$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/491e68eb-db81-34f0-ae82-acd7f4a68fe7.roa File: 491e68eb-db81-34f0-ae82-acd7f4a68fe7.roa (raw, json) Hash identifier: XZyQ8xKce5oMkBwORJxxWRR3EQZvXQWhNI04CmGsONk= Subject key identifier: 36:1A:21:9B:07:3F:F3:70:02:EB:4B:F5:17:4E:BD:2F:C0:56:68:80 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849833A19ACFB1BBFF64B0F0200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/491e68eb-db81-34f0-ae82-acd7f4a68fe7.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 2600:100c:d280::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:19:ac:fb:1b:bf:f6:4b:0f:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=3259a9ce-d0a5-4a92-843c-9e6a9c4de6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:e5:79:df:4a:cc:fb:8e:df:92:10:ea:b5: 53:df:a5:7a:8d:52:da:0f:8b:68:bb:03:cb:33:30: 31:0d:dd:a6:4e:f6:92:0e:81:f3:f5:2d:3f:5a:55: 96:d6:bb:ab:da:a0:48:79:24:5e:80:d4:f2:86:4c: f6:61:e1:f6:c6:de:6d:b2:09:9f:47:0c:fb:e8:9b: 07:6f:66:69:92:c0:cc:94:cb:24:58:d6:fc:6d:e3: 37:f1:9a:d8:37:f3:77:02:ed:c7:d5:e6:1d:e8:7a: e5:30:5c:f4:bc:53:b6:17:1c:4f:a5:40:70:17:c9: d9:49:f4:f4:42:b9:03:a1:b1:38:5e:9c:c5:01:7c: bd:78:b7:a2:f6:fd:36:b2:f2:5f:01:86:80:c6:3c: d4:ac:19:12:c3:8c:63:d1:01:a4:d6:46:97:1d:58: cf:69:48:c0:43:e6:41:4d:14:db:2f:80:07:87:10: 1e:3e:17:55:ae:76:c0:60:2e:61:18:41:0a:63:26: 5d:fa:3c:c1:a3:fd:d9:5d:14:5e:65:54:3d:44:69: 90:8c:ab:d9:e5:2b:c1:73:fc:f3:26:1d:6d:05:c5: 22:df:7f:0a:26:83:61:8e:ca:54:c5:01:dd:15:23: b1:4b:3d:3d:68:97:b1:06:1b:b1:d1:b4:f5:73:6c: 7c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1A:21:9B:07:3F:F3:70:02:EB:4B:F5:17:4E:BD:2F:C0:56:68:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/491e68eb-db81-34f0-ae82-acd7f4a68fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100c:d280::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:0f:6b:24:32:76:bc:d7:4c:5e:86:eb:90:25:e9:0b:58:c7: a7:2d:73:04:21:c0:8e:c9:28:43:02:c7:e2:b0:fd:9c:c4:b0: 66:eb:27:de:52:aa:d4:54:68:21:95:79:98:da:7e:16:7f:4e: 54:6b:d4:8e:8a:ca:dd:6b:1f:8f:4c:40:c3:55:4c:8c:d3:1a: 5a:b1:54:30:99:f3:71:94:9f:a5:2d:dc:91:67:67:fa:c2:96: 35:e5:4f:99:69:f5:af:c3:63:45:76:f5:07:7b:48:66:0d:fb: 2f:d3:3a:23:03:c4:5a:6c:ab:2b:9e:80:8a:4a:e3:64:3a:ae: 13:7c:79:70:1a:85:70:65:7c:9f:ad:7e:8a:63:69:06:86:b2: e0:15:31:d7:a6:7d:e9:22:33:c4:26:a9:74:86:35:f8:ef:69: d4:80:77:5b:7b:12:ef:72:7f:c0:c1:b9:02:b5:ce:c8:d0:1b: 78:bb:2e:83:0f:f5:b8:19:98:99:1c:76:5c:62:02:b0:d4:cc: a8:d6:05:99:eb:32:64:08:1e:ad:d8:ed:f5:1e:66:02:23:48: cb:1c:b5:aa:c5:aa:a6:29:40:51:b8:7f:ad:36:96:ce:e8:fc: 0d:91:64:4b:5b:aa:6e:7c:67:77:89:e3:42:4c:e2:c7:61:1b: 88:a4:36:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOhms+xu/9ksPAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MzI1OWE5Y2UtZDBhNS00YTkyLTg0M2MtOWU2YTljNGRlNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixrled9KzPuO35IQ6rVT36V6jVLaD4touwPL MzAxDd2mTvaSDoHz9S0/WlWW1rur2qBIeSRegNTyhkz2YeH2xt5tsgmfRwz76JsH b2ZpksDMlMskWNb8beM38ZrYN/N3Au3H1eYd6HrlMFz0vFO2FxxPpUBwF8nZSfT0 QrkDobE4XpzFAXy9eLei9v02svJfAYaAxjzUrBkSw4xj0QGk1kaXHVjPaUjAQ+ZB TRTbL4AHhxAePhdVrnbAYC5hGEEKYyZd+jzBo/3ZXRReZVQ9RGmQjKvZ5SvBc/zz Jh1tBcUi338KJoNhjspUxQHdFSOxSz09aJexBhux0bT1c2x81wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDYaIZsHP/NwAutL9RdOvS/AVmiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDkxZTY4ZWItZGI4MS0z NGYwLWFlODItYWNkN2Y0YTY4ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDNKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAIPayQydrzXTF6G65Al6QtYx6ctcwQhwI7JKEMCx+Kw/ZzEsGbr J95SqtRUaCGVeZjafhZ/TlRr1I6Kyt1rH49MQMNVTIzTGlqxVDCZ83GUn6Ut3JFn Z/rCljXlT5lp9a/DY0V29Qd7SGYN+y/TOiMDxFpsqyuegIpK42Q6rhN8eXAahXBl fJ+tfopjaQaGsuAVMdemfekiM8QmqXSGNfjvadSAd1t7Eu9yf8DBuQK1zsjQG3i7 LoMP9bgZmJkcdlxiArDUzKjWBZnrMmQIHq3Y7fUeZgIjSMsctarFqqYpQFG4f602 ls7o/A2RZEtbqm58Z3eJ40JM4sdhG4ikNjM= -----END CERTIFICATE-----Generated at Sun Apr 27 14:16:23 2025 by rpki-client