$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e026c296-9368-3f5a-bc5b-819e35a615a6.roa File: e026c296-9368-3f5a-bc5b-819e35a615a6.roa (raw, json) Hash identifier: yTt6eLSILgB0n+Y3Jf+CUd63Z9rhLUWxGwjUk3jAAIU= Subject key identifier: A1:E7:45:98:50:32:6E:49:73:E2:D0:61:1E:54:4E:1E:4F:38:BB:D8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849AE7F45CF3434B463F11EAC00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e026c296-9368-3f5a-bc5b-819e35a615a6.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 2600:1009:a024::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:45:cf:34:34:b4:63:f1:1e:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=5ec73a7e-c75f-476e-bf93-4eb4c80d96c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:c5:f7:b7:72:26:67:86:9d:46:9c:58:48: 39:b0:ba:e7:7c:64:f4:60:a3:db:f0:b0:4a:0b:08: 95:fd:3e:28:ac:40:bc:dd:8b:ee:97:ed:4e:a6:8c: 61:96:61:2b:56:e2:79:62:22:83:b1:a4:0c:e7:89: 8e:52:55:bc:dc:e0:5d:85:f1:6d:3c:b4:00:a7:15: e6:8b:88:8f:fb:30:94:e0:6b:22:95:5a:9a:be:ee: 62:d6:0b:74:d9:76:09:d1:6f:a9:c5:05:43:e9:76: 7a:cc:de:48:a4:f4:c0:74:ce:f9:c6:6f:3d:1a:04: 81:06:a3:92:f7:b8:33:d4:5c:01:8d:71:31:c1:e3: f7:e4:9a:b1:df:33:bd:19:5d:da:e7:74:96:1d:9e: 8f:f1:55:2b:0c:7d:ec:e1:36:64:54:0a:d8:94:b8: 64:d5:f1:55:80:de:f2:8c:13:df:8a:91:2c:df:ab: cb:e0:1e:73:85:af:68:a0:e0:54:33:f2:4d:23:50: a1:95:9c:3a:18:19:4e:03:0a:73:81:d6:2b:26:9d: 7e:d2:e5:3f:33:1f:29:9e:2d:e0:f6:7d:56:95:1e: a9:2c:ad:a4:43:1b:d0:6d:a9:5f:e6:89:95:32:0f: 48:03:e1:66:d4:0b:5a:f6:50:8c:46:a0:5b:30:2f: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E7:45:98:50:32:6E:49:73:E2:D0:61:1E:54:4E:1E:4F:38:BB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e026c296-9368-3f5a-bc5b-819e35a615a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1009:a024::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b6:14:ad:e1:68:7e:8d:b1:94:e0:f9:3c:bc:e9:79:a8:05: b8:66:f4:64:be:12:04:4a:fb:f1:e8:84:3e:8e:93:4a:36:68: c3:f1:0b:ef:d9:fe:9a:6d:4d:0d:9d:7d:bb:60:75:75:bc:05: b5:91:6b:16:c6:a8:cc:47:7e:18:98:75:12:35:66:2e:e3:16: e2:a4:ce:34:6f:88:40:7d:f5:ed:2a:0d:18:35:62:e1:30:4c: 1e:82:7c:cb:11:86:01:d8:62:0d:50:84:fe:37:78:fb:00:de: a5:31:8c:e1:03:ba:87:e7:2d:40:0b:f4:c7:1b:66:a8:17:a9: ce:af:ae:b8:ec:a8:08:96:52:b3:1c:a6:97:c4:8e:6f:8a:03: fc:47:3e:63:95:c7:15:8c:8d:f5:3e:7b:33:7b:1a:1c:13:82: 8e:34:55:b0:7c:05:a1:1c:ec:f1:14:16:4f:65:de:e4:58:d5: a7:fc:b1:26:ff:60:dd:8e:1f:0a:c4:e1:6a:4a:57:d8:bb:b5: bc:d0:c6:b5:f0:be:f2:cf:c2:66:bd:a3:83:1c:2c:3a:01:50: 21:2f:86:23:23:ac:c4:20:ed:06:fa:82:df:3b:e0:04:2a:7d: 21:e6:32:60:ed:d9:5e:5e:ce:78:62:28:ee:27:6f:7e:39:92: 6e:ca:10:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmuf0XPNDS0Y/EerAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk NWVjNzNhN2UtYzc1Zi00NzZlLWJmOTMtNGViNGM4MGQ5NmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VjF97dyJmeGnUacWEg5sLrnfGT0YKPb8LBK CwiV/T4orEC83Yvul+1OpoxhlmErVuJ5YiKDsaQM54mOUlW83OBdhfFtPLQApxXm i4iP+zCU4GsilVqavu5i1gt02XYJ0W+pxQVD6XZ6zN5IpPTAdM75xm89GgSBBqOS 97gz1FwBjXExweP35Jqx3zO9GV3a53SWHZ6P8VUrDH3s4TZkVArYlLhk1fFVgN7y jBPfipEs36vL4B5zha9ooOBUM/JNI1ChlZw6GBlOAwpzgdYrJp1+0uU/Mx8pni3g 9n1WlR6pLK2kQxvQbalf5omVMg9IA+Fm1Ata9lCMRqBbMC+G8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKHnRZhQMm5Jc+LQYR5UTh5POLvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTAyNmMyOTYtOTM2OC0z ZjVhLWJjNWItODE5ZTM1YTYxNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCaAk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAi2FK3haH6NsZTg+Ty86XmoBbhm9GS+EgRK+/HohD6Ok0o2aMPx C+/Z/pptTQ2dfbtgdXW8BbWRaxbGqMxHfhiYdRI1Zi7jFuKkzjRviEB99e0qDRg1 YuEwTB6CfMsRhgHYYg1QhP43ePsA3qUxjOEDuofnLUAL9McbZqgXqc6vrrjsqAiW UrMcppfEjm+KA/xHPmOVxxWMjfU+ezN7GhwTgo40VbB8BaEc7PEUFk9l3uRY1af8 sSb/YN2OHwrE4WpKV9i7tbzQxrXwvvLPwma9o4McLDoBUCEvhiMjrMQg7Qb6gt87 4AQqfSHmMmDt2V5eznhiKO4nb345km7KEIU= -----END CERTIFICATE-----Generated at Tue Apr 29 10:18:09 2025 by rpki-client