$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3402f7d1-2259-3a86-872d-9a6febb1f3d1.roa File: 3402f7d1-2259-3a86-872d-9a6febb1f3d1.roa (raw, json) Hash identifier: sK1ZJ64UKp6VtTcubY0cqW/9XZQWNCyO+u2RqdJx1Cs= Subject key identifier: A1:5C:C7:FB:4F:5F:B7:00:8D:9D:F3:A6:BA:1C:9A:16:0B:D1:61:D6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849833A15163DD1A6192C5E4400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3402f7d1-2259-3a86-872d-9a6febb1f3d1.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 2600:100a:b0e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:15:16:3d:d1:a6:19:2c:5e:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=435dec19-fdfe-4029-bbd3-33f57f6333c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:2a:31:33:48:54:3a:46:94:8a:83:c0:8c: 47:af:f2:03:f7:24:4c:69:fb:61:ab:c7:3b:8a:fa: 9b:d8:b9:32:bb:1b:fa:ea:61:2f:b2:f1:e7:24:e8: 76:6e:84:60:be:23:6c:0b:50:0d:ef:e7:a9:f7:de: c8:ea:f7:85:8a:d0:de:9d:10:43:66:07:44:cd:96: 04:09:15:72:2b:7e:a9:b2:2a:de:e8:93:c7:63:96: 35:e1:28:fa:0c:b9:5d:6c:c9:35:18:a7:70:b4:88: 5c:e9:2b:21:a1:ca:63:00:4e:77:a5:6e:17:77:82: 40:52:de:23:30:f6:fb:a9:b2:f5:5f:47:31:29:e8: 47:a5:90:6f:84:3b:78:2c:16:fa:81:34:71:bc:50: 81:97:11:55:b1:26:bf:14:75:4f:4a:3e:c6:0b:a2: df:a8:2b:06:a3:5c:25:f4:be:1d:14:c9:3f:98:98: c7:86:fb:78:2f:0e:b7:0b:f9:b0:cf:0b:e0:44:89: 20:79:d9:0b:37:09:37:15:4b:2e:13:8c:85:79:91: cc:2a:ca:21:43:6a:54:cf:48:97:e7:dc:44:99:78: bb:c2:1e:a3:66:23:ed:ec:b2:ce:e1:e8:1d:f6:2e: ce:a1:14:c8:52:f2:76:06:d4:8b:ed:7a:99:38:66: c0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5C:C7:FB:4F:5F:B7:00:8D:9D:F3:A6:BA:1C:9A:16:0B:D1:61:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3402f7d1-2259-3a86-872d-9a6febb1f3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100a:b0e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:b4:b3:6d:99:81:88:62:7f:d0:26:f4:fb:18:41:36:b5:36: 4b:fb:14:43:a4:0f:e5:01:ff:65:d6:45:fc:4f:c1:9f:96:94: 2c:40:c3:a8:c9:ad:cf:63:27:90:83:3f:b2:93:58:c7:25:c8: 58:c0:b8:c6:85:11:d6:4d:84:68:df:69:10:10:2d:18:90:e7: 87:c9:ea:54:ad:b2:ad:1e:58:c0:21:ab:b9:7a:df:5c:6a:90: e6:1d:e1:27:f4:d8:5a:25:60:c3:aa:b9:1e:b2:0a:8b:8a:6f: 0c:21:c6:67:ef:1c:22:42:6c:33:77:b5:d9:36:b9:a2:30:5d: be:88:af:b1:77:2b:40:6e:82:6d:a0:d5:94:76:d8:c7:13:59: 45:99:c6:85:d6:8e:78:02:22:f1:26:92:aa:f6:10:cf:00:23: 70:cd:68:0e:4d:8b:91:2c:4d:72:d7:5e:b9:a5:9c:50:e8:6b: bd:08:e0:f2:e9:06:e4:f0:f4:8d:67:1d:39:c1:3a:a2:4c:a7: a7:46:06:b5:34:b8:fc:a1:db:28:f4:ff:a7:6d:b4:9e:08:7d: 2a:06:f2:5b:b7:f9:42:ee:ea:3d:47:c4:91:f4:26:82:8e:f8: fd:80:fe:8a:eb:84:04:97:08:ed:72:d4:f0:e4:0a:7f:fc:24: d4:97:9e:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOhUWPdGmGSxeRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NDM1ZGVjMTktZmRmZS00MDI5LWJiZDMtMzNmNTdmNjMzM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVsqMTNIVDpGlIqDwIxHr/ID9yRMafthq8c7 ivqb2Lkyuxv66mEvsvHnJOh2boRgviNsC1AN7+ep997I6veFitDenRBDZgdEzZYE CRVyK36psire6JPHY5Y14Sj6DLldbMk1GKdwtIhc6SshocpjAE53pW4Xd4JAUt4j MPb7qbL1X0cxKehHpZBvhDt4LBb6gTRxvFCBlxFVsSa/FHVPSj7GC6LfqCsGo1wl 9L4dFMk/mJjHhvt4Lw63C/mwzwvgRIkgedkLNwk3FUsuE4yFeZHMKsohQ2pUz0iX 59xEmXi7wh6jZiPt7LLO4egd9i7OoRTIUvJ2BtSL7XqZOGbA7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKFcx/tPX7cAjZ3zprocmhYL0WHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzQwMmY3ZDEtMjI1OS0z YTg2LTg3MmQtOWE2ZmViYjFmM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCrDg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALG0s22ZgYhif9Am9PsYQTa1Nkv7FEOkD+UB/2XWRfxPwZ+WlCxA w6jJrc9jJ5CDP7KTWMclyFjAuMaFEdZNhGjfaRAQLRiQ54fJ6lStsq0eWMAhq7l6 31xqkOYd4Sf02FolYMOquR6yCouKbwwhxmfvHCJCbDN3tdk2uaIwXb6Ir7F3K0Bu gm2g1ZR22McTWUWZxoXWjngCIvEmkqr2EM8AI3DNaA5Ni5EsTXLXXrmlnFDoa70I 4PLpBuTw9I1nHTnBOqJMp6dGBrU0uPyh2yj0/6dttJ4IfSoG8lu3+ULu6j1HxJH0 JoKO+P2A/orrhASXCO1y1PDkCn/8JNSXnic= -----END CERTIFICATE-----Generated at Tue Apr 29 07:13:37 2025 by rpki-client