$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2955f65-851f-33a4-93e4-d68580423d5c.roa File: c2955f65-851f-33a4-93e4-d68580423d5c.roa (raw, json) Hash identifier: Ngs+RgoOsyucfm0wrYkUEvvKhnslvHLcmPAmwH7ISzE= Subject key identifier: 98:D7:C0:35:24:D6:9D:88:CA:A4:56:A3:80:CA:A4:2C:2E:22:00:C7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400D1C0961DD1E58FD11B40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2955f65-851f-33a4-93e4-d68580423d5c.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100e:b0e4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:d1:c0:96:1d:d1:e5:8f:d1:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=e16650f3-454b-486c-ae2a-20b4baa0cee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e1:af:b2:0f:c5:47:bc:60:d1:33:da:db:8b: f9:b5:e3:c4:43:3f:ac:e7:5f:85:c7:ac:50:e1:b4: d7:d8:f8:5b:53:c6:75:ca:c8:1e:d6:0c:cd:a0:be: 76:25:d7:48:6a:ac:89:cd:88:f9:47:ed:59:02:93: 05:13:26:93:45:46:98:7c:08:ed:4d:03:d4:00:18: 45:c2:9f:b2:9b:9a:3b:49:4a:e2:b8:b8:0b:2a:be: 32:6c:e6:75:36:ab:a1:09:8f:0d:d5:45:b9:d8:fd: dd:be:a3:d0:80:4e:04:18:5c:7e:95:dc:49:33:9a: 52:95:5b:da:ed:3c:5e:de:10:52:48:db:de:d4:13: 57:70:7f:fc:9a:26:f0:34:2b:78:f2:7a:5d:0f:34: 53:20:7b:59:b0:41:f2:77:da:59:99:43:3a:55:af: 87:30:5a:1b:f9:93:25:5e:f5:cc:80:cf:c6:29:f3: 37:45:5a:e0:3c:07:36:f7:cb:85:fc:73:6a:88:9b: fa:b9:1c:27:a6:32:22:4e:eb:60:32:ba:2e:82:08: 6c:f4:53:1b:78:ca:15:8c:d5:eb:1c:a9:7e:57:fd: 28:61:aa:99:be:0e:01:d3:c1:83:e7:ca:59:12:da: dd:86:cb:88:0f:dc:d1:50:c5:4c:2b:3a:cf:6d:4c: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D7:C0:35:24:D6:9D:88:CA:A4:56:A3:80:CA:A4:2C:2E:22:00:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2955f65-851f-33a4-93e4-d68580423d5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100e:b0e4::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e9:ef:62:f1:ba:e8:6e:48:6e:a7:b4:51:51:b0:26:0f:cc: cd:70:49:fd:d7:c7:c6:c6:be:fa:da:dd:10:5d:5c:5c:d5:ef: c1:8a:0b:7a:20:6d:29:17:92:5d:ee:df:4c:d6:a1:3d:75:56: 32:72:8c:9d:b7:a8:7e:38:b9:be:38:f8:59:9b:aa:ce:ed:62: 4e:6d:32:6b:e2:58:c0:74:02:bd:bb:93:42:1c:84:cb:f4:f7: 6e:e0:34:ac:66:eb:ba:e5:c9:4f:d3:f1:c9:16:9e:64:9c:7d: 0f:c4:e5:8f:9a:48:7b:06:fb:e8:00:f8:0c:db:93:50:1a:e1: fd:f6:db:3e:7b:21:19:35:7c:7b:9d:bc:c2:96:47:39:63:53: 8d:95:35:2d:81:a8:26:0f:90:bf:b8:3e:d1:71:94:12:12:d9: 16:b4:06:e9:3c:7d:14:17:b7:8b:5d:37:65:b8:f8:c2:3d:d8: 90:4e:b6:ff:54:e4:ac:37:88:bc:fb:f4:e9:73:89:25:3b:c9: ff:b1:0e:48:1e:96:c6:e3:91:0e:18:71:0b:6b:cf:87:24:d3: 6d:e4:8a:de:87:d2:1c:97:14:2d:1b:b0:a9:51:56:fc:bb:18: 00:8e:7b:ca:75:96:89:41:76:42:65:0c:b7:3c:7a:83:c9:f9: 29:ef:e6:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikANHAlh3R5Y/RG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZTE2NjUwZjMtNDU0Yi00ODZjLWFlMmEtMjBiNGJhYTBjZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Gvsg/FR7xg0TPa24v5tePEQz+s51+Fx6xQ 4bTX2PhbU8Z1ysge1gzNoL52JddIaqyJzYj5R+1ZApMFEyaTRUaYfAjtTQPUABhF wp+ym5o7SUriuLgLKr4ybOZ1NquhCY8N1UW52P3dvqPQgE4EGFx+ldxJM5pSlVva 7Txe3hBSSNve1BNXcH/8mibwNCt48npdDzRTIHtZsEHyd9pZmUM6Va+HMFob+ZMl XvXMgM/GKfM3RVrgPAc298uF/HNqiJv6uRwnpjIiTutgMrougghs9FMbeMoVjNXr HKl+V/0oYaqZvg4B08GD58pZEtrdhsuID9zRUMVMKzrPbUyT/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJjXwDUk1p2IyqRWo4DKpCwuIgDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzI5NTVmNjUtODUxZi0z M2E0LTkzZTQtZDY4NTgwNDIzZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDrDk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACrp72LxuuhuSG6ntFFRsCYPzM1wSf3Xx8bGvvra3RBdXFzV78GK C3ogbSkXkl3u30zWoT11VjJyjJ23qH44ub44+Fmbqs7tYk5tMmviWMB0Ar27k0Ic hMv0927gNKxm67rlyU/T8ckWnmScfQ/E5Y+aSHsG++gA+Azbk1Aa4f322z57IRk1 fHudvMKWRzljU42VNS2BqCYPkL+4PtFxlBIS2Ra0Buk8fRQXt4tdN2W4+MI92JBO tv9U5Kw3iLz79OlziSU7yf+xDkgelsbjkQ4YcQtrz4ck023kit6H0hyXFC0bsKlR Vvy7GACOe8p1lolBdkJlDLc8eoPJ+Snv5qI= -----END CERTIFICATE-----Generated at Sun Apr 6 03:33:52 2025 by rpki-client