$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4790fe6b-54ce-3fac-98e5-0211e34f7928.roa File: 4790fe6b-54ce-3fac-98e5-0211e34f7928.roa (raw, json) Hash identifier: 2KzfgprjES0nPGDnD05UB+F/OOuepC8rCZPQaHqzzpQ= Subject key identifier: B2:60:5F:13:7D:C5:51:7E:FE:20:C5:D8:FC:5A:F6:63:B0:66:C2:15 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849833A128B2DA510DABFCAA200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4790fe6b-54ce-3fac-98e5-0211e34f7928.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 2600:1009:a100::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:12:8b:2d:a5:10:da:bf:ca:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=32a10304-9aff-4110-9e5d-47c5782e7a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:30:8a:9a:d2:09:e2:14:46:2c:b9:ac:8e:46: 47:be:e9:7d:96:6a:65:67:31:b6:7f:e8:70:9f:76: c1:dd:fe:3c:62:1f:9a:d4:3a:5a:16:83:d0:07:88: b2:9b:cf:6b:af:17:fd:a8:5b:03:cc:37:78:ff:2e: db:89:de:ff:76:7e:a6:8f:6f:68:c3:18:aa:e0:36: fb:ae:2e:2f:6f:b3:2a:f2:67:6b:0c:0d:df:38:4b: b0:79:8e:b1:1a:7d:81:c1:39:fe:a8:55:15:6e:8e: a9:69:a6:d4:48:eb:01:b3:73:75:e4:1a:dd:c7:5b: cb:8f:dd:64:f3:ec:cf:1c:a2:51:7b:3c:57:c6:93: 5a:57:62:ff:64:59:60:60:29:83:50:3d:b6:b4:e6: e7:70:02:d0:e2:c7:a3:dd:ea:c5:47:08:72:92:d7: 69:db:d9:58:01:cc:b8:07:95:3d:19:dc:c2:f5:e2: 47:59:ca:1a:eb:c3:51:22:48:89:c6:69:5b:70:89: 60:e0:c2:b5:1a:ee:6e:31:a0:54:50:f6:15:e0:1d: b4:cf:1e:22:21:cb:0e:1b:66:8d:31:10:28:71:a3: c7:34:44:68:c8:21:50:53:71:58:68:50:ce:f2:d6: e7:c4:bc:c4:77:c5:73:a0:e7:7c:44:33:36:d4:ab: 9a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:60:5F:13:7D:C5:51:7E:FE:20:C5:D8:FC:5A:F6:63:B0:66:C2:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4790fe6b-54ce-3fac-98e5-0211e34f7928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1009:a100::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:13:5e:19:45:c8:60:a4:a1:6a:8d:e2:be:ce:97:83:9a:b5: e1:89:d3:91:56:0c:13:eb:22:55:21:22:34:83:16:44:7b:ec: 9c:15:a2:a1:43:8c:04:9d:35:6b:18:bc:fd:4e:65:83:5e:e1: 77:b0:73:60:bb:e5:72:f4:61:6a:4e:6f:96:c3:07:57:f7:05: ff:ab:bd:7d:75:fe:ff:b4:f9:76:02:1f:07:1a:95:6e:ea:80: d5:37:d5:ba:b2:72:55:dd:6a:52:45:b9:c4:05:81:4a:5b:80: 83:94:e0:48:b5:48:6e:db:36:48:e3:0b:df:5d:aa:d6:45:91: 85:70:97:0b:d6:70:3e:e6:18:a1:20:00:f4:5f:ec:b8:1d:28: 69:fd:71:fd:33:1a:67:27:3d:ad:c3:0f:a7:95:4c:1c:fa:79: 0d:9d:fe:bd:28:56:d2:95:5e:47:d2:ca:65:93:cc:f8:a1:83: 58:28:51:03:ef:63:2b:00:c2:78:30:5f:b7:26:dc:38:81:63: a6:03:b1:55:ed:d3:87:43:4e:1d:c7:d0:08:fc:2c:b1:61:73: b1:71:46:48:cc:28:f7:ad:98:11:c3:b1:0d:5e:8b:a0:15:16: 8a:6a:34:aa:a3:4e:bd:4d:64:6c:9b:c4:34:cf:93:48:a0:5c: 79:c1:34:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOhKLLaUQ2r/KogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MzJhMTAzMDQtOWFmZi00MTEwLTllNWQtNDdjNTc4MmU3YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTCKmtIJ4hRGLLmsjkZHvul9lmplZzG2f+hw n3bB3f48Yh+a1DpaFoPQB4iym89rrxf9qFsDzDd4/y7bid7/dn6mj29owxiq4Db7 ri4vb7Mq8mdrDA3fOEuweY6xGn2BwTn+qFUVbo6paabUSOsBs3N15Brdx1vLj91k 8+zPHKJRezxXxpNaV2L/ZFlgYCmDUD22tObncALQ4sej3erFRwhyktdp29lYAcy4 B5U9GdzC9eJHWcoa68NRIkiJxmlbcIlg4MK1Gu5uMaBUUPYV4B20zx4iIcsOG2aN MRAocaPHNERoyCFQU3FYaFDO8tbnxLzEd8VzoOd8RDM21KuahQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLJgXxN9xVF+/iDF2Pxa9mOwZsIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDc5MGZlNmItNTRjZS0z ZmFjLTk4ZTUtMDIxMWUzNGY3OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCaEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIITXhlFyGCkoWqN4r7Ol4OateGJ05FWDBPrIlUhIjSDFkR77JwV oqFDjASdNWsYvP1OZYNe4Xewc2C75XL0YWpOb5bDB1f3Bf+rvX11/v+0+XYCHwca lW7qgNU31bqyclXdalJFucQFgUpbgIOU4Ei1SG7bNkjjC99dqtZFkYVwlwvWcD7m GKEgAPRf7LgdKGn9cf0zGmcnPa3DD6eVTBz6eQ2d/r0oVtKVXkfSymWTzPihg1go UQPvYysAwngwX7cm3DiBY6YDsVXt04dDTh3H0Aj8LLFhc7FxRkjMKPetmBHDsQ1e i6AVFopqNKqjTr1NZGybxDTPk0igXHnBNG8= -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:14 2025 by rpki-client