$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cc97f66-8dc8-37a2-8f8a-793b70557150.roa File: 4cc97f66-8dc8-37a2-8f8a-793b70557150.roa (raw, json) Hash identifier: DmK5TZCZ4HrQ3GsOVcZr+KEpRmyAz241UITu65+9EVc= Subject key identifier: 1E:4B:B3:39:24:86:F1:23:F1:27:57:26:93:D2:50:58:D1:06:61:9E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C245D28AE7F7B5D8116FB20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cc97f66-8dc8-37a2-8f8a-793b70557150.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1005:d140::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:5d:28:ae:7f:7b:5d:81:16:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=482bb745-a971-4e23-8017-338103a1ebf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:37:62:d5:12:92:fd:5d:97:b1:7d:d1:cf: 01:d8:dd:29:c0:20:2f:78:fc:58:cd:d6:cf:78:01: 98:dd:b6:ca:7b:ad:b3:e1:37:38:f4:85:ba:53:28: 1a:37:fc:3a:f7:bc:b0:c4:83:26:25:60:09:6d:0f: 72:97:a0:c9:31:f5:22:c5:02:d4:d1:5d:5a:75:9c: 4b:f5:09:b0:80:ea:45:64:0a:80:41:c7:43:e1:db: 1b:26:48:29:35:17:0d:cb:2f:5a:18:23:e2:e1:b2: 32:67:a6:44:33:76:a3:8f:c9:4c:a9:45:68:4d:c1: 8e:3d:52:95:b8:c7:3a:50:dd:c0:b6:95:a3:8a:0c: 64:94:26:de:45:80:42:d7:6f:42:77:7f:a0:34:33: 29:8b:e5:4d:f2:6e:57:63:9a:f5:4b:0e:61:44:14: e2:06:7d:26:4f:c4:70:d0:e6:97:38:a5:09:cc:b8: 85:30:ae:87:13:63:d9:c4:3b:70:36:63:f4:d9:21: 20:57:a2:dd:7d:b0:c1:77:13:ad:62:68:a5:8d:3b: 85:1b:86:66:b5:0a:f7:03:d3:2b:bd:98:9b:34:e1: 08:de:26:4d:a2:fe:24:f3:2e:b0:ca:72:2d:68:b1: 6b:53:99:58:40:6e:89:b4:42:76:d4:42:ca:9d:ba: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4B:B3:39:24:86:F1:23:F1:27:57:26:93:D2:50:58:D1:06:61:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cc97f66-8dc8-37a2-8f8a-793b70557150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1005:d140::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:73:76:4f:93:5e:60:38:ad:bc:a2:c2:35:8d:9b:69:e8:c3: da:04:e5:fd:6c:40:6d:8e:35:48:4e:c0:e6:74:a3:47:b9:8e: 6a:6a:d9:b2:1f:ee:74:20:c2:3f:ec:48:5a:61:f4:b2:f6:d3: 0a:cf:84:d0:fa:05:0b:c3:ad:6b:42:47:71:c5:dd:84:19:3e: b5:4e:36:63:54:46:80:b3:d8:69:65:74:1e:f8:3b:a1:5e:01: e7:da:76:f7:a5:b0:5d:9c:d8:e3:4c:60:1b:2d:76:b2:3b:47: c9:6a:70:be:a3:78:76:66:f4:82:08:39:60:cd:55:f0:d4:4d: c5:7f:3e:b7:89:53:40:96:3d:47:21:bf:9a:fe:da:11:44:85: 7c:75:78:57:5d:5e:cb:dc:0f:44:52:12:33:01:03:81:dd:22: 39:2d:44:aa:85:3f:08:48:1c:15:d4:ff:6b:49:93:2e:c9:58: de:9c:7e:17:12:78:2f:da:34:ed:08:66:b9:0f:dc:03:68:fa: 8b:51:86:d0:40:ce:f8:aa:5c:71:4a:07:03:7a:d0:e2:3a:20: 00:1b:1f:7e:90:71:d0:ac:93:cb:2f:9b:b2:81:ec:ba:a4:9b: ac:9e:26:c2:b4:77:c0:31:e6:1f:de:1b:e4:bf:93:8e:7e:68: dd:90:e1:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJF0orn97XYEW+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NDgyYmI3NDUtYTk3MS00ZTIzLTgwMTctMzM4MTAzYTFlYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIM3YtUSkv1dl7F90c8B2N0pwCAvePxYzdbP eAGY3bbKe62z4Tc49IW6UygaN/w697ywxIMmJWAJbQ9yl6DJMfUixQLU0V1adZxL 9QmwgOpFZAqAQcdD4dsbJkgpNRcNyy9aGCPi4bIyZ6ZEM3ajj8lMqUVoTcGOPVKV uMc6UN3AtpWjigxklCbeRYBC129Cd3+gNDMpi+VN8m5XY5r1Sw5hRBTiBn0mT8Rw 0OaXOKUJzLiFMK6HE2PZxDtwNmP02SEgV6LdfbDBdxOtYmiljTuFG4ZmtQr3A9Mr vZibNOEI3iZNov4k8y6wynItaLFrU5lYQG6JtEJ21ELKnbo2pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB5LszkkhvEj8SdXJpPSUFjRBmGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGNjOTdmNjYtOGRjOC0z N2EyLThmOGEtNzkzYjcwNTU3MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBdFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIlzdk+TXmA4rbyiwjWNm2now9oE5f1sQG2ONUhOwOZ0o0e5jmpq 2bIf7nQgwj/sSFph9LL20wrPhND6BQvDrWtCR3HF3YQZPrVONmNURoCz2GlldB74 O6FeAefadvelsF2c2ONMYBstdrI7R8lqcL6jeHZm9IIIOWDNVfDUTcV/PreJU0CW PUchv5r+2hFEhXx1eFddXsvcD0RSEjMBA4HdIjktRKqFPwhIHBXU/2tJky7JWN6c fhcSeC/aNO0IZrkP3ANo+otRhtBAzviqXHFKBwN60OI6IAAbH36QcdCsk8svm7KB 7Lqkm6yeJsK0d8Ax5h/eG+S/k45+aN2Q4Q4= -----END CERTIFICATE-----Generated at Sat Apr 26 22:57:56 2025 by rpki-client