$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a061107b-d693-3e1a-8d42-ac61256c21fd.roa File: a061107b-d693-3e1a-8d42-ac61256c21fd.roa (raw, json) Hash identifier: NpaXBrvYJKBYCBJ5Zo/IJtuqi8+bB8BzrslrlCfbTIk= Subject key identifier: 37:5A:4F:31:0A:D0:73:B6:9D:42:41:44:7B:F5:E7:5C:0A:35:DA:0A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849833A160322ED54B9D179E580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a061107b-d693-3e1a-8d42-ac61256c21fd.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 6167 IP address blocks: 2600:100b:a111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:3a:16:03:22:ed:54:b9:d1:79:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=16ad3720-3ddf-45e3-90d7-02fe786d90e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:b6:74:a6:be:1a:49:dd:a6:e8:a3:eb:aa: 9b:2f:ad:fc:4d:f5:da:8b:9f:45:84:f2:b0:92:cb: 08:13:e8:5f:89:2f:23:e4:24:98:ed:cd:4d:0a:fc: 1e:e7:18:9d:a6:12:92:8a:c2:d3:2e:bc:85:f0:81: 5d:e1:bf:97:1a:0d:3f:a8:cd:ff:87:df:4f:58:0a: 68:10:2f:3b:17:4e:02:9e:2e:4e:40:36:37:a5:b5: ec:5b:a7:d5:86:9d:86:41:df:2c:87:8c:16:9b:34: 70:4f:a7:4d:71:c7:95:7f:0a:9c:78:30:d0:3a:08: 6f:03:0c:01:4a:7a:a3:2f:3c:ef:84:57:35:53:80: 74:34:ef:85:46:86:fb:0e:31:a5:40:79:79:17:d9: c5:01:11:2d:10:25:13:7e:71:3d:43:ea:ae:a9:3c: 3d:db:5d:9e:ee:04:e4:1e:b2:df:10:eb:dd:9e:1f: 54:a3:ae:02:37:9a:a2:29:5c:c4:52:c3:48:b3:6b: 36:ae:a1:e6:e0:84:70:a5:41:99:c1:c6:75:ca:a2: 6d:0f:2d:0f:e7:b9:0a:d4:79:95:91:37:38:09:da: 42:cd:39:59:7e:0b:bf:91:6e:41:37:d5:82:a7:2d: 2f:fe:93:4a:76:99:05:da:1f:a6:ee:53:16:10:f5: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5A:4F:31:0A:D0:73:B6:9D:42:41:44:7B:F5:E7:5C:0A:35:DA:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a061107b-d693-3e1a-8d42-ac61256c21fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100b:a111::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:7e:a6:24:21:c4:04:a7:ab:87:57:2f:aa:eb:f8:96:ec:d5: 01:71:c7:33:e8:06:4d:55:ad:83:05:0f:d4:90:a6:ab:d0:dc: 19:de:5d:b3:9f:9f:6e:56:2f:ae:b6:82:50:93:78:12:e2:7a: 0d:a8:a5:e2:5b:fd:74:b2:55:1e:0c:a3:3c:97:cb:f6:fb:f2: ad:fc:c3:fc:82:4a:a8:51:ed:7b:c0:c7:c6:18:f9:47:8b:69: 34:4a:73:be:ba:75:55:a1:ad:87:92:15:bc:9f:2e:d2:d2:83: 54:31:ad:ae:d7:2f:9e:5a:21:84:7a:9c:ad:2f:a2:ae:93:f4: 1a:2d:c4:1b:ef:5d:34:dc:43:0c:cd:67:61:81:25:38:08:7d: 03:4c:84:ab:5a:9a:ee:f1:da:b6:27:eb:cc:03:56:20:ba:31: c7:e1:3b:63:db:1e:d0:cf:33:b5:0a:dd:d4:d8:bd:f3:3a:d8: fb:c0:c2:7c:d8:5b:b5:28:c7:ad:21:b8:aa:6e:03:0e:74:5d: ff:dc:56:09:33:5f:b7:24:d0:18:46:66:25:8b:8e:13:6b:3c: c5:28:a3:dc:a9:f5:3e:58:a4:48:a6:47:26:2b:57:b4:ab:8a: 70:80:50:82:99:24:3a:01:9b:c3:92:96:91:3c:d2:e3:6f:5a: 42:83:04:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmDOhYDIu1UudF55YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MTZhZDM3MjAtM2RkZi00NWUzLTkwZDctMDJmZTc4NmQ5MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiW2dKa+Gkndpuij66qbL638TfXai59FhPKw kssIE+hfiS8j5CSY7c1NCvwe5xidphKSisLTLryF8IFd4b+XGg0/qM3/h99PWApo EC87F04Cni5OQDY3pbXsW6fVhp2GQd8sh4wWmzRwT6dNcceVfwqceDDQOghvAwwB SnqjLzzvhFc1U4B0NO+FRob7DjGlQHl5F9nFAREtECUTfnE9Q+quqTw9212e7gTk HrLfEOvdnh9Uo64CN5qiKVzEUsNIs2s2rqHm4IRwpUGZwcZ1yqJtDy0P57kK1HmV kTc4CdpCzTlZfgu/kW5BN9WCpy0v/pNKdpkF2h+m7lMWEPUEHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDdaTzEK0HO2nUJBRHv151wKNdoKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTA2MTEwN2ItZDY5My0z ZTFhLThkNDItYWM2MTI1NmMyMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQC6ER MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKF+piQhxASnq4dXL6rr+Jbs1QFxxzPoBk1VrYMFD9SQpqvQ3Bne XbOfn25WL662glCTeBLieg2opeJb/XSyVR4MozyXy/b78q38w/yCSqhR7XvAx8YY +UeLaTRKc766dVWhrYeSFbyfLtLSg1Qxra7XL55aIYR6nK0voq6T9BotxBvvXTTc QwzNZ2GBJTgIfQNMhKtamu7x2rYn68wDViC6McfhO2PbHtDPM7UK3dTYvfM62PvA wnzYW7Uox60huKpuAw50Xf/cVgkzX7ck0BhGZiWLjhNrPMUoo9yp9T5YpEimRyYr V7SrinCAUIKZJDoBm8OSlpE80uNvWkKDBEo= -----END CERTIFICATE-----Generated at Sun May 11 17:01:51 2025 by rpki-client