$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eccf8f8c-de9c-3814-8f51-fa0e63633fe2.roa File: eccf8f8c-de9c-3814-8f51-fa0e63633fe2.roa (raw, json) Hash identifier: iI1v+x8o38lP5EIA15nNw6FH240d6vHKxgJnmk2xbZo= Subject key identifier: 76:75:A6:7D:36:56:F3:91:AF:47:E9:A9:89:A2:59:E6:D7:B5:4D:C2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400D6C223F5CEDAA55A0700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eccf8f8c-de9c-3814-8f51-fa0e63633fe2.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100f:b000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:d6:c2:23:f5:ce:da:a5:5a:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=3d0dedaf-85cb-4f73-b65e-bee03eabf606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:ec:6a:32:ad:9c:9f:cc:39:bb:a4:49:88: f8:c1:1a:78:6f:d9:96:3d:26:35:b4:2a:ef:9e:e4: 10:67:6c:a3:dd:2d:9e:79:03:93:09:7a:80:36:d4: 3e:c3:73:82:1e:84:96:cb:3c:5a:65:6c:e5:fc:0a: 94:9a:1e:02:be:97:f3:d4:9b:36:07:93:48:c6:cb: 01:98:df:67:65:1b:1c:11:db:03:d1:10:45:a1:51: b6:22:ef:65:5a:03:19:f6:02:46:7a:77:e8:58:02: 7e:4d:20:4c:13:81:0c:ba:f9:fa:2e:8c:cd:ab:70: fc:20:33:27:4f:7a:38:5c:96:e3:25:d3:13:f3:7f: 1e:77:1e:84:3b:e0:7a:8d:06:8b:e3:a4:76:fb:98: 86:02:85:f2:06:06:86:6e:fc:1d:4c:7e:5c:36:5a: 6c:7b:d4:d8:96:51:1b:bc:ba:04:2f:4e:a5:69:8a: 5f:b1:de:f5:a3:e9:37:c1:b2:56:f5:f8:64:57:f6: 7b:dd:25:1a:d0:60:49:44:1d:7d:b2:50:a4:98:35: 0b:65:a1:1c:4e:3d:ac:bf:b3:32:e7:d4:3a:85:42: 65:41:a3:7d:36:69:07:8b:74:a4:c4:13:09:3b:49: 8c:3e:78:2c:51:ec:68:86:39:d5:b3:47:16:1e:4e: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:75:A6:7D:36:56:F3:91:AF:47:E9:A9:89:A2:59:E6:D7:B5:4D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eccf8f8c-de9c-3814-8f51-fa0e63633fe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100f:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b6:dc:c0:a4:61:f1:d2:cc:fc:02:5c:6a:96:17:5b:1b:38: 2d:ee:6b:3e:51:b6:9f:bc:3e:0e:7c:18:99:8f:90:04:0c:0a: c2:dc:1d:7d:18:78:cf:fd:51:e4:14:ad:7d:c6:31:54:e8:fc: 9c:cb:ac:0e:92:a4:48:b0:47:cc:8f:52:b0:df:86:1f:70:a2: 1c:68:14:93:c9:8e:02:28:ba:dd:a2:15:40:2f:85:aa:32:4b: ed:be:33:6f:75:67:0b:bd:9e:b3:e7:5f:5a:38:a3:b3:00:1d: 59:f1:88:82:de:98:1d:20:14:0e:67:5d:23:e2:83:df:cc:20: 2f:10:5c:ae:3a:65:df:62:2d:4f:a5:4a:c1:ab:fe:f9:ac:78: 72:fc:bc:86:f4:a6:64:7f:0f:71:0a:68:b0:90:e8:0f:00:89: 66:00:51:4f:cd:fa:e1:e3:46:f6:3d:a2:51:88:e7:67:01:9d: 01:ed:fe:5d:c0:5f:5b:e8:3e:2b:e1:04:f2:7b:2d:d5:4f:31: ff:1f:f8:44:6a:5a:fb:5a:c6:99:51:0f:ae:bd:d3:8e:6c:99: ba:6b:4e:32:e0:f0:52:e6:b8:a0:a2:d8:c6:31:ef:f9:4a:29: 09:69:64:ab:d4:e4:64:54:58:bd:af:d2:0d:00:40:d0:b0:f3: ae:8b:b4:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikANbCI/XO2qVaBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk M2QwZGVkYWYtODVjYi00ZjczLWI2NWUtYmVlMDNlYWJmNjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle3sajKtnJ/MObukSYj4wRp4b9mWPSY1tCrv nuQQZ2yj3S2eeQOTCXqANtQ+w3OCHoSWyzxaZWzl/AqUmh4Cvpfz1Js2B5NIxssB mN9nZRscEdsD0RBFoVG2Iu9lWgMZ9gJGenfoWAJ+TSBME4EMuvn6LozNq3D8IDMn T3o4XJbjJdMT838edx6EO+B6jQaL46R2+5iGAoXyBgaGbvwdTH5cNlpse9TYllEb vLoEL06laYpfsd71o+k3wbJW9fhkV/Z73SUa0GBJRB19slCkmDULZaEcTj2sv7My 59Q6hUJlQaN9NmkHi3SkxBMJO0mMPngsUexohjnVs0cWHk6XZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHZ1pn02VvORr0fpqYmiWebXtU3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWNjZjhmOGMtZGU5Yy0z ODE0LThmNTEtZmEwZTYzNjMzZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQD7AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKS23MCkYfHSzPwCXGqWF1sbOC3uaz5Rtp+8Pg58GJmPkAQMCsLc HX0YeM/9UeQUrX3GMVTo/JzLrA6SpEiwR8yPUrDfhh9wohxoFJPJjgIout2iFUAv haoyS+2+M291Zwu9nrPnX1o4o7MAHVnxiILemB0gFA5nXSPig9/MIC8QXK46Zd9i LU+lSsGr/vmseHL8vIb0pmR/D3EKaLCQ6A8AiWYAUU/N+uHjRvY9olGI52cBnQHt /l3AX1voPivhBPJ7LdVPMf8f+ERqWvtaxplRD669045smbprTjLg8FLmuKCi2MYx 7/lKKQlpZKvU5GRUWL2v0g0AQNCw866LtHE= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:15 2025 by rpki-client