$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa File: 28b58e9a-06a7-32cf-aa39-a353038ad25a.roa (raw, json) Hash identifier: 6GhSZibT1qU4Iyi8IxT6GLr+fzVrCMHg0MGnn++fHa4= Subject key identifier: AF:82:6B:5E:51:8E:57:2C:B3:FD:8B:6D:5E:30:5C:FE:6C:28:04:E8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584949FEB1385C1AD1EF4723D100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 22394 IP address blocks: 2600:1010::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:b1:38:5c:1a:d1:ef:47:23:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=0c15f574-f218-459c-bb3d-6f21e0266992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:3b:86:00:9b:5d:57:65:a7:b2:23:76:a5: 45:1b:41:a2:ee:55:a1:0b:b0:37:56:fa:e6:f7:86: f7:81:7f:23:28:24:ac:f8:a4:b9:e8:0f:e4:b0:8f: cf:9f:2e:9c:9d:05:01:e3:4f:32:25:8b:20:2f:4d: 2c:73:75:86:b4:01:8a:3d:49:00:94:19:c9:ed:fd: 1f:d0:d9:9a:ac:c2:b0:73:37:ea:26:81:47:b0:1a: 3e:22:56:13:10:4a:e7:50:46:96:df:1a:22:1a:0d: 02:d7:52:80:b0:77:17:45:66:ac:28:bb:40:c5:a4: a6:b3:31:ab:f3:b2:bf:4f:a1:d6:15:72:1d:3b:8a: e1:92:80:6f:18:c0:eb:35:5a:18:46:39:79:98:ac: 30:02:2c:7b:46:21:9b:1c:d0:13:22:a9:ef:5f:6c: ee:a6:d4:ef:fa:4a:ba:96:4d:ce:49:2f:e9:bf:02: 4a:6a:e9:e5:59:22:26:44:41:b7:12:2a:ca:ac:a1: 07:63:46:9c:48:82:f4:25:25:5c:39:bf:f9:f3:b2: 91:a7:d0:12:50:2e:c3:55:8a:72:05:8c:82:80:97: 73:e4:ab:6e:dd:7d:28:1b:b3:5d:85:56:f3:cc:1a: 19:92:2c:d5:a9:fa:c3:81:f3:83:82:4b:9c:89:71: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:82:6B:5E:51:8E:57:2C:B3:FD:8B:6D:5E:30:5C:FE:6C:28:04:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b58e9a-06a7-32cf-aa39-a353038ad25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1010::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:55:fe:44:63:93:ff:37:aa:13:e2:2a:1e:be:85:e0:cd:c4: e9:0b:19:1c:9e:72:ef:e0:fb:b3:da:ba:a2:62:98:31:99:21: 99:82:60:42:4f:03:55:72:6c:d2:ae:26:a0:75:de:40:c1:f1: 2b:30:f0:d9:24:3c:8e:df:2a:68:53:67:8b:a1:78:bf:85:02: 8d:f3:dc:0c:94:41:24:38:08:91:de:78:32:fc:28:5e:53:c0: 29:20:97:72:b4:f4:71:9b:db:94:d4:f5:14:07:ea:d6:b1:2d: 54:fe:32:3e:7b:8b:be:dc:19:55:25:93:27:30:2b:6a:92:17: 16:0e:ac:04:79:36:f5:5f:a0:8c:0e:7d:0c:de:cf:9f:c1:84: a9:8c:25:bb:c8:c5:c9:a9:bb:70:2c:10:0d:d8:ea:25:6d:4b: 08:5b:37:ca:e4:3e:28:df:06:7c:be:4c:44:f8:97:29:ae:76: 07:5f:de:54:c8:6b:e8:20:4b:c5:e5:00:88:1a:38:84:f5:ca: c6:73:5e:b8:25:c2:94:ec:e7:28:ed:72:66:f2:73:b7:2f:31: 1d:7a:75:1e:9f:82:a1:4b:14:39:7c:25:0c:84:1e:cd:75:a6: af:95:a4:44:10:87:02:cb:1e:52:75:57:15:cf:33:2c:77:a4: fe:6e:27:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElJ/rE4XBrR70cj0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MGMxNWY1NzQtZjIxOC00NTljLWJiM2QtNmYyMWUwMjY2OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCs7hgCbXVdlp7IjdqVFG0Gi7lWhC7A3Vvrm 94b3gX8jKCSs+KS56A/ksI/Pny6cnQUB408yJYsgL00sc3WGtAGKPUkAlBnJ7f0f 0NmarMKwczfqJoFHsBo+IlYTEErnUEaW3xoiGg0C11KAsHcXRWasKLtAxaSmszGr 87K/T6HWFXIdO4rhkoBvGMDrNVoYRjl5mKwwAix7RiGbHNATIqnvX2zuptTv+kq6 lk3OSS/pvwJKaunlWSImREG3EirKrKEHY0acSIL0JSVcOb/587KRp9ASUC7DVYpy BYyCgJdz5Ktu3X0oG7NdhVbzzBoZkizVqfrDgfODgkuciXGcVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK+Ca15Rjlcss/2LbV4wXP5sKAToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjhiNThlOWEtMDZhNy0z MmNmLWFhMzktYTM1MzAzOGFkMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgAQEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuVf5EY5P/N6oT4ioevoXgzcTpCxkcnnLv4Puz2rqiYpgxmSGZgmBC TwNVcmzSriagdd5AwfErMPDZJDyO3ypoU2eLoXi/hQKN89wMlEEkOAiR3ngy/Che U8ApIJdytPRxm9uU1PUUB+rWsS1U/jI+e4u+3BlVJZMnMCtqkhcWDqwEeTb1X6CM Dn0M3s+fwYSpjCW7yMXJqbtwLBAN2OolbUsIWzfK5D4o3wZ8vkxE+JcprnYHX95U yGvoIEvF5QCIGjiE9crGc164JcKU7Oco7XJm8nO3LzEdenUen4KhSxQ5fCUMhB7N daavlaREEIcCyx5SdVcVzzMsd6T+bicM -----END CERTIFICATE-----Generated at Sun Apr 27 10:48:16 2025 by rpki-client