$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa File: c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa (raw, json) Hash identifier: HBYzh3XW35p+6jw+XkwNWAPCpgLC/ocjNHt5PrqH9pE= Subject key identifier: 12:53:B7:BE:4B:E0:C4:1F:EB:3D:07:3E:3B:2B:DD:20:4A:AB:23:93 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400EB375DDDF5F6D54E1700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100d:9010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:eb:37:5d:dd:f5:f6:d5:4e:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=324e07ad-7c5e-40ab-b95e-6c27a87371a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:79:d8:59:74:74:f9:13:e4:88:a4:ba:06: fa:21:3d:6c:44:81:75:84:08:af:76:e8:17:57:3b: 71:c3:c5:34:7f:27:ac:6e:c2:7c:37:fd:cb:aa:03: 3a:76:c3:9e:77:a1:42:97:b7:84:21:11:59:2e:4c: e4:d0:1d:5a:ff:12:f4:38:ba:69:39:91:81:02:5a: e5:d7:2b:08:26:f6:8d:f1:a1:d5:a5:bd:db:79:1c: 20:c6:1b:30:a2:7d:c0:69:36:c3:64:f6:4b:a2:1a: 21:fe:df:51:82:26:8b:b3:aa:c0:db:63:bb:e7:3d: bd:74:00:92:41:7d:d3:1d:3d:94:e5:4f:ae:c2:50: 43:b4:9b:9e:7d:75:75:4e:9e:25:49:45:bc:33:97: 02:0d:34:b2:12:da:1f:2e:3f:19:23:df:0d:2a:fa: b3:bd:53:7a:c5:52:68:dd:64:31:98:37:9e:aa:be: b3:a7:1b:96:60:b9:8a:ff:63:96:44:72:c2:6a:a3: 1e:1e:2d:2d:2c:4c:59:27:f0:cf:42:4a:d5:c2:3e: 37:be:95:ac:c7:a4:10:64:a4:2b:90:0a:f4:48:e5: f1:cc:a7:ba:e5:7e:bf:06:db:d1:4e:df:ba:e6:ba: c4:61:6c:07:54:d5:a0:d6:af:fe:95:03:40:d8:1f: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:53:B7:BE:4B:E0:C4:1F:EB:3D:07:3E:3B:2B:DD:20:4A:AB:23:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:9010::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c4:a8:cc:2b:ac:91:13:b0:a8:43:3a:41:80:46:40:3b:0a: c1:e5:09:58:a3:31:9d:8c:aa:71:d8:fe:6f:5f:48:b0:7e:b7: a8:c7:9e:e8:18:85:8f:18:24:d8:85:9f:bc:c7:98:24:20:f0: 81:8a:5b:c2:01:16:c7:11:ac:5f:19:d1:13:5d:e9:f2:a9:21: b8:1f:a0:d5:6a:27:79:8c:15:76:98:a9:15:4b:a8:7e:7e:d9: 37:45:28:1b:50:aa:9e:53:3e:1c:ec:5a:e8:dd:f8:65:1f:1c: 09:22:9b:f9:10:a7:41:61:c9:af:5f:a3:64:de:15:55:12:6b: 66:a5:d1:f2:de:02:c5:69:20:04:61:e9:e7:33:58:ac:bc:ef: df:5d:ba:95:36:c1:5a:9a:48:bd:eb:ad:7d:16:0d:16:71:b6: dd:26:46:30:90:37:2c:33:2b:fb:5b:24:e4:69:87:9b:9b:9b: 65:02:14:f7:94:d4:49:5b:4a:c8:83:4c:0d:3c:92:67:29:8b: 2b:b1:c6:da:9c:21:a3:32:17:37:6b:bd:50:68:95:d6:06:bf: c7:be:f0:eb:8c:ac:e0:60:bb:84:85:8c:cb:13:17:c0:ff:5c: 0c:ae:9b:a9:a7:13:2d:11:da:0a:1d:f8:ce:cb:16:21:a4:08: e0:3d:14:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOs3Xd319tVOFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MzI0ZTA3YWQtN2M1ZS00MGFiLWI5NWUtNmMyN2E4NzM3MWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUJ52Fl0dPkT5Iikugb6IT1sRIF1hAivdugX Vztxw8U0fyesbsJ8N/3LqgM6dsOed6FCl7eEIRFZLkzk0B1a/xL0OLppOZGBAlrl 1ysIJvaN8aHVpb3beRwgxhswon3AaTbDZPZLohoh/t9RgiaLs6rA22O75z29dACS QX3THT2U5U+uwlBDtJuefXV1Tp4lSUW8M5cCDTSyEtofLj8ZI98NKvqzvVN6xVJo 3WQxmDeeqr6zpxuWYLmK/2OWRHLCaqMeHi0tLExZJ/DPQkrVwj43vpWsx6QQZKQr kAr0SOXxzKe65X6/BtvRTt+65rrEYWwHVNWg1q/+lQNA2B+g6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBJTt75L4MQf6z0HPjsr3SBKqyOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRjMWFhZjctOTUxNC0z MTQyLThiN2ItM2I2MDFiMmZmMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDZAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzEqMwrrJETsKhDOkGARkA7CsHlCVijMZ2MqnHY/m9fSLB+t6jH nugYhY8YJNiFn7zHmCQg8IGKW8IBFscRrF8Z0RNd6fKpIbgfoNVqJ3mMFXaYqRVL qH5+2TdFKBtQqp5TPhzsWujd+GUfHAkim/kQp0Fhya9fo2TeFVUSa2al0fLeAsVp IARh6eczWKy8799dupU2wVqaSL3rrX0WDRZxtt0mRjCQNywzK/tbJORph5ubm2UC FPeU1ElbSsiDTA08kmcpiyuxxtqcIaMyFzdrvVBoldYGv8e+8OuMrOBgu4SFjMsT F8D/XAyum6mnEy0R2god+M7LFiGkCOA9FMU= -----END CERTIFICATE-----Generated at Sat Apr 5 18:37:27 2025 by rpki-client