$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa File: 2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa (raw, json) Hash identifier: G5J8MXrQlS+cLSESJdU30KqS/V1VG0vAcjyqvUefF8o= Subject key identifier: A5:5A:91:CA:87:EC:11:B2:78:E8:BD:6B:80:0B:25:02:06:E5:A1:B8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849833A14764FCD2CBA5B2B7300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 2600:100a:a011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:14:76:4f:cd:2c:ba:5b:2b:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=fbeb52cb-316d-4e33-95f9-a256baaf24e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:7a:d4:53:1e:6c:a6:43:3f:c2:07:9a:d5: 88:04:dc:0a:93:01:07:57:77:05:df:f5:fc:2e:04: 14:31:17:c1:94:5a:ab:66:12:f8:9f:12:e0:af:db: 31:5c:cd:74:bc:ed:40:82:ac:a9:67:73:0a:d4:91: bb:aa:6a:37:76:4e:32:35:fc:5c:98:10:31:31:15: ae:3b:36:f5:0b:8b:79:c6:84:bc:ab:64:05:78:32: 1a:b1:74:5f:84:6b:2d:82:88:c1:5f:18:83:0a:7f: 3c:bf:ad:1d:bd:eb:9a:b4:36:1f:e5:5c:10:59:ac: eb:9f:dc:73:90:71:4b:36:8e:37:48:6e:f5:db:58: a7:a1:72:b0:05:73:f5:96:eb:46:7a:c6:f6:e8:27: eb:43:3c:68:61:79:90:72:b9:24:78:ad:d3:7b:c7: 52:a0:dd:20:83:2e:3e:bf:54:d5:da:24:48:1b:7e: 0a:69:42:db:cd:6b:64:65:a2:c5:ae:a8:10:63:aa: 4d:08:67:76:92:f6:17:cb:6a:cd:cb:cb:e0:1c:fc: 81:52:f9:62:99:e6:da:8c:36:c8:04:ea:0f:5a:de: 50:84:5f:51:a7:5b:f5:31:ea:90:cd:31:d8:dc:10: 07:f8:89:eb:0e:be:71:99:8c:53:5d:b3:4d:48:08: 37:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5A:91:CA:87:EC:11:B2:78:E8:BD:6B:80:0B:25:02:06:E5:A1:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2121222b-d6df-3d5d-a7ef-0f7d4368a14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100a:a011::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e6:37:72:bc:1f:8b:26:fa:cd:87:72:ea:f1:6a:ee:85:08: 18:ee:27:36:12:2c:9b:f3:53:66:a1:ac:0a:3e:7a:c4:5f:e2: ae:95:e5:6a:12:7a:3b:e6:8b:8a:fc:fe:ca:ad:69:c8:a3:61: a2:41:59:4a:f4:bf:38:29:50:12:23:e0:b7:70:67:e5:ef:04: b5:10:93:0f:e8:8a:a5:55:f5:79:f1:8d:89:4f:e5:9c:95:17: 8a:0e:66:88:5f:f2:b0:01:81:a2:43:70:75:45:06:85:dd:bb: e5:d7:47:5d:35:fe:52:66:f5:1f:82:24:71:94:72:c5:12:ab: 7a:27:dd:2c:86:ce:af:a1:0d:1e:41:96:f1:01:cd:4c:8a:77: ab:04:34:23:8a:76:26:99:ac:1c:8a:52:86:12:b0:19:bd:5c: af:33:32:64:83:ed:33:31:b2:09:ca:bf:4c:0c:a6:e4:94:69: 68:3d:bf:f1:88:d6:d7:73:c2:dd:fc:8a:52:b5:6d:6d:2f:13: e1:99:69:ee:1d:5d:21:ce:7a:13:27:71:fa:0f:20:ee:4d:de: 1e:28:f4:33:c0:f2:6b:51:21:e5:16:82:f6:cc:9d:aa:be:a4: c5:0f:02:89:16:32:de:69:5d:0a:a3:cf:fb:4f:8e:e5:2d:8f: 0b:38:c4:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOhR2T80sulsrcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZmJlYjUyY2ItMzE2ZC00ZTMzLTk1ZjktYTI1NmJhYWYyNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVx61FMebKZDP8IHmtWIBNwKkwEHV3cF3/X8 LgQUMRfBlFqrZhL4nxLgr9sxXM10vO1AgqypZ3MK1JG7qmo3dk4yNfxcmBAxMRWu Ozb1C4t5xoS8q2QFeDIasXRfhGstgojBXxiDCn88v60dveuatDYf5VwQWazrn9xz kHFLNo43SG7121inoXKwBXP1lutGesb26CfrQzxoYXmQcrkkeK3Te8dSoN0ggy4+ v1TV2iRIG34KaULbzWtkZaLFrqgQY6pNCGd2kvYXy2rNy8vgHPyBUvlimebajDbI BOoPWt5QhF9Rp1v1MeqQzTHY3BAH+InrDr5xmYxTXbNNSAg3LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKVakcqH7BGyeOi9a4ALJQIG5aG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjEyMTIyMmItZDZkZi0z ZDVkLWE3ZWYtMGY3ZDQzNjhhMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCqAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH3mN3K8H4sm+s2Hcurxau6FCBjuJzYSLJvzU2ahrAo+esRf4q6V 5WoSejvmi4r8/sqtacijYaJBWUr0vzgpUBIj4LdwZ+XvBLUQkw/oiqVV9XnxjYlP 5ZyVF4oOZohf8rABgaJDcHVFBoXdu+XXR101/lJm9R+CJHGUcsUSq3on3SyGzq+h DR5BlvEBzUyKd6sENCOKdiaZrByKUoYSsBm9XK8zMmSD7TMxsgnKv0wMpuSUaWg9 v/GI1tdzwt38ilK1bW0vE+GZae4dXSHOehMncfoPIO5N3h4o9DPA8mtRIeUWgvbM naq+pMUPAokWMt5pXQqjz/tPjuUtjws4xFE= -----END CERTIFICATE-----Generated at Sun May 11 04:14:44 2025 by rpki-client