$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07e85bff-4d3e-339f-8024-5743b40a5789.roa File: 07e85bff-4d3e-339f-8024-5743b40a5789.roa (raw, json) Hash identifier: CI/M4OQOKxXh86zrLMZU02OLz5mNBls6+JYZ4DDmpAk= Subject key identifier: A0:7A:2D:9A:19:07:FF:E0:E3:08:0D:6C:79:B0:CE:16:E6:E4:DD:EF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858499D109811D1F2A3D9CB769B20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07e85bff-4d3e-339f-8024-5743b40a5789.roa Signing time: Tue 22 Apr 2025 19:09:10 +0000 ROA not before: Tue 22 Apr 2025 19:09:10 +0000 ROA not after: Mon 21 Jul 2025 19:09:10 +0000 asID: 6167 IP address blocks: 2600:1014:a138::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:10:98:11:d1:f2:a3:d9:cb:76:9b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 22 19:09:10 2025 GMT Not After : Jul 21 19:09:10 2025 GMT Subject: CN=866c862f-c92f-49f2-938c-7630f4d6870d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:d3:8e:ac:55:fc:c2:44:c6:7d:29:a4:1d: 34:89:0b:af:03:9d:72:ad:2f:c3:7b:79:d4:c6:30: 9b:38:2a:fe:77:04:38:7a:f7:68:4a:3e:3e:65:63: 05:37:01:e7:ad:fc:43:cf:c8:96:89:86:89:e4:21: f3:6e:4a:25:70:54:a9:14:c4:78:ec:c0:97:90:d6: 07:ab:ae:89:3d:42:5a:16:f8:ca:9a:ef:f2:c0:32: 1e:88:ea:fd:f2:5f:57:cf:25:6f:30:ab:4f:58:b9: cd:74:db:89:86:ab:ed:74:47:31:5c:2d:30:d0:6a: 0a:a1:ff:4d:14:c0:f2:0c:89:80:df:1b:57:bc:8f: 53:57:1d:0e:f0:b4:2a:12:a7:18:fd:48:a6:cd:5b: 4f:e4:61:63:3b:65:66:0e:5c:2d:70:d1:66:d5:76: 12:a1:cd:16:60:d3:2f:ac:33:a4:d4:75:0b:ad:58: af:46:f7:d1:a7:df:12:b3:75:b2:3d:a4:21:f0:64: 7a:b6:7b:73:f9:33:11:e1:b7:26:e5:b1:04:1d:f5: a8:90:15:cf:09:f8:d4:97:46:a4:3a:21:fa:48:ee: 5d:d1:47:ea:c7:66:55:69:ec:b9:7d:00:be:b3:f0: 64:f0:bd:60:8e:d2:b9:53:68:c0:44:b9:d2:ef:a4: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7A:2D:9A:19:07:FF:E0:E3:08:0D:6C:79:B0:CE:16:E6:E4:DD:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07e85bff-4d3e-339f-8024-5743b40a5789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1014:a138::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:48:43:47:d9:a8:42:6b:16:91:b4:bd:8c:35:78:6a:08:5d: 58:f5:60:b1:41:76:0f:9a:7a:1b:fc:b2:14:c3:e8:b3:6b:ec: 82:0e:45:12:a2:f5:6e:28:6d:77:37:cd:ee:bc:ab:f7:97:23: 6e:d9:5b:9b:9f:73:fa:3d:5f:4b:b9:0d:ea:ee:bc:e3:e2:05: 30:c5:92:e8:5e:28:23:9b:db:a7:9f:f3:6a:e2:4e:d2:23:1a: 48:31:97:e0:84:fa:c5:03:91:31:ea:e7:b3:6d:c2:96:3e:6a: eb:fa:7f:19:58:bf:ff:43:34:21:6b:11:34:37:b9:73:7e:f2: d7:61:16:ab:58:0f:46:18:6f:33:c1:f2:39:6e:5a:13:4d:a8: 63:63:f5:30:e8:59:9a:fb:fd:45:41:a4:dc:94:89:7f:7e:67: b0:cb:4e:12:2c:b6:b8:01:62:59:b3:11:50:6e:2d:80:66:00: 21:17:24:35:f3:a4:2e:0c:cc:5e:56:e3:10:84:a9:83:ab:de: e0:12:1d:2e:6c:46:67:fc:01:21:d8:c0:b0:cf:56:e6:e5:79: a5:be:db:f4:b4:fe:8b:4c:99:7e:75:a8:d5:eb:35:05:30:58: 65:45:94:e3:cd:49:08:bb:db:16:f1:4b:4d:9c:8c:37:e4:fb: 8d:34:a3:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdEJgR0fKj2ct2myAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyMjE5MDkxMFoXDTI1MDcyMTE5MDkxMFowLzEtMCsGA1UEAxMk ODY2Yzg2MmYtYzkyZi00OWYyLTkzOGMtNzYzMGY0ZDY4NzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOPTjqxV/MJExn0ppB00iQuvA51yrS/De3nU xjCbOCr+dwQ4evdoSj4+ZWMFNwHnrfxDz8iWiYaJ5CHzbkolcFSpFMR47MCXkNYH q66JPUJaFvjKmu/ywDIeiOr98l9XzyVvMKtPWLnNdNuJhqvtdEcxXC0w0GoKof9N FMDyDImA3xtXvI9TVx0O8LQqEqcY/UimzVtP5GFjO2VmDlwtcNFm1XYSoc0WYNMv rDOk1HULrVivRvfRp98Ss3WyPaQh8GR6tntz+TMR4bcm5bEEHfWokBXPCfjUl0ak OiH6SO5d0Ufqx2ZVaey5fQC+s/Bk8L1gjtK5U2jARLnS76SROwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKB6LZoZB//g4wgNbHmwzhbm5N3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDdlODViZmYtNGQzZS0z MzlmLTgwMjQtNTc0M2I0MGE1Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQFKE4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD5IQ0fZqEJrFpG0vYw1eGoIXVj1YLFBdg+aehv8shTD6LNr7IIO RRKi9W4obXc3ze68q/eXI27ZW5ufc/o9X0u5DeruvOPiBTDFkuheKCOb26ef82ri TtIjGkgxl+CE+sUDkTHq57NtwpY+auv6fxlYv/9DNCFrETQ3uXN+8tdhFqtYD0YY bzPB8jluWhNNqGNj9TDoWZr7/UVBpNyUiX9+Z7DLThIstrgBYlmzEVBuLYBmACEX JDXzpC4MzF5W4xCEqYOr3uASHS5sRmf8ASHYwLDPVubleaW+2/S0/otMmX51qNXr NQUwWGVFlOPNSQi72xbxS02cjDfk+400o1s= -----END CERTIFICATE-----Generated at Sun Apr 27 04:05:05 2025 by rpki-client