$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/952c7172-2e65-30f3-9af4-b9be330840a2.roa File: 952c7172-2e65-30f3-9af4-b9be330840a2.roa (raw, json) Hash identifier: s4e3/r38Wh/uCJdWTtG+jpddAlVYq+PePrAV/sBlbF0= Subject key identifier: 53:98:77:D3:D3:AC:EC:9E:10:8E:93:81:82:CE:B7:09:F6:A2:9F:DE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858499D10931048B0BD92C2E12D48 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/952c7172-2e65-30f3-9af4-b9be330840a2.roa Signing time: Tue 22 Apr 2025 19:09:08 +0000 ROA not before: Tue 22 Apr 2025 19:09:08 +0000 ROA not after: Mon 21 Jul 2025 19:09:08 +0000 asID: 6167 IP address blocks: 2600:1007:a038::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:10:93:10:48:b0:bd:92:c2:e1:2d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 22 19:09:08 2025 GMT Not After : Jul 21 19:09:08 2025 GMT Subject: CN=80b00b7c-6f0e-4741-be51-f4c87d950c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:11:58:4b:ba:24:b1:95:9c:38:0c:8d:bb: e4:40:24:e6:b5:97:d4:3b:e6:cc:d9:35:e0:a3:d0: 49:20:b8:ea:93:f4:d3:6f:67:bc:cd:0d:1b:28:82: 0b:ba:f2:82:0a:2b:5f:7e:68:15:8f:72:47:77:9a: f6:a6:9a:49:f4:1a:a9:9d:76:e2:1c:25:27:28:50: 0d:8a:4a:29:bd:19:dd:52:78:e7:8f:51:70:71:90: b2:a5:95:28:77:fa:e0:26:a4:b3:f6:56:fe:3b:91: 7a:c7:bb:0c:13:86:8b:c2:f9:ea:ab:1c:ef:20:37: 32:ac:45:90:ca:1d:fe:3b:d7:84:7e:87:e9:ac:03: 1a:da:ed:b6:d0:a0:df:d0:d4:a8:af:85:f5:f0:89: dd:d7:6e:c7:07:7c:64:65:dd:14:f9:8f:b7:fa:29: 6a:f5:0e:22:4a:d2:72:d9:e1:9d:55:61:cc:1e:d6: 16:2a:7d:fa:5f:1e:07:2d:3c:c1:02:2b:bf:04:31: e0:16:44:12:23:ee:03:77:08:c3:d1:3f:68:74:bd: 5c:18:fd:fe:10:59:74:14:b2:e0:69:49:8f:2a:00: b9:d9:aa:6b:b2:4d:0c:39:48:66:45:73:d8:bf:f5: ef:24:8a:c1:e4:94:c9:8c:7d:62:64:60:5d:ee:bb: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:98:77:D3:D3:AC:EC:9E:10:8E:93:81:82:CE:B7:09:F6:A2:9F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/952c7172-2e65-30f3-9af4-b9be330840a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1007:a038::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b0:90:5a:a3:fe:21:2f:d6:ee:9d:b8:fc:b4:36:e1:f2:0f: ae:a9:8c:95:a5:0a:c8:71:d7:9f:a6:59:1c:3e:36:da:5e:13: 38:22:a7:75:f4:d3:45:80:c7:92:2a:90:37:b0:be:02:c0:bf: e4:2b:6d:ec:be:b8:d0:83:3d:ee:ca:fb:69:5e:df:50:ef:83: bb:5d:01:e3:a2:9a:2b:55:46:4e:c5:c8:5c:7f:87:e1:07:7c: 30:ce:bf:79:71:93:99:81:59:c3:e3:3b:70:b6:32:b2:aa:6b: c6:d0:e3:4d:cf:76:d4:29:ec:e6:09:8c:73:f5:71:06:e9:07: 2d:36:4f:d9:b3:35:79:3b:85:93:9b:27:87:9e:66:29:23:20: a5:c5:5d:90:85:66:b2:f8:bf:da:2a:cf:f8:b4:3f:20:d5:56: b9:37:e1:38:71:75:ba:52:50:d3:79:4b:6f:4d:05:55:07:f5: 37:db:35:e3:ad:12:f3:0e:81:ab:5c:6d:fa:91:19:55:e6:c7: 4f:37:b2:c0:84:e1:2f:8b:32:af:6f:9d:c5:90:3e:4f:2b:ba: b3:cb:32:8c:9f:26:a1:53:04:1f:e3:53:fa:ea:19:f0:d9:90: 4e:8a:c5:0a:ac:50:61:a5:a1:fc:a4:93:95:30:19:ff:14:29: 8f:5c:4e:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdEJMQSLC9ksLhLUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyMjE5MDkwOFoXDTI1MDcyMTE5MDkwOFowLzEtMCsGA1UEAxMk ODBiMDBiN2MtNmYwZS00NzQxLWJlNTEtZjRjODdkOTUwYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+IRWEu6JLGVnDgMjbvkQCTmtZfUO+bM2TXg o9BJILjqk/TTb2e8zQ0bKIILuvKCCitffmgVj3JHd5r2pppJ9BqpnXbiHCUnKFAN ikopvRndUnjnj1FwcZCypZUod/rgJqSz9lb+O5F6x7sME4aLwvnqqxzvIDcyrEWQ yh3+O9eEfofprAMa2u220KDf0NSor4X18Ind127HB3xkZd0U+Y+3+ilq9Q4iStJy 2eGdVWHMHtYWKn36Xx4HLTzBAiu/BDHgFkQSI+4DdwjD0T9odL1cGP3+EFl0FLLg aUmPKgC52aprsk0MOUhmRXPYv/XvJIrB5JTJjH1iZGBd7rs4RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFOYd9PTrOyeEI6TgYLOtwn2op/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTUyYzcxNzItMmU2NS0z MGYzLTlhZjQtYjliZTMzMDg0MGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQB6A4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKwkFqj/iEv1u6duPy0NuHyD66pjJWlCshx15+mWRw+NtpeEzgi p3X000WAx5IqkDewvgLAv+Qrbey+uNCDPe7K+2le31Dvg7tdAeOimitVRk7FyFx/ h+EHfDDOv3lxk5mBWcPjO3C2MrKqa8bQ403PdtQp7OYJjHP1cQbpBy02T9mzNXk7 hZObJ4eeZikjIKXFXZCFZrL4v9oqz/i0PyDVVrk34ThxdbpSUNN5S29NBVUH9Tfb NeOtEvMOgatcbfqRGVXmx083ssCE4S+LMq9vncWQPk8rurPLMoyfJqFTBB/jU/rq GfDZkE6KxQqsUGGlofykk5UwGf8UKY9cTok= -----END CERTIFICATE-----Generated at Sun Apr 27 20:19:24 2025 by rpki-client