$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce0ab15c-af02-336e-b67a-1d17f7f8911a.roa File: ce0ab15c-af02-336e-b67a-1d17f7f8911a.roa (raw, json) Hash identifier: wFHGh+upJ38SDJQQ5bIP1NR5VxuwMagV87RnzuV/pqE= Subject key identifier: C7:49:07:72:DE:71:30:59:BB:9F:0A:66:27:6B:C2:19:83:F9:D1:E2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584949FEA7413F116AB8854AB900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce0ab15c-af02-336e-b67a-1d17f7f8911a.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 6167 IP address blocks: 2600:1012:b098::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:a7:41:3f:11:6a:b8:85:4a:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=dc4a5a2d-2f3a-4261-ba00-e7b2da82995e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:30:71:7f:01:da:60:6f:ca:b6:04:c1:69:07: eb:2c:ef:27:62:b8:53:bf:60:1e:38:98:89:89:60: 7d:d8:72:cb:a8:23:e5:53:3b:3c:c5:65:ed:bb:3c: 70:98:db:77:82:2e:81:7c:7c:cf:e6:62:4d:55:5b: 12:ef:5b:8c:04:c7:37:20:b5:3d:75:b3:92:1e:d6: c1:f0:79:28:1c:3d:97:c3:05:a4:96:6c:fb:ed:30: 84:65:f3:4f:0a:bb:18:22:c9:dd:60:e6:1b:6b:58: 57:10:1f:d3:82:97:38:cb:ac:6d:26:71:2c:4e:22: 58:80:21:2e:b9:af:f1:88:f5:36:52:2a:50:ca:a0: 67:1d:83:5e:9d:07:14:64:d2:62:f6:92:5e:e0:f1: 6e:d3:25:27:24:ab:e5:6c:78:d9:96:cf:41:42:37: bc:56:05:97:00:f8:e1:dd:7b:16:cd:99:55:75:7d: 98:b6:2b:16:4f:78:44:31:61:40:6f:77:41:30:a7: ed:70:96:49:9b:5b:fb:fa:30:e9:5a:1b:a9:c5:df: c8:da:73:d7:45:eb:db:e8:41:e6:17:69:0a:27:b2: cf:3f:d7:fc:c8:ad:59:f2:81:88:14:26:19:f7:b5: ca:b5:26:a3:2e:86:b1:71:74:49:1f:95:b4:d1:92: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:49:07:72:DE:71:30:59:BB:9F:0A:66:27:6B:C2:19:83:F9:D1:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce0ab15c-af02-336e-b67a-1d17f7f8911a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1012:b098::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1a:9b:b3:cc:01:0d:3c:d9:07:56:95:f1:39:34:5d:97:f1: 13:b2:a0:61:c5:99:39:2c:a3:00:43:4a:ee:59:b5:0a:33:2c: 26:a6:53:c4:63:14:8b:f3:d1:46:20:f9:bf:9c:28:61:95:e6: e8:78:b1:1c:9a:f2:b1:80:75:fc:10:26:47:96:2b:43:42:17: 56:85:6c:8d:13:b5:54:f1:ef:e7:ec:5d:d5:89:be:5d:7d:14: 5a:5e:1d:a6:8b:bb:f2:09:24:86:06:7a:32:34:0a:ec:f3:a5: 5a:76:33:93:87:0e:f1:e2:ef:0a:3b:82:2e:84:43:69:59:78: 83:d8:49:c9:8d:09:05:e7:e6:55:a1:95:6d:cd:3e:4d:33:b0: 48:49:de:68:32:a7:68:c3:e0:2e:f9:66:57:b3:a2:39:9e:ed: 23:6d:a8:3b:6e:f8:77:5f:74:be:3a:c9:77:e2:4b:32:c6:44: 59:26:5e:dc:12:64:a4:0b:c8:20:dc:90:0c:51:4a:dc:44:bc: 07:e7:5a:9b:f8:9a:2d:8c:82:ee:93:03:0a:46:9d:e7:d8:5e: 49:c8:e4:f3:27:b6:88:b3:b6:44:76:a8:16:a9:a5:0d:22:22: 87:38:aa:df:a2:9c:a8:c4:6c:cf:33:85:00:8a:5b:a7:c3:46: d9:f6:87:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/qdBPxFquIVKuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZGM0YTVhMmQtMmYzYS00MjYxLWJhMDAtZTdiMmRhODI5OTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDBxfwHaYG/KtgTBaQfrLO8nYrhTv2AeOJiJ iWB92HLLqCPlUzs8xWXtuzxwmNt3gi6BfHzP5mJNVVsS71uMBMc3ILU9dbOSHtbB 8HkoHD2XwwWklmz77TCEZfNPCrsYIsndYOYba1hXEB/Tgpc4y6xtJnEsTiJYgCEu ua/xiPU2UipQyqBnHYNenQcUZNJi9pJe4PFu0yUnJKvlbHjZls9BQje8VgWXAPjh 3XsWzZlVdX2YtisWT3hEMWFAb3dBMKftcJZJm1v7+jDpWhupxd/I2nPXRevb6EHm F2kKJ7LPP9f8yK1Z8oGIFCYZ97XKtSajLoaxcXRJH5W00ZJhfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMdJB3LecTBZu58KZidrwhmD+dHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2UwYWIxNWMtYWYwMi0z MzZlLWI2N2EtMWQxN2Y3Zjg5MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQErCY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4am7PMAQ082QdWlfE5NF2X8ROyoGHFmTksowBDSu5ZtQozLCam U8RjFIvz0UYg+b+cKGGV5uh4sRya8rGAdfwQJkeWK0NCF1aFbI0TtVTx7+fsXdWJ vl19FFpeHaaLu/IJJIYGejI0CuzzpVp2M5OHDvHi7wo7gi6EQ2lZeIPYScmNCQXn 5lWhlW3NPk0zsEhJ3mgyp2jD4C75Zlezojme7SNtqDtu+HdfdL46yXfiSzLGRFkm XtwSZKQLyCDckAxRStxEvAfnWpv4mi2Mgu6TAwpGnefYXknI5PMntoiztkR2qBap pQ0iIoc4qt+inKjEbM8zhQCKW6fDRtn2h7M= -----END CERTIFICATE-----Generated at Sat Apr 5 20:30:23 2025 by rpki-client