$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c386230e-af7a-31e6-929e-0a4ed1ea60b1.roa File: c386230e-af7a-31e6-929e-0a4ed1ea60b1.roa (raw, json) Hash identifier: NGajQc0eH8w4wtR7DbWksU7zB9VQgUnOBfSKqe+VloA= Subject key identifier: CE:B0:0C:11:DF:4C:76:CC:B3:5C:D0:9D:F6:AB:12:F3:E1:1D:96:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584949FEA45BA945EDF309462900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c386230e-af7a-31e6-929e-0a4ed1ea60b1.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 6167 IP address blocks: 2600:1011:b130::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:a4:5b:a9:45:ed:f3:09:46:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=43bb5a68-3853-44af-b8aa-006800375d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:76:5a:e4:d3:14:5d:7d:38:5f:ef:86:ec: ce:cc:3f:53:1c:03:0b:9d:90:f2:88:36:36:8b:bb: cb:a9:d0:0c:a5:98:76:73:96:15:00:bf:fc:36:0a: ef:46:46:52:89:22:b2:30:68:54:9b:a6:ec:ba:8a: 9a:b8:fa:f3:fa:87:59:8b:e2:2e:d2:9e:fe:2b:c2: f8:e1:6b:31:aa:18:cb:97:66:57:0e:29:f7:f2:6f: 55:e6:c0:bb:3e:f4:83:90:32:2c:f2:06:24:26:e7: 50:ad:d2:95:04:77:79:4b:22:eb:5c:6b:33:5e:f4: a1:db:4d:61:b4:ce:43:40:b9:26:60:98:0f:fc:12: c9:4c:58:7d:89:4a:db:15:55:62:1f:05:01:1d:04: 40:85:22:28:98:35:bf:bf:d9:a0:4e:dc:56:ac:e9: f9:03:9f:19:5b:d0:03:26:53:6d:90:46:6c:e3:f6: ab:16:11:76:11:d0:0b:0d:46:fb:2a:a3:d6:57:ed: ef:5c:4a:66:28:63:b6:91:7a:c1:4f:3c:1f:81:9c: 4e:e5:2a:f1:9b:4c:a6:c3:d0:1c:fb:5f:5a:d5:20: 5f:39:d4:d1:4e:bf:fb:de:f1:a2:95:dc:a6:43:8c: a4:b8:a9:28:46:51:96:90:72:85:9b:61:8d:dd:15: a2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B0:0C:11:DF:4C:76:CC:B3:5C:D0:9D:F6:AB:12:F3:E1:1D:96:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c386230e-af7a-31e6-929e-0a4ed1ea60b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1011:b130::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:89:7d:c0:ba:88:8a:4c:b5:89:61:9a:74:bc:78:c5:c9:bf: c5:43:69:ad:a6:8f:1d:7c:ff:75:bc:4c:74:af:e1:c8:31:b6: fe:87:e4:a6:ea:fd:55:32:01:12:d1:b5:59:c3:db:37:4e:ec: aa:a6:71:5d:78:6a:86:e1:86:73:ce:9a:08:dc:88:f8:4b:3d: 4b:bf:57:d8:2b:73:f6:d5:74:fa:70:d5:45:e6:cd:34:15:63: b0:c8:a6:70:30:96:1b:2f:3d:89:61:51:e9:f2:89:f9:a0:89: 79:e9:89:8f:82:1b:08:13:53:08:f2:f1:d2:65:c9:ed:44:6f: 8b:51:35:2b:85:c9:92:be:c6:59:b1:bd:c7:09:35:0c:ec:e8: 1a:eb:ac:20:fb:b6:0d:d5:5f:fa:c9:32:38:10:7b:37:cd:c8: 3a:7c:1f:90:e9:13:6d:3c:0a:20:70:e1:be:cb:aa:da:37:28: 8f:2b:d9:29:ab:4c:28:6e:9d:4e:fd:04:31:5c:de:ed:a3:30: e9:2e:33:a3:cb:68:3d:55:a3:16:3c:52:39:48:cd:81:3b:2d: 68:2c:0b:29:48:c0:db:8f:4d:55:b3:04:fe:c5:25:0e:90:0d: 17:fe:75:24:f1:4d:d4:2a:3b:6c:33:a0:e2:9a:44:0a:aa:99: 34:80:ab:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/qRbqUXt8wlGKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NDNiYjVhNjgtMzg1My00NGFmLWI4YWEtMDA2ODAwMzc1ZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymB2WuTTFF19OF/vhuzOzD9THAMLnZDyiDY2 i7vLqdAMpZh2c5YVAL/8NgrvRkZSiSKyMGhUm6bsuoqauPrz+odZi+Iu0p7+K8L4 4WsxqhjLl2ZXDin38m9V5sC7PvSDkDIs8gYkJudQrdKVBHd5SyLrXGszXvSh201h tM5DQLkmYJgP/BLJTFh9iUrbFVViHwUBHQRAhSIomDW/v9mgTtxWrOn5A58ZW9AD JlNtkEZs4/arFhF2EdALDUb7KqPWV+3vXEpmKGO2kXrBTzwfgZxO5Srxm0ymw9Ac +19a1SBfOdTRTr/73vGildymQ4ykuKkoRlGWkHKFm2GN3RWiVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM6wDBHfTHbMs1zQnfarEvPhHZZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzM4NjIzMGUtYWY3YS0z MWU2LTkyOWUtMGE0ZWQxZWE2MGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQEbEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESJfcC6iIpMtYlhmnS8eMXJv8VDaa2mjx18/3W8THSv4cgxtv6H 5Kbq/VUyARLRtVnD2zdO7KqmcV14aobhhnPOmgjciPhLPUu/V9grc/bVdPpw1UXm zTQVY7DIpnAwlhsvPYlhUenyifmgiXnpiY+CGwgTUwjy8dJlye1Eb4tRNSuFyZK+ xlmxvccJNQzs6BrrrCD7tg3VX/rJMjgQezfNyDp8H5DpE208CiBw4b7Lqto3KI8r 2SmrTChunU79BDFc3u2jMOkuM6PLaD1VoxY8UjlIzYE7LWgsCylIwNuPTVWzBP7F JQ6QDRf+dSTxTdQqO2wzoOKaRAqqmTSAq08= -----END CERTIFICATE-----Generated at Sun Apr 6 03:21:49 2025 by rpki-client