$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cafc2b-2a4e-36cb-b895-3a42b40abc1a.roa File: 01cafc2b-2a4e-36cb-b895-3a42b40abc1a.roa (raw, json) Hash identifier: cHcyFMmxHQdtJlQn/U9ZQpjITATaII59ZvUPigR0K24= Subject key identifier: B4:C2:72:42:68:35:2D:AC:31:EF:C7:13:50:D6:88:DB:46:83:F1:D5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849A354874FEFC0E86F72139D40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cafc2b-2a4e-36cb-b895-3a42b40abc1a.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 2600:1005:a020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:87:4f:ef:c0:e8:6f:72:13:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=02030427-35be-462e-9cd2-147b66f6eff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:59:e2:8a:d5:f6:b1:27:95:cd:22:6b:80: 85:99:49:d5:07:f2:55:e4:d4:83:75:dc:17:de:96: cf:37:ce:6c:fb:55:d3:a8:be:be:a7:b0:20:14:55: e5:ae:29:4f:6e:d5:f6:66:be:98:0e:c4:85:95:10: 1d:87:79:81:58:1e:65:74:2b:ed:4f:07:67:39:d3: 9d:3e:82:cf:f5:10:0d:7c:e0:f7:88:92:00:53:90: 08:bc:dc:09:6a:5f:bc:1f:76:d0:27:53:07:8e:7e: c7:c9:8d:27:74:d7:cf:da:a9:1b:22:3c:b1:7d:60: 11:26:ff:69:83:3b:2b:55:f2:1f:53:97:8b:14:97: 06:f4:b9:74:a5:37:c3:7b:18:de:ee:0d:85:e9:30: 20:98:89:01:53:ae:ee:92:29:6d:7e:dd:49:00:26: 16:b0:06:77:cc:00:16:35:7c:25:96:35:cc:6d:7e: a1:a8:e4:58:83:72:e3:86:5d:8e:8d:23:f2:3c:e2: 1b:87:62:32:8c:76:f8:8c:5a:89:14:26:f3:21:cb: 2c:e5:00:f1:30:93:65:c3:cf:6b:1e:64:ce:ba:f7: 15:ba:99:fa:a0:86:82:d8:42:70:5a:30:7f:3f:43: d7:74:c5:7b:9c:73:09:bd:fe:58:84:53:75:0c:08: a0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C2:72:42:68:35:2D:AC:31:EF:C7:13:50:D6:88:DB:46:83:F1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01cafc2b-2a4e-36cb-b895-3a42b40abc1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1005:a020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b5:b9:59:a0:c7:9e:15:22:6c:b2:d1:60:cd:7e:6d:8f:64: c1:2c:b0:25:ed:7e:51:4f:0b:29:6a:ec:e3:66:ed:dd:a1:06: 56:40:e1:09:eb:0b:aa:cb:a8:e3:b7:3b:d4:75:5a:1f:08:c6: f4:a3:fe:10:16:9e:cd:e4:d4:99:76:fd:db:d5:99:2f:b0:66: 0e:2f:87:26:07:62:5d:db:b1:69:73:5b:ba:6b:f0:08:1e:a0: 89:b2:eb:64:40:06:42:ac:82:70:ef:cf:4e:f3:55:48:bc:2a: 75:a5:a3:8a:00:bd:62:71:cb:f5:b8:16:5c:31:29:1b:95:34: 41:44:20:4b:0d:cc:64:aa:95:66:6f:ff:51:e5:88:9a:b3:10: e7:4f:be:53:b2:12:72:4a:50:eb:f5:d5:7d:7e:c5:67:a2:4a: 63:74:71:a9:57:18:9e:ef:c7:97:a3:32:bd:77:bd:fd:bd:00: 33:ca:91:79:a5:01:54:78:93:8e:f4:1f:e1:c7:00:0f:3e:47: c8:c5:d0:95:e3:71:ab:0d:4a:35:d7:7d:54:c2:aa:40:21:0e: a2:2e:ee:f4:0b:53:4f:76:a5:51:0e:71:5a:0d:8d:f5:9e:f2: 20:1a:f5:fa:36:d7:55:18:88:4f:ee:b7:3b:f5:61:16:ac:61: 6a:4b:27:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmjVIdP78Dob3ITnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk MDIwMzA0MjctMzViZS00NjJlLTljZDItMTQ3YjY2ZjZlZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/RZ4orV9rEnlc0ia4CFmUnVB/JV5NSDddwX 3pbPN85s+1XTqL6+p7AgFFXlrilPbtX2Zr6YDsSFlRAdh3mBWB5ldCvtTwdnOdOd PoLP9RANfOD3iJIAU5AIvNwJal+8H3bQJ1MHjn7HyY0ndNfP2qkbIjyxfWARJv9p gzsrVfIfU5eLFJcG9Ll0pTfDexje7g2F6TAgmIkBU67ukiltft1JACYWsAZ3zAAW NXwlljXMbX6hqORYg3Ljhl2OjSPyPOIbh2IyjHb4jFqJFCbzIcss5QDxMJNlw89r HmTOuvcVupn6oIaC2EJwWjB/P0PXdMV7nHMJvf5YhFN1DAigvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLTCckJoNS2sMe/HE1DWiNtGg/HVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDFjYWZjMmItMmE0ZS0z NmNiLWI4OTUtM2E0MmI0MGFiYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBaAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACC1uVmgx54VImyy0WDNfm2PZMEssCXtflFPCylq7ONm7d2hBlZA 4QnrC6rLqOO3O9R1Wh8IxvSj/hAWns3k1Jl2/dvVmS+wZg4vhyYHYl3bsWlzW7pr 8AgeoImy62RABkKsgnDvz07zVUi8KnWlo4oAvWJxy/W4FlwxKRuVNEFEIEsNzGSq lWZv/1HliJqzEOdPvlOyEnJKUOv11X1+xWeiSmN0calXGJ7vx5ejMr13vf29ADPK kXmlAVR4k470H+HHAA8+R8jF0JXjcasNSjXXfVTCqkAhDqIu7vQLU092pVEOcVoN jfWe8iAa9fo211UYiE/utzv1YRasYWpLJ78= -----END CERTIFICATE-----Generated at Mon Apr 28 17:37:36 2025 by rpki-client