$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04249388-f1ce-3c29-a170-b824cd12866f.roa File: 04249388-f1ce-3c29-a170-b824cd12866f.roa (raw, json) Hash identifier: QcHp6D18CZZ6RW7Zm5HlmGUFSSBgSyXG85JD0DvtPNU= Subject key identifier: 0B:B8:C0:DA:C9:E2:EE:B4:D8:6B:68:77:28:99:87:9D:8D:18:49:F6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849833A12E0D66E895248C40900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04249388-f1ce-3c29-a170-b824cd12866f.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 2600:1009:b020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:12:e0:d6:6e:89:52:48:c4:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=e16791f2-f82b-4343-b726-97b822f1c71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:fe:7f:41:d0:8a:be:50:9b:12:5e:36:37: ff:d3:82:8f:85:48:02:39:95:e7:32:15:54:aa:67: 54:1b:07:c8:db:5f:ea:70:ea:70:92:1a:f9:e0:21: 4c:d8:0b:a0:79:60:6f:70:96:f0:22:12:38:7d:bb: 53:25:be:0a:90:4d:b6:ef:e9:04:33:33:83:87:2d: 90:1f:11:99:a7:7f:e0:87:8d:21:70:48:82:2f:07: 71:5b:4b:a5:fc:44:63:68:68:ea:9f:0b:cc:93:6a: 06:ff:58:25:0a:5a:a4:c5:f5:98:fc:09:f4:78:15: 95:c1:ca:92:ed:10:4a:5a:da:66:35:46:ce:3a:9b: cb:32:5b:13:79:c3:32:dd:10:ff:9e:a0:87:a6:fb: 3b:a7:3d:bd:d9:9f:94:09:9a:e9:30:35:a3:2c:76: 71:af:1d:61:01:ce:b9:4a:71:d5:94:b8:0b:92:06: ca:d9:09:3f:cf:73:80:e4:49:83:a1:64:1b:b1:bb: c2:eb:50:f6:14:47:a0:d6:fb:d8:47:c4:89:6b:03: a5:0e:c0:dd:03:db:87:ed:aa:4d:5b:64:30:ca:17: f7:ba:8f:28:92:55:8a:5f:16:43:84:6a:29:a9:08: bb:9d:33:6a:f7:07:e2:19:38:8e:00:d3:5c:f1:db: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B8:C0:DA:C9:E2:EE:B4:D8:6B:68:77:28:99:87:9D:8D:18:49:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04249388-f1ce-3c29-a170-b824cd12866f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1009:b020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:35:e9:92:f2:4f:14:66:a5:3f:39:38:25:58:35:82:bb:77: ff:ad:2e:a0:c6:42:23:b5:e6:77:79:a5:36:33:59:d6:90:99: ad:aa:b8:28:c0:35:6e:89:e2:74:09:0e:ff:00:21:83:02:eb: 66:60:86:ac:9e:30:b8:ed:5c:f8:1a:85:0d:8b:73:5b:4f:00: 19:12:bb:9c:86:7f:66:59:8b:a5:5c:01:c3:cc:b8:df:c7:c1: b4:05:b3:68:07:2f:ef:1c:94:b5:6f:e4:23:c9:43:5f:03:d0: fd:c3:c7:2e:60:3c:05:ff:5e:22:eb:a2:e8:7b:4e:d6:a8:52: f9:a1:d7:90:2f:28:9b:4b:a5:b4:ec:40:fc:f7:eb:28:9b:e7: a6:17:52:43:d4:0d:23:b6:6d:27:bf:bf:a6:15:c4:84:f1:f3: 97:b5:2e:9a:50:fb:5f:01:71:55:11:31:e3:9e:f6:11:35:7a: 63:da:db:c5:2d:6b:44:a9:48:8c:26:f0:74:0c:b6:bc:f8:bd: d0:b3:f6:9c:aa:90:d1:68:c1:b7:bf:bd:1b:dc:cc:c3:29:82: b6:75:d1:ca:84:44:93:7c:b8:16:2e:f2:34:91:37:49:07:d0: e9:e6:65:6e:ad:20:d0:c6:cd:a4:9a:8e:10:ec:48:b8:1b:5c: 26:de:18:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOhLg1m6JUkjECQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTE2NzkxZjItZjgyYi00MzQzLWI3MjYtOTdiODIyZjFjNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFf+f0HQir5QmxJeNjf/04KPhUgCOZXnMhVU qmdUGwfI21/qcOpwkhr54CFM2AugeWBvcJbwIhI4fbtTJb4KkE227+kEMzODhy2Q HxGZp3/gh40hcEiCLwdxW0ul/ERjaGjqnwvMk2oG/1glClqkxfWY/An0eBWVwcqS 7RBKWtpmNUbOOpvLMlsTecMy3RD/nqCHpvs7pz292Z+UCZrpMDWjLHZxrx1hAc65 SnHVlLgLkgbK2Qk/z3OA5EmDoWQbsbvC61D2FEeg1vvYR8SJawOlDsDdA9uH7apN W2Qwyhf3uo8oklWKXxZDhGopqQi7nTNq9wfiGTiOANNc8dvxlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAu4wNrJ4u602GtodyiZh52NGEn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDQyNDkzODgtZjFjZS0z YzI5LWExNzAtYjgyNGNkMTI4NjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCbAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAU16ZLyTxRmpT85OCVYNYK7d/+tLqDGQiO15nd5pTYzWdaQma2q uCjANW6J4nQJDv8AIYMC62ZghqyeMLjtXPgahQ2Lc1tPABkSu5yGf2ZZi6VcAcPM uN/HwbQFs2gHL+8clLVv5CPJQ18D0P3Dxy5gPAX/XiLrouh7TtaoUvmh15AvKJtL pbTsQPz36yib56YXUkPUDSO2bSe/v6YVxITx85e1LppQ+18BcVURMeOe9hE1emPa 28Uta0SpSIwm8HQMtrz4vdCz9pyqkNFowbe/vRvczMMpgrZ10cqERJN8uBYu8jSR N0kH0OnmZW6tINDGzaSajhDsSLgbXCbeGK4= -----END CERTIFICATE-----Generated at Sun May 11 01:17:59 2025 by rpki-client