$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bca2af00-ec63-37c7-a927-0a652012f6f9.roa File: bca2af00-ec63-37c7-a927-0a652012f6f9.roa (raw, json) Hash identifier: q3nqjZCfKMVVkvo/Z9aU1rc1IYh3qNC4eQD/mkxCGmo= Subject key identifier: F8:41:AE:C0:7F:AC:DF:7E:46:EA:48:7F:A3:A5:7C:04:F6:CD:26:06 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C2456EE61667A96C889B980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bca2af00-ec63-37c7-a927-0a652012f6f9.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1002:a012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:56:ee:61:66:7a:96:c8:89:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=f3092093-48b3-4f9e-9b9c-145712f69e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:2f:5a:2b:78:6f:79:3b:d1:b2:e5:e6:4c: b8:cb:15:66:4e:a8:13:6d:fa:a2:bb:e9:49:11:5e: 40:71:c5:c3:48:4a:7e:56:61:9b:07:af:b5:72:9b: a5:eb:8a:d8:11:d1:ef:10:66:3f:4b:2b:a8:33:3e: 5b:02:f6:b6:b2:25:2e:c6:f0:1a:cb:ef:87:42:93: 4c:d7:b8:f6:5d:8a:bc:e6:1e:b6:58:b3:6e:d8:d9: 92:9f:41:45:f7:9e:71:d5:f4:a8:df:48:74:b9:93: 51:0c:c9:e0:1a:27:05:18:ec:ae:aa:a5:35:5f:b5: d8:32:d9:ee:ba:1e:dc:24:18:0b:dd:ca:28:3f:75: d2:d5:a1:9f:cc:0d:a8:ee:d0:f5:17:93:b8:9c:b8: 77:73:29:39:41:3c:18:95:46:df:2a:20:ee:a7:42: 59:dd:34:e2:84:08:f0:af:7b:db:d6:4c:d2:70:c3: 08:c4:24:e0:d0:29:39:a6:d4:1c:7d:3e:65:ee:f8: 7c:1b:3d:f2:06:37:e0:5e:76:9c:d9:22:21:67:8e: fc:7e:fe:66:26:b5:04:3d:c9:e7:2f:51:8c:2c:52: 48:09:b6:1a:a9:fb:5e:08:7b:1a:3f:ee:07:34:a4: ec:78:d2:ce:e0:c9:7b:9c:c3:f5:7b:2e:45:22:bf: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:41:AE:C0:7F:AC:DF:7E:46:EA:48:7F:A3:A5:7C:04:F6:CD:26:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bca2af00-ec63-37c7-a927-0a652012f6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1002:a012::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:3e:63:88:35:55:58:f4:ea:a5:6f:5f:30:33:00:fc:f1:ae: 49:d7:c2:88:f5:ef:d0:f9:7a:d0:3e:ce:7d:87:42:59:55:1d: c8:72:d6:11:09:78:a3:af:6e:ad:66:78:f4:06:1e:a2:48:10: f5:f5:a7:a0:98:24:a0:1c:f8:b8:1e:c8:66:16:ed:2a:75:df: ec:2d:35:ee:21:9b:c6:92:90:54:94:35:1a:50:c4:25:91:a6: e2:47:66:73:c6:de:11:0e:be:87:9b:6e:2c:14:9b:ab:8c:ff: 97:81:ed:2d:62:10:b1:9d:07:cd:c4:25:60:4e:46:e6:49:b5: bb:9f:6e:f2:9b:36:1f:ba:c1:1c:2a:9f:3c:8b:21:74:92:d1: 59:13:19:23:ab:13:ca:bb:8b:c9:23:14:5b:fc:9e:d2:7b:56: 27:a3:ce:04:9d:d6:02:50:a7:9a:bd:14:8a:ac:82:5b:5e:b8: 57:69:38:68:10:0d:4e:49:de:05:1c:73:aa:02:f0:73:de:27: 94:74:a4:ad:91:4a:6a:8b:cb:62:84:28:85:c2:64:b5:9a:70: 63:7f:7a:1b:da:09:e1:14:4a:fc:02:a1:72:15:61:7e:dc:14: 91:34:34:8e:c6:a3:65:14:78:94:b9:e0:e3:32:6c:81:99:88: 29:17:b0:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJFbuYWZ6lsiJuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZjMwOTIwOTMtNDhiMy00ZjllLTliOWMtMTQ1NzEyZjY5ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2QvWit4b3k70bLl5ky4yxVmTqgTbfqiu+lJ EV5AccXDSEp+VmGbB6+1cpul64rYEdHvEGY/SyuoMz5bAva2siUuxvAay++HQpNM 17j2XYq85h62WLNu2NmSn0FF955x1fSo30h0uZNRDMngGicFGOyuqqU1X7XYMtnu uh7cJBgL3cooP3XS1aGfzA2o7tD1F5O4nLh3cyk5QTwYlUbfKiDup0JZ3TTihAjw r3vb1kzScMMIxCTg0Ck5ptQcfT5l7vh8Gz3yBjfgXnac2SIhZ478fv5mJrUEPcnn L1GMLFJICbYaqfteCHsaP+4HNKTseNLO4Ml7nMP1ey5FIr+QbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhBrsB/rN9+RupIf6OlfAT2zSYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmNhMmFmMDAtZWM2My0z N2M3LWE5MjctMGE2NTIwMTJmNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQAqAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACE+Y4g1VVj06qVvXzAzAPzxrknXwoj179D5etA+zn2HQllVHchy 1hEJeKOvbq1mePQGHqJIEPX1p6CYJKAc+LgeyGYW7Sp13+wtNe4hm8aSkFSUNRpQ xCWRpuJHZnPG3hEOvoebbiwUm6uM/5eB7S1iELGdB83EJWBORuZJtbufbvKbNh+6 wRwqnzyLIXSS0VkTGSOrE8q7i8kjFFv8ntJ7ViejzgSd1gJQp5q9FIqsglteuFdp OGgQDU5J3gUcc6oC8HPeJ5R0pK2RSmqLy2KEKIXCZLWacGN/ehvaCeEUSvwCoXIV YX7cFJE0NI7Go2UUeJS54OMybIGZiCkXsEU= -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:35 2025 by rpki-client