$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8fd2def-fc34-394b-afee-25c1b6829a92.roa File: f8fd2def-fc34-394b-afee-25c1b6829a92.roa (raw, json) Hash identifier: /lhofD79PZPCyGGRa4dDfgBIFcSyNjwCtKGvwb4LsEg= Subject key identifier: AB:33:B8:98:AC:B3:40:68:BD:A5:24:73:64:A7:1B:BC:EA:56:C1:1B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584949FEAEF9BD56DEBB6573B840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8fd2def-fc34-394b-afee-25c1b6829a92.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 6167 IP address blocks: 2600:1017:b020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:ae:f9:bd:56:de:bb:65:73:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=1d8bafe9-d2ef-4183-b6e2-9a1154995288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:a6:b3:30:7e:ef:27:64:04:e8:4b:aa:8e: ab:83:d8:f0:cc:95:bc:67:fa:2d:da:58:d5:c2:86: 1e:a0:83:b6:c6:19:34:d7:cb:be:ab:a1:31:b1:21: df:48:4b:df:b4:b1:fc:97:91:09:bf:0e:21:47:44: 9d:e5:f4:9b:5e:60:c8:6f:de:83:85:03:cf:1d:b9: 33:6d:98:95:c5:53:a0:7d:f1:5e:60:38:cf:54:fe: 6b:e3:a2:58:fb:71:a8:10:cf:50:ba:59:f7:96:f2: 66:28:c8:f4:b3:07:45:dc:06:20:62:5b:ed:21:8c: 0d:9e:40:62:82:40:45:c5:fd:f6:8b:33:9a:57:a7: 93:6e:30:40:c9:ed:82:ce:10:a6:bf:a6:84:ac:36: c7:60:52:07:42:1a:46:55:0e:bf:dd:fd:e8:3b:35: f9:0d:52:8e:ec:b7:14:be:72:78:a9:0b:eb:3f:f4: b3:46:1a:72:63:a5:19:c6:9e:d8:68:31:57:d2:3c: 2c:d4:84:e1:5f:46:0b:9a:9a:39:12:c3:6e:39:cd: 54:4c:b7:8c:89:c6:a9:e1:6d:75:b3:50:d3:18:47: 3d:0b:f4:64:15:8f:ad:aa:e2:27:8e:00:86:ab:ad: c7:d2:ec:4b:d8:54:39:2b:fe:74:a0:c0:a5:f9:c3: 30:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:B8:98:AC:B3:40:68:BD:A5:24:73:64:A7:1B:BC:EA:56:C1:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8fd2def-fc34-394b-afee-25c1b6829a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1017:b020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:bd:3d:54:88:dc:c8:1f:43:b8:ce:09:fa:4e:6a:5f:61:69: e1:1a:81:37:ec:51:f6:69:ec:b4:2c:39:0e:b7:75:2c:e4:17: 12:da:ee:94:1b:5b:1b:cd:b3:62:53:b2:e2:32:19:87:93:bf: 8b:be:52:9c:02:61:76:34:f7:cf:2f:52:52:7d:d6:a0:6b:1d: 61:6c:90:c7:66:50:3c:de:c3:74:9e:1a:5d:a2:03:58:9a:0f: 19:0e:d5:23:67:8c:d9:ab:71:cc:70:39:5a:b9:8f:9e:9d:e2: ef:6e:be:12:a0:ae:57:ee:51:99:f5:e6:3b:73:36:f2:be:f6: b0:35:ef:9f:96:8f:61:d5:14:e9:22:35:90:f4:8c:10:c5:15: dd:d1:dd:22:b7:dd:61:9d:52:61:43:5e:39:64:8d:39:e1:5c: 28:f9:72:f1:7f:8d:07:08:0a:e1:57:30:af:04:0b:48:cf:f8: db:b7:55:f7:32:bb:9b:eb:8d:e3:e2:7f:68:9e:2e:85:73:9f: f5:1c:6e:62:c0:8b:9b:6d:16:ab:66:10:03:2c:79:04:da:7b: 7b:cf:ca:05:b7:bf:f4:4d:be:c8:d0:4a:c8:ee:0c:e6:46:70: 0e:c7:1a:c2:44:cc:b1:46:19:0c:be:63:0e:82:93:05:31:32: b8:c1:9a:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/q75vVbeu2VzuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MWQ4YmFmZTktZDJlZi00MTgzLWI2ZTItOWExMTU0OTk1Mjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/GmszB+7ydkBOhLqo6rg9jwzJW8Z/ot2ljV woYeoIO2xhk018u+q6ExsSHfSEvftLH8l5EJvw4hR0Sd5fSbXmDIb96DhQPPHbkz bZiVxVOgffFeYDjPVP5r46JY+3GoEM9Quln3lvJmKMj0swdF3AYgYlvtIYwNnkBi gkBFxf32izOaV6eTbjBAye2CzhCmv6aErDbHYFIHQhpGVQ6/3f3oOzX5DVKO7LcU vnJ4qQvrP/SzRhpyY6UZxp7YaDFX0jws1IThX0YLmpo5EsNuOc1UTLeMicap4W11 s1DTGEc9C/RkFY+tquInjgCGq63H0uxL2FQ5K/50oMCl+cMwkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKszuJiss0BovaUkc2SnG7zqVsEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjhmZDJkZWYtZmMzNC0z OTRiLWFmZWUtMjVjMWI2ODI5YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQF7Ag MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAO9PVSI3MgfQ7jOCfpOal9haeEagTfsUfZp7LQsOQ63dSzkFxLa 7pQbWxvNs2JTsuIyGYeTv4u+UpwCYXY0988vUlJ91qBrHWFskMdmUDzew3SeGl2i A1iaDxkO1SNnjNmrccxwOVq5j56d4u9uvhKgrlfuUZn15jtzNvK+9rA175+Wj2HV FOkiNZD0jBDFFd3R3SK33WGdUmFDXjlkjTnhXCj5cvF/jQcICuFXMK8EC0jP+Nu3 Vfcyu5vrjePif2ieLoVzn/UcbmLAi5ttFqtmEAMseQTae3vPygW3v/RNvsjQSsju DOZGcA7HGsJEzLFGGQy+Yw6CkwUxMrjBmv8= -----END CERTIFICATE-----Generated at Sun Apr 27 20:18:13 2025 by rpki-client