$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8df1abb7-f88a-322f-95c7-88e15c151d22.roa File: 8df1abb7-f88a-322f-95c7-88e15c151d22.roa (raw, json) Hash identifier: ufO26fPPOlMnQkFltvmeClbIlX9GzBi/BCoG5omsKoA= Subject key identifier: 38:CE:72:55:F7:F7:04:71:F8:3D:60:DB:51:7A:B8:8B:2F:A8:E7:DF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858499D1085107F4D1867339DD180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8df1abb7-f88a-322f-95c7-88e15c151d22.roa Signing time: Tue 22 Apr 2025 19:09:01 +0000 ROA not before: Tue 22 Apr 2025 19:09:01 +0000 ROA not after: Mon 21 Jul 2025 19:09:01 +0000 asID: 6167 IP address blocks: 2600:1004:a060::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:10:85:10:7f:4d:18:67:33:9d:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 22 19:09:01 2025 GMT Not After : Jul 21 19:09:01 2025 GMT Subject: CN=a7af79eb-cbfa-4fa5-93da-a11f06e88ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:3f:b3:29:fa:57:b0:7b:8d:09:93:2f:02: d8:16:7c:c2:64:2e:69:56:7a:b4:cc:32:7c:27:a3: 3d:20:31:27:4d:28:9e:a2:a3:78:d3:c9:a0:4e:61: c3:fe:97:79:f4:6b:3d:3d:ce:d8:e1:83:7d:ec:85: 90:b3:7f:6c:7d:4f:ec:31:13:65:2f:a3:6f:69:64: d0:53:1d:0d:cf:ac:f1:39:c5:b6:8c:0f:8a:52:ef: 7c:f7:4e:41:4e:d9:5c:ee:7b:01:07:73:cd:08:7d: b5:60:22:6f:2c:e8:af:aa:e3:72:77:97:88:95:04: 26:09:26:50:f7:e1:1c:e5:57:4a:76:c7:4c:a5:93: 7c:f9:ee:02:ef:9e:5f:58:1e:2f:de:46:38:8c:3f: 30:48:3f:64:b2:95:95:46:d0:66:2b:b5:27:32:33: 30:9a:10:42:39:c5:87:76:3b:1c:5c:00:72:7c:d6: f0:a7:71:38:39:4e:d7:20:b7:e6:f6:2e:9f:07:f0: 16:2b:53:d5:1d:6f:5d:37:59:6c:94:87:55:0f:1d: a4:5c:60:80:9b:10:da:5b:a3:3f:45:27:ee:a7:7d: 57:fa:46:d6:62:e3:95:24:be:a0:24:bd:0a:4d:69: ec:c2:4b:a8:83:0f:c0:cf:44:74:68:63:59:a9:e1: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CE:72:55:F7:F7:04:71:F8:3D:60:DB:51:7A:B8:8B:2F:A8:E7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8df1abb7-f88a-322f-95c7-88e15c151d22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1004:a060::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c4:b8:63:bc:a5:a6:4a:84:19:78:fd:6c:b8:6b:bd:12:1d: 2d:4f:fd:b1:64:ca:d1:b9:96:18:04:cb:c9:8f:38:a3:68:62: de:e0:5a:ef:de:fe:a1:ab:df:71:11:7c:7a:26:5f:e6:03:a1: ff:c7:6a:c6:51:ea:fa:36:a3:fb:b7:cb:7e:55:66:a7:06:5c: 13:ec:d5:6e:7a:fa:4e:26:1e:ee:ff:49:58:b5:3c:19:da:d0: 24:c7:64:97:59:70:96:6e:ba:4c:e0:15:25:bf:41:54:41:6c: c9:48:3e:8f:e0:29:a7:5d:3b:aa:e3:18:9c:97:b6:28:60:4a: 0a:6a:6a:63:57:4a:46:47:b9:94:5e:f8:93:73:11:76:2e:c5: 37:50:57:ee:ee:a9:c7:6d:7b:ac:6d:a1:57:ca:33:3c:41:de: 28:e4:36:b1:00:d0:8c:6d:cb:ca:ad:69:84:11:00:89:fb:c0: a6:9d:7b:5f:53:28:4c:74:56:f1:de:8f:d5:ba:1d:bc:46:3e: 5a:ed:76:24:4a:c3:30:11:26:d2:fb:b9:b1:f6:30:13:f1:fc: ea:47:52:6d:55:9f:9f:2a:7a:c1:6e:ee:75:cd:99:3c:3b:d5: d5:51:3c:3b:20:d6:5a:14:f7:9f:dc:d7:12:82:31:e2:83:a3: 92:7f:f2:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdEIUQf00YZzOd0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyMjE5MDkwMVoXDTI1MDcyMTE5MDkwMVowLzEtMCsGA1UEAxMk YTdhZjc5ZWItY2JmYS00ZmE1LTkzZGEtYTExZjA2ZTg4YWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBs/syn6V7B7jQmTLwLYFnzCZC5pVnq0zDJ8 J6M9IDEnTSieoqN408mgTmHD/pd59Gs9Pc7Y4YN97IWQs39sfU/sMRNlL6NvaWTQ Ux0Nz6zxOcW2jA+KUu98905BTtlc7nsBB3PNCH21YCJvLOivquNyd5eIlQQmCSZQ 9+Ec5VdKdsdMpZN8+e4C755fWB4v3kY4jD8wSD9kspWVRtBmK7UnMjMwmhBCOcWH djscXAByfNbwp3E4OU7XILfm9i6fB/AWK1PVHW9dN1lslIdVDx2kXGCAmxDaW6M/ RSfup31X+kbWYuOVJL6gJL0KTWnswkuogw/Az0R0aGNZqeHXFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDjOclX39wRx+D1g21F6uIsvqOffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGRmMWFiYjctZjg4YS0z MjJmLTk1YzctODhlMTVjMTUxZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQBKBg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJfEuGO8paZKhBl4/Wy4a70SHS1P/bFkytG5lhgEy8mPOKNoYt7g Wu/e/qGr33ERfHomX+YDof/HasZR6vo2o/u3y35VZqcGXBPs1W56+k4mHu7/SVi1 PBna0CTHZJdZcJZuukzgFSW/QVRBbMlIPo/gKaddO6rjGJyXtihgSgpqamNXSkZH uZRe+JNzEXYuxTdQV+7uqcdte6xtoVfKMzxB3ijkNrEA0Ixty8qtaYQRAIn7wKad e19TKEx0VvHej9W6HbxGPlrtdiRKwzARJtL7ubH2MBPx/OpHUm1Vn58qesFu7nXN mTw71dVRPDsg1loU95/c1xKCMeKDo5J/8hQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:52 2025 by rpki-client