$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6faa1a-c4f6-35c8-8048-d9f90461d540.roa File: 4e6faa1a-c4f6-35c8-8048-d9f90461d540.roa (raw, json) Hash identifier: +nstKqArbRMVA51XgQ7JJ4v8+c2G+/bzD9H04Yc4DfI= Subject key identifier: 4C:2D:54:0E:79:23:1E:4D:CD:D0:B9:BA:40:5E:7B:F8:E5:50:E8:15 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849833A1C7E78D11EAE2790ABC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6faa1a-c4f6-35c8-8048-d9f90461d540.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 22394 IP address blocks: 2600:1008::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:1c:7e:78:d1:1e:ae:27:90:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=0af26638-81a5-4ad9-8080-20e6ec93d7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:5d:01:f5:8e:30:ff:c1:f9:2f:d8:23:53: 3c:f0:8c:3f:eb:41:f5:c0:15:b0:4e:cc:d8:49:40: b7:a1:df:17:ee:5e:bd:06:4d:44:ff:5b:5c:8c:c4: 1a:b0:32:32:19:7b:4f:b9:2b:bc:06:a5:68:30:32: 13:53:d4:9f:bb:ef:5a:26:e3:b1:09:37:75:50:a8: fb:28:e7:a9:4e:cd:d7:50:53:7e:71:b7:fa:e3:66: b2:76:6e:11:94:a8:02:ee:ea:5e:d5:4a:59:36:03: 80:c2:30:97:f4:ee:7e:72:36:79:74:10:ae:42:02: 04:96:ed:ba:8f:8a:38:4f:8e:e3:01:1f:28:9c:34: a9:f7:62:14:4d:cd:83:3c:64:32:db:83:6d:e1:1c: 7c:cd:e6:91:7c:69:b1:1d:05:d7:07:bd:57:28:d3: 76:91:cb:74:45:a9:a7:ca:cf:ef:f2:ec:12:a3:c3: 10:b0:a8:35:15:2a:f8:34:c2:61:3d:97:ad:10:57: 61:33:e0:0c:9a:2f:69:56:6a:99:df:58:90:1b:40: e1:f4:df:dd:51:9e:ce:e8:62:5e:b8:e0:61:ad:57: 94:8c:57:a8:96:20:df:98:6c:80:80:47:73:ec:47: 47:1f:a1:e8:b5:01:6f:02:63:07:1a:bf:8b:f1:56: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2D:54:0E:79:23:1E:4D:CD:D0:B9:BA:40:5E:7B:F8:E5:50:E8:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6faa1a-c4f6-35c8-8048-d9f90461d540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:99:96:94:ac:76:f4:63:6f:9c:6b:5b:15:a0:72:8d:23:cc: 32:44:f9:53:27:88:f4:09:49:75:99:53:77:bc:99:d2:a2:00: cb:ba:79:71:63:e1:5c:21:87:59:d9:e3:0b:3b:c7:55:a0:3a: 62:cf:1d:8a:62:9e:b9:7a:79:0f:63:7f:da:c2:52:2f:47:23: f1:12:e6:26:c2:4e:f7:5a:b4:70:a8:b6:f3:da:9d:8a:33:1a: 8f:ae:14:97:5e:38:8e:9c:04:a5:8a:8e:42:70:df:9a:13:73: b3:60:66:b5:c6:6f:2e:63:12:28:3f:33:79:b1:dc:32:ca:58: 4e:5f:63:6d:96:73:a5:60:4b:e4:88:6f:ad:71:67:9f:38:db: 1d:ed:9a:a2:e3:38:e2:a4:ea:41:45:03:2d:36:6d:0f:18:f8: 90:a8:cd:4b:bc:ac:84:09:65:06:89:8d:50:6c:02:f0:88:44: 58:48:82:ba:e7:51:05:06:1f:e4:02:cb:36:8b:3f:87:9d:d6: 5d:15:ca:a6:00:a8:4b:ec:15:36:18:8c:46:5b:02:5f:3c:d9: a0:32:30:d2:4e:2f:2d:85:ae:3e:f4:54:76:7c:fb:c6:1c:9c: ac:59:5d:c7:fa:2f:6f:60:fb:75:5d:c8:40:a0:c7:fc:61:48: 19:ae:93:b5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmDOhx+eNEerieQq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MGFmMjY2MzgtODFhNS00YWQ5LTgwODAtMjBlNmVjOTNkN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG9dAfWOMP/B+S/YI1M88Iw/60H1wBWwTszY SUC3od8X7l69Bk1E/1tcjMQasDIyGXtPuSu8BqVoMDITU9Sfu+9aJuOxCTd1UKj7 KOepTs3XUFN+cbf642aydm4RlKgC7upe1UpZNgOAwjCX9O5+cjZ5dBCuQgIElu26 j4o4T47jAR8onDSp92IUTc2DPGQy24Nt4Rx8zeaRfGmxHQXXB71XKNN2kct0Ramn ys/v8uwSo8MQsKg1FSr4NMJhPZetEFdhM+AMmi9pVmqZ31iQG0Dh9N/dUZ7O6GJe uOBhrVeUjFeoliDfmGyAgEdz7EdHH6HotQFvAmMHGr+L8VZanQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEwtVA55Ix5NzdC5ukBee/jlUOgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGU2ZmFhMWEtYzRmNi0z NWM4LTgwNDgtZDlmOTA0NjFkNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAQCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3mZaUrHb0Y2+ca1sVoHKNI8wyRPlTJ4j0CUl1mVN3vJnSogDLunlx Y+FcIYdZ2eMLO8dVoDpizx2KYp65enkPY3/awlIvRyPxEuYmwk73WrRwqLbz2p2K MxqPrhSXXjiOnASlio5CcN+aE3OzYGa1xm8uYxIoPzN5sdwyylhOX2NtlnOlYEvk iG+tcWefONsd7Zqi4zjipOpBRQMtNm0PGPiQqM1LvKyECWUGiY1QbALwiERYSIK6 51EFBh/kAss2iz+HndZdFcqmAKhL7BU2GIxGWwJfPNmgMjDSTi8tha4+9FR2fPvG HJysWV3H+i9vYPt1XchAoMf8YUgZrpO1 -----END CERTIFICATE-----Generated at Sun Apr 27 10:41:43 2025 by rpki-client