$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d495fd-c6b7-3f8c-8100-290c9bcef233.roa File: 89d495fd-c6b7-3f8c-8100-290c9bcef233.roa (raw, json) Hash identifier: 1Bgl6PFPYvIov8bvyhHAtB0DgZkvmQerfc4iak6b6Hw= Subject key identifier: 58:6F:84:77:A7:14:9F:92:AF:6F:B5:86:BC:D8:7E:D3:18:41:3F:6C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858499D1093C55D105CDBB7738300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d495fd-c6b7-3f8c-8100-290c9bcef233.roa Signing time: Tue 22 Apr 2025 19:09:08 +0000 ROA not before: Tue 22 Apr 2025 19:09:08 +0000 ROA not after: Mon 21 Jul 2025 19:09:08 +0000 asID: 6167 IP address blocks: 2600:1009:a128::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:10:93:c5:5d:10:5c:db:b7:73:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 22 19:09:08 2025 GMT Not After : Jul 21 19:09:08 2025 GMT Subject: CN=3d588002-3715-4d0a-bf1d-93386fd70205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:1a:0d:c1:2f:25:10:86:80:b8:12:76:90: 2c:e2:de:38:cd:f6:f5:ad:cc:ec:ef:71:60:82:e7: 47:98:86:43:69:09:33:28:c7:66:ff:3a:74:29:11: 86:3a:87:1d:3e:6c:29:92:2f:f1:5f:39:d8:5d:19: 39:f8:ec:b1:59:cb:c6:8f:d0:f7:c9:ec:a1:7a:f1: d8:4c:dd:b6:05:6f:b9:a5:a7:18:b2:79:18:88:57: e1:0a:61:2b:e6:2b:5c:4b:82:6f:a2:72:b8:8d:39: b0:92:49:11:1a:ed:43:71:67:48:92:8b:9c:fc:78: f1:cb:83:32:9c:0a:75:f4:71:05:8a:2a:b4:2c:ba: 1d:c5:0f:49:82:c0:ed:9d:aa:00:f7:8f:1b:bf:1f: c2:09:28:3e:41:d6:66:cc:16:d2:a2:85:73:03:5b: 12:a7:f3:28:1d:7f:c0:88:c8:7f:f8:f0:69:2b:7f: 77:8b:6f:2f:8e:d6:6d:ad:fa:39:65:1d:65:6c:f9: ab:f3:98:17:37:5c:fa:de:64:55:bf:61:f1:cc:88: 2f:2e:bd:af:df:b2:9a:f9:7e:ec:21:0c:ae:2f:a4: 5a:94:a7:8f:ca:20:98:b2:46:cb:3c:eb:78:7f:4b: 5d:fa:07:c3:fe:94:c5:84:4c:6c:fd:60:17:c6:b1: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6F:84:77:A7:14:9F:92:AF:6F:B5:86:BC:D8:7E:D3:18:41:3F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d495fd-c6b7-3f8c-8100-290c9bcef233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1009:a128::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:45:91:e1:0a:4b:20:68:04:4b:d3:f7:69:4d:a8:73:8a:40: 48:fa:4b:8a:9f:6a:38:13:4d:99:3b:78:ed:72:60:ef:8f:07: a5:90:cf:bf:f5:85:93:0c:1f:d3:72:06:26:a3:15:3f:cf:df: 0f:af:10:cb:d3:4c:8b:24:32:bc:bf:13:f5:2b:b3:11:b1:b3: a9:c0:61:f4:10:cb:90:e1:e9:91:13:97:6f:2b:04:0a:5f:27: 63:f0:d2:64:08:1d:56:0d:c7:0e:87:1c:3e:9d:b4:fc:5d:37: 68:0d:eb:b7:ad:76:d9:19:2b:e2:4d:74:b2:f4:e2:1c:54:df: 8d:63:2a:aa:25:23:9e:cd:64:98:42:5a:63:06:4c:8f:73:82: 04:0a:14:bd:ba:db:dd:a3:76:70:34:61:0c:09:c3:9e:05:02: 63:6a:34:64:30:96:35:87:7f:f0:25:c0:ad:74:a1:54:71:ce: 4c:6c:8b:4b:00:31:41:b1:af:68:ff:6b:a3:c1:04:4e:4b:1a: 3d:02:06:7d:07:14:0d:34:ff:7a:56:63:45:7e:a5:37:aa:f0: 3e:dd:71:66:de:53:55:3c:ea:f7:15:44:01:b5:3d:c5:1c:14: 21:35:f7:8c:33:74:7b:29:29:af:8e:e0:d9:88:f1:c7:64:01: 24:8f:40:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdEJPFXRBc27dzgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyMjE5MDkwOFoXDTI1MDcyMTE5MDkwOFowLzEtMCsGA1UEAxMk M2Q1ODgwMDItMzcxNS00ZDBhLWJmMWQtOTMzODZmZDcwMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk4aDcEvJRCGgLgSdpAs4t44zfb1rczs73Fg gudHmIZDaQkzKMdm/zp0KRGGOocdPmwpki/xXznYXRk5+OyxWcvGj9D3yeyhevHY TN22BW+5pacYsnkYiFfhCmEr5itcS4JvonK4jTmwkkkRGu1DcWdIkouc/Hjxy4My nAp19HEFiiq0LLodxQ9JgsDtnaoA948bvx/CCSg+QdZmzBbSooVzA1sSp/MoHX/A iMh/+PBpK393i28vjtZtrfo5ZR1lbPmr85gXN1z63mRVv2HxzIgvLr2v37Ka+X7s IQyuL6RalKePyiCYskbLPOt4f0td+gfD/pTFhExs/WAXxrFwnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFhvhHenFJ+Sr2+1hrzYftMYQT9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODlkNDk1ZmQtYzZiNy0z ZjhjLTgxMDAtMjkwYzliY2VmMjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQCaEo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI9FkeEKSyBoBEvT92lNqHOKQEj6S4qfajgTTZk7eO1yYO+PB6WQ z7/1hZMMH9NyBiajFT/P3w+vEMvTTIskMry/E/UrsxGxs6nAYfQQy5Dh6ZETl28r BApfJ2Pw0mQIHVYNxw6HHD6dtPxdN2gN67etdtkZK+JNdLL04hxU341jKqolI57N ZJhCWmMGTI9zggQKFL26292jdnA0YQwJw54FAmNqNGQwljWHf/AlwK10oVRxzkxs i0sAMUGxr2j/a6PBBE5LGj0CBn0HFA00/3pWY0V+pTeq8D7dcWbeU1U86vcVRAG1 PcUcFCE194wzdHspKa+O4NmI8cdkASSPQAM= -----END CERTIFICATE-----Generated at Mon Apr 28 02:49:54 2025 by rpki-client