$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e52720e-c4ea-36e0-b056-56e4bc71b374.roa File: 1e52720e-c4ea-36e0-b056-56e4bc71b374.roa (raw, json) Hash identifier: ughatDGPUCfVV4D0qwrTiDPAVIgcifFd/FC7fMRREoc= Subject key identifier: AD:F5:7D:DF:4A:C7:3F:7B:81:C6:05:FD:BF:C5:34:3A:F0:99:67:6D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C248741A7188CC6F25FB0C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e52720e-c4ea-36e0-b056-56e4bc71b374.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1003:d400::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:87:41:a7:18:8c:c6:f2:5f:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=bc7947b1-6e72-40f0-8ddd-756da084e3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2f:4c:d6:0c:8d:e9:2b:7c:f1:92:b0:31:d6: ea:d6:47:7c:28:25:d3:4d:45:e9:bd:16:14:f1:c0: 35:26:94:7d:6e:b4:e0:26:21:db:50:15:4a:3d:85: 7b:46:a3:8a:d4:eb:f0:2c:a5:8b:de:54:59:ce:cb: 1f:de:49:c4:20:20:48:6e:64:30:8f:7d:4a:cb:61: 46:63:f1:3e:bd:93:e3:e6:c4:9c:0c:f7:5a:87:33: 86:4b:35:b9:b3:38:bc:a7:16:c2:93:23:ba:ea:54: 2b:26:11:f1:39:b4:8b:c7:ea:67:02:27:ce:9d:03: 75:e1:24:83:48:27:90:6f:80:54:c8:1b:b1:5f:7f: 30:6c:81:0b:3c:36:e1:11:9f:83:ed:24:5c:a6:b6: b6:f6:98:76:2c:22:ae:ef:ec:2d:7d:2d:b9:65:a7: f6:8e:7e:93:54:a9:99:af:7d:ad:5b:36:ca:85:ed: 9d:cf:ea:38:6b:b8:43:c9:78:66:77:92:d9:ae:42: 17:0f:cb:2d:93:31:ce:ea:dd:d6:9a:4d:76:8e:8c: 49:92:c7:ef:d9:ba:a7:33:f9:21:6d:b5:a1:a4:a7: b1:65:25:84:1c:cd:0c:f1:5b:a6:3a:d5:9a:d2:83: 03:16:67:25:a5:6f:48:31:bc:82:0a:b7:cf:f5:d0: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F5:7D:DF:4A:C7:3F:7B:81:C6:05:FD:BF:C5:34:3A:F0:99:67:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e52720e-c4ea-36e0-b056-56e4bc71b374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1003:d400::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:50:83:e1:60:58:e2:d6:cf:df:0a:41:09:1e:b6:62:37:e4: 90:1e:fc:c8:1f:f8:45:0e:1b:80:ea:00:73:1f:aa:93:91:39: 62:9d:bf:a8:e1:63:74:74:83:6f:e6:14:3b:2e:e6:8f:dc:5b: 74:fe:84:46:ba:37:12:ba:ab:d0:33:b0:49:f8:bb:1a:7b:c7: 8d:e2:4b:9b:64:0d:7e:a6:d3:d4:e9:92:ba:be:20:48:fb:c1: 8d:58:e9:a6:c6:52:59:bd:8c:de:ff:6a:61:84:25:60:87:9a: 0d:f2:67:51:de:ea:d2:ec:df:f0:59:ef:db:87:77:40:7e:4e: b0:1e:b1:4c:00:66:7e:eb:36:9d:74:cb:67:22:2c:97:7e:5b: a6:1d:d0:64:e7:be:1b:66:7c:1d:00:c0:86:6f:8a:57:bf:25: ac:68:b5:b2:fb:87:ef:4e:31:c2:ef:86:e1:af:13:02:a6:65: c1:a4:0c:cd:2d:62:eb:f2:44:64:55:bc:7b:7c:99:49:20:10: 7c:1c:b2:68:1f:df:9e:e3:55:96:cf:64:90:45:de:10:7a:0e: f5:a8:53:e9:99:c4:e4:d6:11:32:5e:8d:4a:a2:af:cd:d1:5e: af:de:88:ba:17:87:bd:4c:b6:30:02:5d:7f:0f:af:c6:25:22: b3:b0:a1:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIdBpxiMxvJfsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YmM3OTQ3YjEtNmU3Mi00MGYwLThkZGQtNzU2ZGEwODRlM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy9M1gyN6St88ZKwMdbq1kd8KCXTTUXpvRYU 8cA1JpR9brTgJiHbUBVKPYV7RqOK1OvwLKWL3lRZzssf3knEICBIbmQwj31Ky2FG Y/E+vZPj5sScDPdahzOGSzW5szi8pxbCkyO66lQrJhHxObSLx+pnAifOnQN14SSD SCeQb4BUyBuxX38wbIELPDbhEZ+D7SRcpra29ph2LCKu7+wtfS25Zaf2jn6TVKmZ r32tWzbKhe2dz+o4a7hDyXhmd5LZrkIXD8stkzHO6t3Wmk12joxJksfv2bqnM/kh bbWhpKexZSWEHM0M8VumOtWa0oMDFmclpW9IMbyCCrfP9dDpAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK31fd9Kxz97gcYF/b/FNDrwmWdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWU1MjcyMGUtYzRlYS0z NmUwLWIwNTYtNTZlNGJjNzFiMzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQA9QA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKxQg+FgWOLWz98KQQketmI35JAe/Mgf+EUOG4DqAHMfqpOROWKd v6jhY3R0g2/mFDsu5o/cW3T+hEa6NxK6q9AzsEn4uxp7x43iS5tkDX6m09Tpkrq+ IEj7wY1Y6abGUlm9jN7/amGEJWCHmg3yZ1He6tLs3/BZ79uHd0B+TrAesUwAZn7r Np10y2ciLJd+W6Yd0GTnvhtmfB0AwIZvile/JaxotbL7h+9OMcLvhuGvEwKmZcGk DM0tYuvyRGRVvHt8mUkgEHwcsmgf357jVZbPZJBF3hB6DvWoU+mZxOTWETJejUqi r83RXq/eiLoXh71MtjACXX8Pr8YlIrOwoS0= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:13 2025 by rpki-client