$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2753aa5-3ab1-33a5-9df2-8357a0e02125.roa File: f2753aa5-3ab1-33a5-9df2-8357a0e02125.roa (raw, json) Hash identifier: r3l6vYQUX2l+6xBIi1F+ra2U6DBb1uXYCVk/btw4TW0= Subject key identifier: 38:79:5E:30:DD:2B:29:7F:33:9B:F3:6F:D8:94:CB:40:AC:65:A6:80 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C2489476550821ECA78F900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2753aa5-3ab1-33a5-9df2-8357a0e02125.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1004:b120::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:89:47:65:50:82:1e:ca:78:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=0cd86c35-833f-4793-99f5-d80ce8166893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:84:8b:ca:d9:a2:a8:e9:06:ca:b4:2e:63:18: 70:b5:54:04:68:21:ae:cc:aa:ad:7d:db:84:5f:a8: 45:04:7f:0b:ec:61:f6:2f:be:b9:c4:cc:2a:97:a1: 66:a4:d3:db:88:46:c4:d3:b3:33:39:95:fe:61:52: 88:6c:1d:be:0f:6d:39:68:7e:9f:fb:d5:6d:50:e3: 2b:90:3a:20:3f:d6:ed:7e:e7:03:66:db:c7:66:0f: a0:27:0c:97:02:4f:2b:7a:10:53:06:30:30:d3:bd: 47:55:0a:31:c2:9e:d3:5c:0a:33:f4:1a:51:99:5d: 37:ee:f5:09:1c:36:47:b7:cf:ea:a3:c9:ca:c9:83: 4c:d8:60:44:a9:4e:fc:6b:43:d7:ce:de:f1:0d:31: a4:bf:6a:5e:8d:4a:aa:59:8e:75:a3:32:e2:79:31: 9a:b6:10:17:39:84:fb:46:1e:22:3b:e4:70:6b:8f: 3e:9c:2b:a1:77:4f:70:97:48:5b:a6:69:37:4d:26: 5f:c2:29:73:88:3f:fc:7b:a3:ea:cc:bf:00:af:78: bb:b1:a6:5d:a8:29:96:fc:2e:9f:98:37:83:26:fc: e4:d5:27:9e:32:57:77:be:03:d0:7c:95:ab:8f:87: ad:22:42:5e:97:f4:00:49:f8:f9:44:c3:ba:97:61: f6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:79:5E:30:DD:2B:29:7F:33:9B:F3:6F:D8:94:CB:40:AC:65:A6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2753aa5-3ab1-33a5-9df2-8357a0e02125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1004:b120::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:50:0d:63:fa:ef:ff:0c:e4:e9:d7:26:ad:b6:14:a7:1d:6f: de:37:1f:b5:8f:5c:3d:45:98:57:0c:96:35:f9:e4:0a:3e:97: 05:72:cc:26:5e:2f:bb:4d:bb:5d:d7:21:e7:00:c5:d9:77:63: e9:90:a6:e5:9a:02:04:68:f5:5d:23:60:4d:2e:32:b3:15:27: 24:f4:49:35:5c:71:d0:b9:d2:d0:a3:b8:12:c7:80:ab:6b:bc: 4c:2b:76:3f:a1:46:82:61:62:84:40:9f:93:e2:45:5e:17:b1: 55:82:c8:ee:a5:e8:72:be:a8:e6:9a:cd:35:76:c4:9f:a7:54: 57:69:7f:1b:34:cb:e3:3f:ac:5b:4a:7c:97:d1:25:d8:fe:70: e6:9c:f6:3b:e5:a4:38:70:c2:c3:96:fb:e3:08:5f:c1:8e:f5: c0:b8:b5:9e:0e:03:16:f4:5d:ca:ee:6b:31:1d:a3:e5:7e:bb: b2:a8:e1:a0:07:88:7f:28:2d:92:00:6c:ff:27:0b:17:5e:33: 61:fa:cf:f6:5a:d3:94:b9:d1:1b:23:d6:6f:b5:a6:70:b6:8d: 8a:03:5f:65:14:78:01:6b:93:2b:7d:7e:53:af:6d:3c:a9:69: 77:73:76:b2:9b:a3:60:20:4e:88:49:79:1f:ce:d8:b3:c7:21: eb:1b:47:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIlHZVCCHsp4+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MGNkODZjMzUtODMzZi00NzkzLTk5ZjUtZDgwY2U4MTY2ODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYSLytmiqOkGyrQuYxhwtVQEaCGuzKqtfduE X6hFBH8L7GH2L765xMwql6FmpNPbiEbE07MzOZX+YVKIbB2+D205aH6f+9VtUOMr kDogP9btfucDZtvHZg+gJwyXAk8rehBTBjAw071HVQoxwp7TXAoz9BpRmV037vUJ HDZHt8/qo8nKyYNM2GBEqU78a0PXzt7xDTGkv2pejUqqWY51ozLieTGathAXOYT7 Rh4iO+Rwa48+nCuhd09wl0hbpmk3TSZfwilziD/8e6PqzL8Ar3i7saZdqCmW/C6f mDeDJvzk1SeeMld3vgPQfJWrj4etIkJel/QASfj5RMO6l2H2XwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDh5XjDdKyl/M5vzb9iUy0CsZaaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjI3NTNhYTUtM2FiMS0z M2E1LTlkZjItODM1N2EwZTAyMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBLEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKFQDWP67/8M5OnXJq22FKcdb943H7WPXD1FmFcMljX55Ao+lwVy zCZeL7tNu13XIecAxdl3Y+mQpuWaAgRo9V0jYE0uMrMVJyT0STVccdC50tCjuBLH gKtrvEwrdj+hRoJhYoRAn5PiRV4XsVWCyO6l6HK+qOaazTV2xJ+nVFdpfxs0y+M/ rFtKfJfRJdj+cOac9jvlpDhwwsOW++MIX8GO9cC4tZ4OAxb0XcruazEdo+V+u7Ko 4aAHiH8oLZIAbP8nCxdeM2H6z/Za05S50Rsj1m+1pnC2jYoDX2UUeAFrkyt9flOv bTypaXdzdrKbo2AgTohJeR/O2LPHIesbRzA= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:33 2025 by rpki-client