$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/293acf2a-21a2-366c-aad5-b638975db741.roa File: 293acf2a-21a2-366c-aad5-b638975db741.roa (raw, json) Hash identifier: x/h6/DoMcRfb97vix6WPhCfIr/Xu0Os1XqwlHAnK7V0= Subject key identifier: 2A:EE:F0:85:87:D7:97:F9:D2:7E:5B:7C:81:30:86:18:78:30:E8:40 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849833A09161E74BF23177D1100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/293acf2a-21a2-366c-aad5-b638975db741.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 22394 IP address blocks: 2600:1000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:09:16:1e:74:bf:23:17:7d:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=aa13cc55-690b-4db8-98f9-b8bbc3b25d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e3:5c:88:59:28:3a:5d:a9:97:16:1a:60:51: 2c:1d:33:88:32:7a:c0:44:d7:5b:11:4a:6a:c4:61: 06:11:1e:b8:af:5e:32:76:d6:80:6b:76:6e:5a:6f: fb:14:2b:8e:97:0b:44:51:55:17:e7:fa:8f:be:3e: 68:5d:b9:6c:c2:ca:c5:7c:ab:17:7b:40:a6:7e:ec: cc:29:ff:b9:27:23:75:16:ed:02:96:09:8d:f5:85: 9e:64:3b:df:0c:c7:fc:2f:d2:db:ea:35:84:de:e6: 78:f3:41:a2:b4:79:ee:b1:3a:3c:87:ee:01:3b:c8: 22:bd:7a:89:d1:ad:c1:cb:64:8a:0a:60:22:bd:a0: 0a:d4:3c:8e:40:6d:07:da:3e:34:57:2d:a0:48:44: fb:fd:53:de:05:e3:20:67:27:89:6a:e4:5b:cc:ae: 9b:01:3d:2f:42:f4:d7:f8:6c:1e:c7:b4:64:9a:7a: 1b:2a:b1:e3:d8:c4:0e:e9:ba:40:ad:e6:e1:00:09: d3:54:e3:00:3d:c3:ce:5a:19:0c:c6:ae:d9:ae:0d: 93:dc:fd:5d:15:66:8c:bd:e1:c6:4e:4e:57:d9:fc: ba:f5:5c:ac:af:82:55:4b:ad:e3:f8:ee:38:e0:f8: b6:d2:9a:e4:f6:b3:6d:ce:6e:38:b0:c4:51:b6:ac: c3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EE:F0:85:87:D7:97:F9:D2:7E:5B:7C:81:30:86:18:78:30:E8:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/293acf2a-21a2-366c-aad5-b638975db741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:91:18:75:b3:4e:03:d4:9d:a8:ab:38:38:a9:53:7f:0a:6c: 8a:28:bc:c8:bb:d2:0c:05:a2:1b:f1:ee:84:32:05:f4:6c:94: c8:fe:b2:ff:05:b0:c8:c7:8e:35:b5:9e:cb:03:06:bc:69:18: a8:54:b2:d6:0d:65:48:3c:ac:1d:68:cd:ce:5f:30:39:98:7b: 83:b6:e9:67:5d:5c:19:3c:9f:7e:a3:33:b4:ee:f4:ba:ad:4c: 98:e0:f1:b9:09:6a:d7:35:cc:c8:f0:3b:2d:3b:37:20:88:25: ee:e1:33:c2:ad:a4:bf:20:cc:15:22:47:f8:1e:4b:dc:5d:eb: 46:1d:43:43:4f:e2:eb:52:be:0d:f4:5d:63:cf:06:38:4d:e7: 14:c5:4e:4b:bb:a1:10:df:7d:ec:7b:9e:13:1d:db:e6:7c:37: fa:de:61:2b:c3:d0:08:b9:69:52:67:c6:f8:a3:6a:5c:8d:84: 41:47:e9:3c:e3:13:78:45:35:e9:29:d8:8d:64:9e:80:04:37: c6:13:f9:51:c7:ce:fb:27:2b:7b:42:ba:9a:da:f6:22:4e:5a: b4:19:47:62:80:9f:09:28:27:5a:36:23:ac:f1:91:64:bd:dc: ab:b6:26:8b:0e:65:b7:87:ff:cb:53:84:d6:f8:fa:3f:bf:5c: 4c:ab:e6:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmDOgkWHnS/Ixd9EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YWExM2NjNTUtNjkwYi00ZGI4LTk4ZjktYjhiYmMzYjI1ZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+NciFkoOl2plxYaYFEsHTOIMnrARNdbEUpq xGEGER64r14ydtaAa3ZuWm/7FCuOlwtEUVUX5/qPvj5oXblswsrFfKsXe0CmfuzM Kf+5JyN1Fu0ClgmN9YWeZDvfDMf8L9Lb6jWE3uZ480GitHnusTo8h+4BO8givXqJ 0a3By2SKCmAivaAK1DyOQG0H2j40Vy2gSET7/VPeBeMgZyeJauRbzK6bAT0vQvTX +Gwex7RkmnobKrHj2MQO6bpArebhAAnTVOMAPcPOWhkMxq7Zrg2T3P1dFWaMveHG Tk5X2fy69Vysr4JVS63j+O444Pi20prk9rNtzm44sMRRtqzD+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCru8IWH15f50n5bfIEwhhh4MOhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjkzYWNmMmEtMjFhMi0z NjZjLWFhZDUtYjYzODk3NWRiNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAQADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBLkRh1s04D1J2oqzg4qVN/CmyKKLzIu9IMBaIb8e6EMgX0bJTI/rL/ BbDIx441tZ7LAwa8aRioVLLWDWVIPKwdaM3OXzA5mHuDtulnXVwZPJ9+ozO07vS6 rUyY4PG5CWrXNczI8DstOzcgiCXu4TPCraS/IMwVIkf4HkvcXetGHUNDT+LrUr4N 9F1jzwY4TecUxU5Lu6EQ333se54THdvmfDf63mErw9AIuWlSZ8b4o2pcjYRBR+k8 4xN4RTXpKdiNZJ6ABDfGE/lRx877Jyt7Qrqa2vYiTlq0GUdigJ8JKCdaNiOs8ZFk vdyrtiaLDmW3h//LU4TW+Po/v1xMq+ZF -----END CERTIFICATE-----Generated at Tue Apr 29 02:04:53 2025 by rpki-client