$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4cf3435-7511-32af-b13b-51a1de365c87.roa File: c4cf3435-7511-32af-b13b-51a1de365c87.roa (raw, json) Hash identifier: oJyNyKv+H3JXZdF7VNE/Af5XBNsqu+kap2vzf/EYZ7c= Subject key identifier: 66:17:2E:1B:9F:46:46:AD:9F:27:0B:63:FD:D2:51:2F:6D:1E:A0:4A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C24818A016364ADF6F1E400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4cf3435-7511-32af-b13b-51a1de365c87.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1000:b060::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:81:8a:01:63:64:ad:f6:f1:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=a3a7d4bb-fbbc-4922-8df9-b45efd2f005e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:c1:f7:3c:2e:f6:ab:8c:4d:8a:1a:06:4a: 21:37:2d:38:a0:8c:e5:03:24:94:00:69:1d:ee:85: a3:64:75:42:b8:e8:65:66:cd:b5:d0:7f:0e:fc:ae: 97:a8:ba:06:c6:5a:2a:97:06:54:48:05:14:d6:80: 51:34:87:32:3c:2d:76:22:f9:cd:c6:b3:de:93:d8: 76:30:df:6a:fe:e1:4a:37:c5:46:b7:83:4a:74:6d: 42:86:8f:d7:cd:c0:17:0d:99:a8:58:df:da:6b:7d: 33:cf:88:8b:e1:99:b4:10:13:de:ad:1a:b7:fa:8e: 64:27:a5:26:10:2d:e3:6f:bf:a9:5b:8a:84:4f:dc: e2:76:30:e1:1f:cd:1c:3d:f4:e5:fe:e1:dc:6e:9c: 24:e6:ea:4b:31:c4:6e:25:b7:0d:d1:b0:0e:ea:ff: 0e:8d:21:3e:b8:b6:84:37:d9:88:14:fd:9c:3d:43: 65:77:36:23:59:87:8f:51:10:28:d1:a8:03:08:c0: cc:91:fd:96:5d:fb:82:d2:0d:55:1d:e6:a1:84:99: 92:fe:b1:48:54:62:d4:ad:50:97:05:db:ac:a1:a5: b7:97:bf:65:42:4b:bb:65:ef:7f:fa:c2:3d:25:67: 4f:19:7a:d1:53:d6:d0:3a:9b:07:2c:c6:6c:30:69: 50:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:17:2E:1B:9F:46:46:AD:9F:27:0B:63:FD:D2:51:2F:6D:1E:A0:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4cf3435-7511-32af-b13b-51a1de365c87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1000:b060::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:4e:ca:e5:0f:db:81:f6:07:7b:0d:8e:c4:da:1d:2f:10:22: e0:69:79:65:de:3a:b6:6d:aa:f2:4f:3b:5c:76:6d:6f:eb:30: 5e:fc:46:e3:d8:6f:33:ff:3f:42:92:a2:c7:c1:d0:c8:87:e8: 63:1e:5a:d0:fb:b8:9a:b1:7e:c5:83:01:1e:53:a6:5e:01:20: 03:62:86:8e:50:af:63:e4:d9:4c:b0:2f:20:e4:f5:af:40:71: ae:a7:07:4b:56:5b:e2:eb:3c:2a:3b:9c:c9:b8:24:ba:77:86: 88:c9:9f:c9:0c:05:2b:e3:9e:b2:45:49:fe:6e:f3:13:c8:7e: 7f:f6:a4:26:18:94:3d:fc:07:8d:10:b0:f8:bd:f4:41:f7:d7: 5d:54:b1:a9:e5:5c:24:f4:71:8c:16:53:68:2b:2b:11:cd:2f: 5f:b8:5c:11:44:40:42:f4:1f:79:be:e3:47:11:fb:dc:55:90: 5b:25:f1:56:d1:6f:c6:ea:6f:c6:87:67:5d:b1:bd:3a:b8:fe: 48:fb:b4:7a:49:a7:34:40:78:12:3b:f6:dd:b8:50:c5:fa:5a: 00:bb:3e:c4:c1:0a:24:47:d9:29:b3:a8:57:48:49:c7:5c:0f: 23:1f:87:68:12:01:11:1e:3b:39:14:85:97:bf:6a:8b:18:d7: ee:8e:bc:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIGKAWNkrfbx5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YTNhN2Q0YmItZmJiYy00OTIyLThkZjktYjQ1ZWZkMmYwMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf3B9zwu9quMTYoaBkohNy04oIzlAySUAGkd 7oWjZHVCuOhlZs210H8O/K6XqLoGxloqlwZUSAUU1oBRNIcyPC12IvnNxrPek9h2 MN9q/uFKN8VGt4NKdG1Cho/XzcAXDZmoWN/aa30zz4iL4Zm0EBPerRq3+o5kJ6Um EC3jb7+pW4qET9zidjDhH80cPfTl/uHcbpwk5upLMcRuJbcN0bAO6v8OjSE+uLaE N9mIFP2cPUNldzYjWYePURAo0agDCMDMkf2WXfuC0g1VHeahhJmS/rFIVGLUrVCX BdusoaW3l79lQku7Ze9/+sI9JWdPGXrRU9bQOpsHLMZsMGlQRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGYXLhufRkatnycLY/3SUS9tHqBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRjZjM0MzUtNzUxMS0z MmFmLWIxM2ItNTFhMWRlMzY1Yzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQALBg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK1OyuUP24H2B3sNjsTaHS8QIuBpeWXeOrZtqvJPO1x2bW/rMF78 RuPYbzP/P0KSosfB0MiH6GMeWtD7uJqxfsWDAR5Tpl4BIANiho5Qr2Pk2UywLyDk 9a9Aca6nB0tWW+LrPCo7nMm4JLp3hojJn8kMBSvjnrJFSf5u8xPIfn/2pCYYlD38 B40QsPi99EH3111UsanlXCT0cYwWU2grKxHNL1+4XBFEQEL0H3m+40cR+9xVkFsl 8VbRb8bqb8aHZ12xvTq4/kj7tHpJpzRAeBI79t24UMX6WgC7PsTBCiRH2SmzqFdI ScdcDyMfh2gSAREeOzkUhZe/aosY1+6OvBc= -----END CERTIFICATE-----Generated at Sun Apr 6 06:07:41 2025 by rpki-client