$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa File: cfcc50c5-85a1-3171-9f0f-8655231e6995.roa (raw, json) Hash identifier: I0kDyo4ub/P9VYMrORnpggplk4TvLdphAd4bQ+xleX0= Subject key identifier: 33:76:EB:31:3D:12:F1:35:77:9D:A6:6E:1B:5A:79:EF:8C:F5:A2:02 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C24575670D6CCC70E4CF6E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1002:b020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:57:56:70:d6:cc:c7:0e:4c:f6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=7c9efdd0-6508-47ad-9c20-6e4bdb310954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:15:95:c3:9a:de:29:06:9d:41:41:25:d0: 89:7e:90:3f:4a:b8:2f:aa:fd:d6:05:cb:10:4e:97: 11:13:01:41:96:27:7e:c2:15:b9:74:cc:23:79:c8: 24:e2:f6:3a:fe:64:d1:41:d1:a4:cb:e9:e8:98:8e: 5f:9a:01:ac:ad:95:ea:a9:a2:32:a7:59:6f:e8:bc: e7:4b:52:95:a5:dc:f0:2c:eb:54:45:45:63:2d:1d: b9:22:87:5f:1d:e7:2d:6e:32:22:34:47:08:4d:7c: 76:35:ef:92:5e:c3:15:fc:19:2b:a2:15:ae:5f:3d: 44:66:b1:0b:b1:49:2f:6a:2e:d6:d4:2d:c9:32:1e: c6:62:8d:0d:fd:ce:8c:0c:5d:8e:a9:df:2b:4e:33: 3c:78:06:f3:78:7e:92:40:39:fd:a5:df:27:3e:11: 5d:48:b4:ac:82:0e:19:c1:68:78:5d:fa:56:db:e4: 63:77:00:1c:c7:2b:82:f4:10:92:21:c1:ec:2a:ba: 6c:a4:a7:9e:29:7f:31:7f:48:55:5e:18:a1:52:ba: 30:f4:56:d6:75:b3:2e:74:f5:03:81:8b:e2:37:ee: 6b:5c:54:dd:d8:8b:08:7f:93:cf:6a:9b:95:b4:e9: 04:8d:4c:0c:96:2c:12:d0:f7:97:7f:f9:a1:a0:ac: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:76:EB:31:3D:12:F1:35:77:9D:A6:6E:1B:5A:79:EF:8C:F5:A2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1002:b020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:32:80:01:a1:09:e3:06:d8:3e:71:1b:67:dc:96:ed:bb:e6: 83:b9:95:88:67:86:68:37:e5:b8:c6:b2:c2:ae:b1:86:b2:77: f7:bc:25:d5:13:e3:32:a4:0e:5b:cd:8f:ec:42:51:af:6d:c6: f8:6f:8f:58:30:bf:62:0d:9d:df:80:23:81:d5:1a:f2:ac:5e: d6:80:c2:27:f7:f1:a9:4a:50:a7:b2:be:98:c0:45:c1:e7:d9: 89:aa:f0:3e:74:56:41:8b:05:2a:d0:91:73:d6:ed:26:3b:68: 98:24:bb:3a:56:26:b5:53:c7:57:70:02:f1:eb:1b:72:fc:b6: 46:7e:9b:ef:8a:d7:77:99:79:5d:06:9e:08:72:68:83:0b:46: c9:59:5e:9f:d4:5a:b3:f1:52:bc:19:83:1c:bd:48:c1:67:a7: 40:30:1b:c2:33:1f:2b:5f:f9:ce:50:82:ad:26:eb:4b:27:92: cb:99:28:87:fb:6f:5e:4d:37:47:7c:d7:fd:16:42:16:6b:f0: 19:08:e1:d1:da:d9:c4:45:ba:65:92:79:76:f4:73:84:15:5c: 30:1c:3c:0e:06:79:6d:c3:d6:79:c9:42:e5:21:86:a7:ad:a6: 41:be:e3:26:55:a9:f1:fe:25:78:b8:27:1a:c4:79:27:a9:6a: 22:c7:7e:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJFdWcNbMxw5M9uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk N2M5ZWZkZDAtNjUwOC00N2FkLTljMjAtNmU0YmRiMzEwOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQEVlcOa3ikGnUFBJdCJfpA/Srgvqv3WBcsQ TpcREwFBlid+whW5dMwjecgk4vY6/mTRQdGky+nomI5fmgGsrZXqqaIyp1lv6Lzn S1KVpdzwLOtURUVjLR25IodfHectbjIiNEcITXx2Ne+SXsMV/BkrohWuXz1EZrEL sUkvai7W1C3JMh7GYo0N/c6MDF2Oqd8rTjM8eAbzeH6SQDn9pd8nPhFdSLSsgg4Z wWh4XfpW2+RjdwAcxyuC9BCSIcHsKrpspKeeKX8xf0hVXhihUrow9FbWdbMudPUD gYviN+5rXFTd2IsIf5PPapuVtOkEjUwMliwS0PeXf/mhoKwfYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDN26zE9EvE1d52mbhtaee+M9aICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2ZjYzUwYzUtODVhMS0z MTcxLTlmMGYtODY1NTIzMWU2OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQArAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwygAGhCeMG2D5xG2fclu275oO5lYhnhmg35bjGssKusYayd/e8 JdUT4zKkDlvNj+xCUa9txvhvj1gwv2INnd+AI4HVGvKsXtaAwif38alKUKeyvpjA RcHn2Ymq8D50VkGLBSrQkXPW7SY7aJgkuzpWJrVTx1dwAvHrG3L8tkZ+m++K13eZ eV0GnghyaIMLRslZXp/UWrPxUrwZgxy9SMFnp0AwG8IzHytf+c5Qgq0m60snksuZ KIf7b15NN0d81/0WQhZr8BkI4dHa2cRFumWSeXb0c4QVXDAcPA4GeW3D1nnJQuUh hqetpkG+4yZVqfH+JXi4JxrEeSepaiLHftI= -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:55 2025 by rpki-client