$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f635be5b-b364-3295-a856-e30b84f8f205.roa File: f635be5b-b364-3295-a856-e30b84f8f205.roa (raw, json) Hash identifier: 67AhSHlUnNCbPrS5ZjWgZmRLwRgZWnwOoGm/p+7inUk= Subject key identifier: 2D:39:74:BA:D6:78:9D:D6:08:78:9A:E5:E8:B8:27:09:0E:18:21:EB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848A400EC97BDD092C8B8D31E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f635be5b-b364-3295-a856-e30b84f8f205.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 6167 IP address blocks: 2600:100d:b0c0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:ec:97:bd:d0:92:c8:b8:d3:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=bc41c7fd-ef1f-4e10-bd4c-b137132fef33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:b3:5e:e4:ac:b4:51:02:cb:9a:62:56:94: 03:a2:e7:de:60:1e:8c:26:ef:bd:67:01:00:d1:7a: c2:c9:16:20:33:36:d1:52:aa:e4:81:d1:67:d6:83: 74:d7:6f:31:88:e4:cb:49:aa:81:31:02:41:c1:08: 73:35:3d:e0:7f:b8:bc:66:ac:20:0d:e5:b5:13:01: d1:e4:a2:4d:d2:f1:19:87:70:0b:fb:60:d4:7e:02: dc:72:7b:0a:22:61:81:d0:c1:eb:d6:eb:f9:62:c6: d1:e9:b5:52:c1:19:48:61:14:d7:64:7a:63:98:71: 43:dd:19:9c:b7:71:f0:a2:c2:bc:5e:b5:12:54:b2: 54:f8:38:45:4e:e7:ff:fe:a2:b7:82:62:36:8f:f8: c5:7c:0b:84:cb:34:ab:27:c7:fd:c2:1f:1a:1c:9e: aa:54:fb:5f:7f:55:28:96:20:6f:5a:46:70:bf:d1: 10:84:36:a6:84:3e:4b:9a:28:04:53:51:6f:5e:d3: fe:47:57:db:d1:03:31:af:eb:8e:6b:a4:19:cb:a3: ff:5e:aa:d9:08:79:da:06:80:50:bf:44:f2:4c:b6: 75:2a:3c:c5:3c:55:8f:d4:07:44:87:6e:90:c5:dc: 7c:37:3d:fa:ba:bb:33:66:91:a5:6d:3c:92:ee:0b: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:39:74:BA:D6:78:9D:D6:08:78:9A:E5:E8:B8:27:09:0E:18:21:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f635be5b-b364-3295-a856-e30b84f8f205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:b0c0::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a0:a0:a2:07:1c:d8:86:c4:36:d5:ca:cb:8f:c6:45:e3:51: 9c:39:11:71:ef:74:99:09:a4:82:e5:0e:0b:1b:57:25:d5:c1: 87:68:19:e7:5a:04:ec:7b:af:13:c6:41:62:75:24:f2:d5:f1: c5:2c:a1:ad:08:f5:da:bd:94:09:47:54:6a:23:d5:bc:ef:39: 35:ef:b0:45:83:7f:26:a1:74:12:0c:c2:5d:7a:ab:bf:3f:42: 2f:2c:09:ec:8d:d6:1a:e4:24:d3:e2:d6:bb:f8:94:84:ee:d1: b1:c2:12:ce:87:11:db:30:69:58:94:fe:48:05:bc:01:54:5c: 23:f0:e6:4e:57:51:9c:2f:93:b3:83:b6:96:cc:9e:37:9c:53: 79:13:a9:ed:ee:ac:0a:89:3d:ba:59:49:a4:f9:f3:98:d9:30: e7:2f:b7:f8:0d:66:04:c4:0d:27:d0:c9:35:cd:69:50:d2:a6: df:94:b6:de:ac:6b:6c:ea:ee:5c:c4:0a:1e:91:a6:f0:4f:ec: 96:42:1d:53:72:37:0f:d5:ec:61:f9:cb:53:9f:74:b1:04:e9: a9:ee:f7:f2:8f:01:7e:32:53:db:4f:a6:69:fc:48:94:6b:e4: 17:90:40:39:f6:89:82:39:40:ec:a4:a2:4e:5b:2a:ba:ad:78: 85:91:6d:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOyXvdCSyLjTHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk YmM0MWM3ZmQtZWYxZi00ZTEwLWJkNGMtYjEzNzEzMmZlZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfyzXuSstFECy5piVpQDoufeYB6MJu+9ZwEA 0XrCyRYgMzbRUqrkgdFn1oN0128xiOTLSaqBMQJBwQhzNT3gf7i8ZqwgDeW1EwHR 5KJN0vEZh3AL+2DUfgLccnsKImGB0MHr1uv5YsbR6bVSwRlIYRTXZHpjmHFD3Rmc t3HwosK8XrUSVLJU+DhFTuf//qK3gmI2j/jFfAuEyzSrJ8f9wh8aHJ6qVPtff1Uo liBvWkZwv9EQhDamhD5LmigEU1FvXtP+R1fb0QMxr+uOa6QZy6P/XqrZCHnaBoBQ v0TyTLZ1KjzFPFWP1AdEh26Qxdx8Nz36urszZpGlbTyS7gucEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC05dLrWeJ3WCHia5ei4JwkOGCHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjYzNWJlNWItYjM2NC0z Mjk1LWE4NTYtZTMwYjg0ZjhmMjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbDA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADGgoKIHHNiGxDbVysuPxkXjUZw5EXHvdJkJpILlDgsbVyXVwYdo GedaBOx7rxPGQWJ1JPLV8cUsoa0I9dq9lAlHVGoj1bzvOTXvsEWDfyahdBIMwl16 q78/Qi8sCeyN1hrkJNPi1rv4lITu0bHCEs6HEdswaViU/kgFvAFUXCPw5k5XUZwv k7ODtpbMnjecU3kTqe3urAqJPbpZSaT585jZMOcvt/gNZgTEDSfQyTXNaVDSpt+U tt6sa2zq7lzECh6RpvBP7JZCHVNyNw/V7GH5y1OfdLEE6anu9/KPAX4yU9tPpmn8 SJRr5BeQQDn2iYI5QOykok5bKrqteIWRbTA= -----END CERTIFICATE-----Generated at Sat Apr 5 21:35:48 2025 by rpki-client