ad:71:f8:c3:8d:9b:c3:39:9e:e8:da:dd:99:6a:5c:3d:48:36: 9f:f1:c6:f2:6a:fd:69:da:87:be:0f:60:e7:ab:92:80:6a:fd: d8:47:79:24:a9:48:da:53:bc:3f:05:22:c5:48:c4:5a:5a:ce: 0d:0e:3d:3e:3e:cc:a7:1c:3b:e5:e8:b0:a2:29:94:3d:b9:75: 2c:88:78:1e:5d:86:88:c2:82:91:35:fe:28:3b:a5:9a:a9:2d: 88:12:91:24:bb:a2:62:06:07:70:b6:e4:79:5f:d9:11:56:28: 3f:70:c5:1e:6e:15:26:db:95:b7:3d:06:d5:27:32:98:8c:2b: ba:97:82:25:76:30:a7:06:65:7c:fe:58:b1:64:8d:a9:eb:ae: aa:f0:db:b7:ff:cd:43:0f:1d:87:6a:91:88:73:56:ab:99:09: c2:4d:95:f6:2f:a9:c5:07:a6:3a:c3:d0:19:65:80:6f:8b:ed: 2f:2f:dd:c7:31:2f:ea:2a:72:d4:3c:a8:26:a1:81:da:2e:11: 61:b3:71:f9:91:08:07:3f:c2:d1:bc:28:d9:bd:b4:cb:96:f0: aa:5e:0c:11:69:0f:5a:de:38:21:7f:2f:47:ea:c3:b0:f2:84: e1:27:0a:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAM4hmYKsLvkVnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZGYwZjMwOGYtOWFmMC00YTE5LTg4ZDMtNTUwNWFhMjExODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlojyaK0uYg+sT9dJSqgvfH16a3Lp8D2CcVna 7mWxWUg3bkV6OA1RJ1y1WzMwwshnvyHj1j4gZhU8+qiZ7IOBA/pzkbR0V1rWg7og L0VMplue9gXGOdIIdJueHuS43zNOk1RLgeFaUcyY4QAR+UHoiqdoleI/QPrvyYFP esPbk4BaddT/faPFAuyD2mz+JUqhd2kMIzo0L8Rj4/PvXeHdoBjO4KsiVcPftkE7 0DVmHdDnfC1n/qfFBhhaS6vrRNa1NYZAZBjOIEcWS/wv82n2dPcHHLlA9ZeTyTWQ pd9ShU0Z/MMV9OceX+UpqwPc+LZBBWNxm8pguXgD0YZ77wHb5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMhSgul7HV5uug4XA308YnPKpn3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTk5ODE5OWEtNWEzNC0z ZGI4LWI3MDItODFmOTY5MjUwZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDb4E MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9kxcDTomrR+riEKn+Uhxlk0K1x+MONm8M5nuja3ZlqXD1INp/x xvJq/Wnah74PYOerkoBq/dhHeSSpSNpTvD8FIsVIxFpazg0OPT4+zKccO+XosKIp lD25dSyIeB5dhojCgpE1/ig7pZqpLYgSkSS7omIGB3C25Hlf2RFWKD9wxR5uFSbb lbc9BtUnMpiMK7qXgiV2MKcGZXz+WLFkjanrrqrw27f/zUMPHYdqkYhzVquZCcJN lfYvqcUHpjrD0BllgG+L7S8v3ccxL+oqctQ8qCahgdouEWGzcfmRCAc/wtG8KNm9 tMuW8KpeDBFpD1reOCF/L0fqw7DyhOEnCqs= -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:33 2025 by rpki-client