$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa File: d4678c89-c355-32dc-9caa-22a3b0d8248e.roa (raw, json) Hash identifier: GED1/1ZmfEfCboiYpu6gaTobaQ7y8SrsymyCkuYMAuM= Subject key identifier: 0D:53:5C:E7:96:1B:1C:78:2A:31:14:91:A4:B5:A7:77:8E:E3:7F:4F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400E5570DDFF7611D58EC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100a:b010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:e5:57:0d:df:f7:61:1d:58:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=964c2a8d-2d87-4ab3-a294-4594dfe64bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:3f:6e:0d:c9:59:5b:f8:09:81:46:1f:4f: 3c:2a:d2:5f:af:9a:45:e1:0e:68:37:00:94:70:1f: 25:f3:53:83:54:d9:e4:d3:7c:6c:61:e8:fa:0a:a9: a8:81:40:92:6c:75:70:dc:fa:7d:78:6a:97:76:9b: 4a:46:27:ae:ce:06:31:24:df:58:c1:7d:0c:8e:04: e9:bf:09:53:2c:a9:c0:67:a9:1f:e0:18:2f:08:da: cb:18:aa:2d:2d:84:1a:05:03:50:30:94:78:54:be: 0a:ec:ba:ad:00:67:fd:e6:22:d9:04:5b:09:e2:4d: 97:c2:c7:ab:93:82:84:0b:22:79:1d:94:b8:5f:0b: b7:d7:41:65:ac:70:9a:76:f1:63:af:48:3e:f7:c4: ba:5a:95:94:a8:aa:2d:6e:86:05:f6:d8:90:da:d6: c9:87:97:2f:76:03:40:94:87:dd:95:de:5e:b2:08: b3:bc:b7:c0:04:16:2a:8a:14:bf:08:90:de:87:3d: 04:b0:f1:36:63:01:10:49:96:f8:0e:ed:c0:be:7d: 49:79:f3:88:1a:50:b7:6d:63:23:31:60:af:d9:f2: eb:4a:96:16:13:2a:bc:61:26:f2:07:f1:8b:79:92: 96:37:aa:85:20:16:72:92:d8:b3:16:d6:94:b1:d1: fc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:53:5C:E7:96:1B:1C:78:2A:31:14:91:A4:B5:A7:77:8E:E3:7F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4678c89-c355-32dc-9caa-22a3b0d8248e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100a:b010::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:e1:f2:3d:c5:82:3d:b3:91:a0:df:84:d0:7a:75:a1:60:b4: 45:28:de:d8:ca:7a:07:07:86:12:f9:9f:1e:8b:66:5f:49:98: 9c:24:0f:f1:30:06:1e:75:aa:ae:c0:f9:f5:5e:57:1f:88:ec: 26:63:88:9f:ac:ef:c2:ba:6e:06:06:82:c5:80:c8:1a:70:b9: 9b:68:1d:f3:f7:eb:fd:51:3e:20:a8:cc:34:98:5b:e0:04:4d: b8:ae:ad:6d:0a:99:00:f9:9a:47:a0:96:d8:79:84:c1:fe:7b: e8:50:d7:65:00:d0:99:f6:64:55:72:c7:c9:38:f3:51:49:bf: 4a:8e:b2:ad:de:d4:dd:70:49:84:7b:b6:c5:12:fe:1d:d9:53: 98:11:96:43:39:4d:a8:d9:63:a6:b7:32:f3:73:36:31:90:29: 0c:6b:63:1c:2c:56:0f:23:0b:90:26:e0:64:e9:b0:37:7c:8c: e1:22:20:e3:66:6b:17:a5:2f:b6:13:15:51:31:ff:85:a5:89: bb:59:dd:c1:f2:ab:ff:08:e3:f2:39:8c:1f:1d:c9:bb:4b:c0: 2c:ef:fc:35:0c:02:23:45:6a:e2:6e:c9:15:7e:3a:ea:6b:24: ea:52:8b:e8:d9:ec:e6:37:53:01:6e:13:48:f4:96:a1:3d:df: dc:51:11:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOVXDd/3YR1Y7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk OTY0YzJhOGQtMmQ4Ny00YWIzLWEyOTQtNDU5NGRmZTY0YmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE8/bg3JWVv4CYFGH088KtJfr5pF4Q5oNwCU cB8l81ODVNnk03xsYej6CqmogUCSbHVw3Pp9eGqXdptKRieuzgYxJN9YwX0MjgTp vwlTLKnAZ6kf4BgvCNrLGKotLYQaBQNQMJR4VL4K7LqtAGf95iLZBFsJ4k2Xwser k4KECyJ5HZS4Xwu310FlrHCadvFjr0g+98S6WpWUqKotboYF9tiQ2tbJh5cvdgNA lIfdld5esgizvLfABBYqihS/CJDehz0EsPE2YwEQSZb4Du3Avn1JefOIGlC3bWMj MWCv2fLrSpYWEyq8YSbyB/GLeZKWN6qFIBZyktizFtaUsdH8ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA1TXOeWGxx4KjEUkaS1p3eO439PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQ2NzhjODktYzM1NS0z MmRjLTljYWEtMjJhM2IwZDgyNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCrAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALLh8j3Fgj2zkaDfhNB6daFgtEUo3tjKegcHhhL5nx6LZl9JmJwk D/EwBh51qq7A+fVeVx+I7CZjiJ+s78K6bgYGgsWAyBpwuZtoHfP36/1RPiCozDSY W+AETbiurW0KmQD5mkeglth5hMH+e+hQ12UA0Jn2ZFVyx8k481FJv0qOsq3e1N1w SYR7tsUS/h3ZU5gRlkM5TajZY6a3MvNzNjGQKQxrYxwsVg8jC5Am4GTpsDd8jOEi IONmaxelL7YTFVEx/4WlibtZ3cHyq/8I4/I5jB8dybtLwCzv/DUMAiNFauJuyRV+ OuprJOpSi+jZ7OY3UwFuE0j0lqE939xREXk= -----END CERTIFICATE-----Generated at Sat Apr 5 21:34:45 2025 by rpki-client