$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d799555d-ec1f-3d8d-8df3-ed83861ed2d2.roa File: d799555d-ec1f-3d8d-8df3-ed83861ed2d2.roa (raw, json) Hash identifier: rcRLXtZ2u/9YfPX1AFW2xtvNTLnk9DuA6HGF3SVhd/8= Subject key identifier: 92:ED:64:7C:2A:2C:DD:51:8D:5E:9E:D7:BF:BA:6D:63:AD:53:26:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400E99E10A8A5C6416B3E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d799555d-ec1f-3d8d-8df3-ed83861ed2d2.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100c:b220::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:e9:9e:10:a8:a5:c6:41:6b:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=2317c1c7-96f1-4d95-9d8f-83ed84ba9752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:19:12:71:17:c5:28:5f:9d:8d:e9:27:b0: 6b:8b:02:c9:1c:d8:1b:86:b5:12:54:74:40:12:cc: 0c:3a:b6:a4:bd:53:68:3d:e6:8a:30:cd:f5:50:49: c3:c4:38:80:12:f0:3c:2d:a8:2d:2d:11:bb:57:80: 33:6c:23:10:df:33:da:0f:8f:51:8f:e5:60:f9:60: d7:7c:db:cc:7b:2a:04:94:0d:98:e0:da:b5:42:30: 2c:45:a3:79:1d:48:b0:88:e7:b5:ec:98:a6:27:f9: 63:d8:b1:e8:d6:0e:0b:ee:04:fb:0a:6a:35:7b:94: 70:09:33:7f:b7:6e:4b:bd:6e:ba:cd:f1:8e:8b:b5: e0:3e:b2:2d:fb:1f:2f:11:cb:52:c0:42:fc:91:55: 3e:05:06:ba:2a:58:e3:8f:da:21:f2:ab:ff:30:ea: 03:91:0b:d3:f1:81:44:88:20:78:57:cf:89:49:ff: 96:92:85:03:f5:4c:14:d8:73:75:45:6c:7f:7b:bf: df:0e:cf:74:cb:d0:2f:64:78:fa:e2:45:a9:cc:09: 75:29:17:e0:ea:9a:91:82:be:e3:04:5b:20:78:d8: ba:ff:6c:64:97:9d:6b:7b:b1:74:c7:e9:ef:9f:1c: 65:09:1d:ec:6f:67:08:ea:02:f1:61:6b:da:c6:10: 99:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:ED:64:7C:2A:2C:DD:51:8D:5E:9E:D7:BF:BA:6D:63:AD:53:26:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d799555d-ec1f-3d8d-8df3-ed83861ed2d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100c:b220::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ce:fb:bf:4b:10:d5:3d:6a:6e:81:56:84:29:e7:97:66:90: 2d:03:89:9c:f5:ee:0b:0b:61:71:56:17:6b:7e:4b:99:0f:f3: a6:18:75:8d:f3:0b:46:b8:a0:21:38:d2:86:80:33:69:fd:2a: 27:8b:13:46:65:1a:43:73:c1:fe:bd:c9:12:22:7a:07:80:d7: 46:39:cf:ae:50:dc:49:02:eb:16:8c:29:ca:e0:61:65:17:bd: e8:32:8b:9e:3e:d2:2a:20:66:06:f6:bd:89:53:ca:1a:3b:6c: 71:8b:02:85:57:68:3e:40:4d:b0:52:96:30:63:6f:26:75:67: 66:90:b4:42:54:3c:bb:bc:39:63:b4:19:2a:31:5a:71:18:10: b1:2b:9c:8c:0d:7c:1a:95:79:a8:c8:d6:ad:8d:16:36:20:b5: 49:99:63:38:ad:22:1f:a2:46:0a:0c:20:db:83:d3:24:8c:cf: 56:33:84:b2:c4:25:04:98:64:4f:c5:03:cb:db:5a:5c:79:c5: 31:97:cc:c8:3d:96:ff:d6:71:57:4e:52:ea:b5:bf:9c:78:fa: d5:d9:9a:bc:e9:58:fb:37:83:f2:9c:28:f2:54:1e:07:6d:6b: 60:c0:2d:5f:78:6c:51:7a:32:6e:b7:71:8d:43:08:eb:6f:92: b9:19:9e:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOmeEKilxkFrPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MjMxN2MxYzctOTZmMS00ZDk1LTlkOGYtODNlZDg0YmE5NzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw8ZEnEXxShfnY3pJ7BriwLJHNgbhrUSVHRA EswMOrakvVNoPeaKMM31UEnDxDiAEvA8LagtLRG7V4AzbCMQ3zPaD49Rj+Vg+WDX fNvMeyoElA2Y4Nq1QjAsRaN5HUiwiOe17JimJ/lj2LHo1g4L7gT7Cmo1e5RwCTN/ t25LvW66zfGOi7XgPrIt+x8vEctSwEL8kVU+BQa6Kljjj9oh8qv/MOoDkQvT8YFE iCB4V8+JSf+WkoUD9UwU2HN1RWx/e7/fDs90y9AvZHj64kWpzAl1KRfg6pqRgr7j BFsgeNi6/2xkl51re7F0x+nvnxxlCR3sb2cI6gLxYWvaxhCZJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJLtZHwqLN1RjV6e17+6bWOtUyawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDc5OTU1NWQtZWMxZi0z ZDhkLThkZjMtZWQ4Mzg2MWVkMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDLIg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABPO+79LENU9am6BVoQp55dmkC0DiZz17gsLYXFWF2t+S5kP86YY dY3zC0a4oCE40oaAM2n9KieLE0ZlGkNzwf69yRIiegeA10Y5z65Q3EkC6xaMKcrg YWUXvegyi54+0iogZgb2vYlTyho7bHGLAoVXaD5ATbBSljBjbyZ1Z2aQtEJUPLu8 OWO0GSoxWnEYELErnIwNfBqVeajI1q2NFjYgtUmZYzitIh+iRgoMINuD0ySMz1Yz hLLEJQSYZE/FA8vbWlx5xTGXzMg9lv/WcVdOUuq1v5x4+tXZmrzpWPs3g/KcKPJU Hgdta2DALV94bFF6Mm63cY1DCOtvkrkZnnE= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:25 2025 by rpki-client