$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0e01838-6a2d-37f5-96a1-8ab22faa703b.roa File: e0e01838-6a2d-37f5-96a1-8ab22faa703b.roa (raw, json) Hash identifier: DQI90R5SysC8yBX2UOlmpiKZuojx1cr46sud9bxx2JY= Subject key identifier: F9:E7:FE:EE:F7:64:D4:62:27:43:11:D5:9E:CE:09:A2:49:43:EC:4E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C2481D107FC43990EC58200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0e01838-6a2d-37f5-96a1-8ab22faa703b.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6167 IP address blocks: 2600:1000:b0e0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:81:d1:07:fc:43:99:0e:c5:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=8c12ab77-81ca-4225-bf78-3ecdefefe0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8d:6b:7a:9f:9a:5a:f8:54:42:bc:ab:5c:02: 1c:b8:cf:a6:53:68:60:79:4d:b8:38:25:fc:53:60: 18:45:a6:33:4d:0a:ed:76:34:1c:f2:c4:b2:8f:d9: 2d:e4:9f:80:bc:92:38:e2:e1:c4:32:f0:1e:fc:3f: 68:eb:6a:ad:6f:a0:be:35:de:fd:d0:95:f9:d1:70: 88:99:a6:54:fd:2c:18:95:7b:4a:67:11:87:1b:97: f2:c8:77:91:41:6e:9f:19:a4:72:7a:20:e5:00:e9: 22:08:8e:51:83:c3:96:33:70:69:f9:1d:0f:2e:61: 4f:17:1a:77:b1:b0:f4:61:4b:ca:4e:e0:48:f7:a6: 9d:85:31:3f:eb:f8:49:21:72:70:23:d1:d9:59:67: 40:d4:d7:0c:28:f3:b8:1a:69:a7:38:59:02:ca:18: 42:05:7c:58:ed:f4:d5:b6:ba:69:cf:30:2f:7c:e4: 4c:f4:d5:4f:75:23:c3:50:de:3b:27:9b:0a:9a:a1: 93:48:8d:c3:3f:56:93:3c:fc:60:6a:e3:99:b8:bd: ba:e2:8c:c7:a5:48:ea:b4:e4:ad:65:1a:62:1e:cf: 3c:a2:02:4f:4c:5a:28:2a:1b:c4:85:93:36:b8:be: 0f:d1:2c:62:a4:5d:69:1f:ef:ba:00:e4:76:1c:fd: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E7:FE:EE:F7:64:D4:62:27:43:11:D5:9E:CE:09:A2:49:43:EC:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0e01838-6a2d-37f5-96a1-8ab22faa703b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1000:b0e0::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a1:6c:f2:9f:64:02:99:3a:a1:a9:f6:eb:7d:a7:fd:c9:e9: 93:c8:89:40:48:54:4c:31:1c:e5:62:eb:07:21:de:90:3d:fc: a6:63:c8:36:e4:41:37:52:04:11:08:b4:14:da:17:dd:52:97: 30:6f:cc:7c:53:60:1d:dc:3d:3b:b0:71:a3:09:78:69:8a:3f: 33:8c:8e:c4:92:80:3a:5e:12:74:19:6f:f5:3e:0c:8b:20:a9: de:d1:f6:64:d3:ee:68:55:4c:7c:53:8c:8c:04:c6:28:5e:5a: 7a:e6:c8:de:4c:42:bf:96:60:23:ac:f5:1f:15:3d:d4:81:05: 9f:3a:02:ea:0b:b1:f7:33:3e:b1:cb:5c:d2:c9:61:c9:34:a6: 39:8f:06:2c:1e:03:28:10:ea:ab:4a:9f:0e:f8:12:d4:64:14: 85:45:82:3f:51:89:95:eb:34:53:42:32:00:17:8a:39:24:3f: 4a:60:62:3f:65:da:ff:21:6b:ac:6b:b7:f0:5f:08:da:2a:fb: a1:d1:cc:41:48:d9:01:86:e8:71:24:ed:87:ed:8d:14:eb:cc: f5:5c:b0:55:a7:5c:7b:01:2b:aa:0e:47:17:31:7c:25:ce:d2: 6a:de:33:0c:b1:2f:99:3c:e7:b3:1d:26:94:b9:a9:24:6d:8e: 0b:4b:02:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIHRB/xDmQ7FggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk OGMxMmFiNzctODFjYS00MjI1LWJmNzgtM2VjZGVmZWZlMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg41rep+aWvhUQryrXAIcuM+mU2hgeU24OCX8 U2AYRaYzTQrtdjQc8sSyj9kt5J+AvJI44uHEMvAe/D9o62qtb6C+Nd790JX50XCI maZU/SwYlXtKZxGHG5fyyHeRQW6fGaRyeiDlAOkiCI5Rg8OWM3Bp+R0PLmFPFxp3 sbD0YUvKTuBI96adhTE/6/hJIXJwI9HZWWdA1NcMKPO4GmmnOFkCyhhCBXxY7fTV trppzzAvfORM9NVPdSPDUN47J5sKmqGTSI3DP1aTPPxgauOZuL264ozHpUjqtOSt ZRpiHs88ogJPTFooKhvEhZM2uL4P0SxipF1pH++6AOR2HP1FJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPnn/u73ZNRiJ0MR1Z7OCaJJQ+xOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTBlMDE4MzgtNmEyZC0z N2Y1LTk2YTEtOGFiMjJmYWE3MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQALDg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHShbPKfZAKZOqGp9ut9p/3J6ZPIiUBIVEwxHOVi6wch3pA9/KZj yDbkQTdSBBEItBTaF91SlzBvzHxTYB3cPTuwcaMJeGmKPzOMjsSSgDpeEnQZb/U+ DIsgqd7R9mTT7mhVTHxTjIwExiheWnrmyN5MQr+WYCOs9R8VPdSBBZ86AuoLsfcz PrHLXNLJYck0pjmPBiweAygQ6qtKnw74EtRkFIVFgj9RiZXrNFNCMgAXijkkP0pg Yj9l2v8ha6xrt/BfCNoq+6HRzEFI2QGG6HEk7YftjRTrzPVcsFWnXHsBK6oORxcx fCXO0mreMwyxL5k857MdJpS5qSRtjgtLAtM= -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:47 2025 by rpki-client