$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3ae1b40-6603-325e-be2a-78a6b7aa56e7.roa File: c3ae1b40-6603-325e-be2a-78a6b7aa56e7.roa (raw, json) Hash identifier: 2/HS4P6ak87MFm7Sq3snxz7x0TU3g/N3xYl0QqKDF/M= Subject key identifier: 3D:B7:6B:BE:C1:3C:7C:59:9A:B1:2F:A1:F1:2B:50:80:A8:85:53:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849AE7F4612FE1E74D6D25D5880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3ae1b40-6603-325e-be2a-78a6b7aa56e7.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 6167 IP address blocks: 2600:1008:a132::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:46:12:fe:1e:74:d6:d2:5d:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=f8c1e3d2-d211-4bbd-9d02-6e79cb0cd306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:a4:8f:b4:14:57:a2:2e:d8:31:72:e8:d8: 1d:e1:e1:4c:c4:8b:8e:f4:7d:d6:74:84:93:7a:59: 3d:aa:42:a2:f8:6c:b9:ba:46:0e:45:84:5c:bb:39: 29:62:d0:22:7c:37:7b:cf:c3:8f:82:4e:de:2c:e7: 72:9a:8f:ba:e4:0d:d1:8f:92:60:fd:e5:c0:1a:fa: 7d:66:dd:5a:03:51:f2:b9:74:72:9d:90:d6:12:47: c3:02:5b:c7:1b:a8:01:85:ea:00:c9:d5:1e:34:0f: ca:45:e9:52:e7:fb:5d:2f:eb:7f:7a:db:65:1e:ed: 00:ac:a1:be:fb:68:6e:6b:cc:5b:34:c9:e8:51:96: 63:b0:c2:32:50:2e:ba:c9:a2:bb:85:0a:bc:5f:5b: 84:7a:61:07:e6:7b:03:c8:f7:d6:56:80:56:5a:47: 36:31:5a:7e:c4:b5:be:f2:3b:43:e8:53:97:20:55: 6a:fa:2f:9a:c2:e2:bb:db:12:c5:4d:00:03:8d:3c: e2:6a:b6:ac:d6:eb:d2:1a:d7:dd:d6:5e:e7:c9:58: 8f:7c:e9:27:ff:38:47:1f:0c:6f:31:f6:2c:2f:2a: e4:53:e0:5a:89:86:57:27:7b:b4:32:42:e4:59:9f: 31:5f:74:cb:ec:18:ac:a9:bc:3e:be:3d:91:d6:6b: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B7:6B:BE:C1:3C:7C:59:9A:B1:2F:A1:F1:2B:50:80:A8:85:53:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3ae1b40-6603-325e-be2a-78a6b7aa56e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:a132::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:3c:a1:ab:a2:86:d1:3f:83:ee:6d:0c:d9:5f:c8:33:24:05: bf:fa:48:1e:a0:c4:a2:e6:33:ea:57:cb:ef:fe:46:b1:03:b0: c5:37:6b:c7:f1:b5:47:31:44:86:b8:1b:c9:e3:1a:25:d5:b9: e4:57:63:29:40:c8:85:04:72:c3:b3:7f:1b:3a:63:91:db:d4: c9:a9:b0:04:e3:74:d7:b7:ea:87:bc:c8:3e:43:69:4f:57:cc: 21:1b:51:5d:3b:f7:d3:a8:37:dd:ac:41:af:20:18:09:59:81: 99:68:f0:7f:ad:ce:cd:b8:23:f1:fc:bf:7c:b7:fa:51:20:a4: 4e:78:86:b3:2e:08:42:b6:50:1a:67:c4:a1:0c:6a:a7:31:ca: c7:91:31:ba:13:b9:66:4b:10:a3:20:c5:4b:f1:f4:1e:4e:b2: 78:19:9d:54:8c:03:9a:a5:86:55:75:8b:c4:91:20:6f:14:c5: 4a:2a:d7:7b:a7:0d:90:09:8b:51:17:8f:d0:3c:ac:93:60:73: 53:86:3a:bc:da:87:b3:62:5f:42:26:3f:b1:ac:bc:b4:de:e8: 5f:1e:51:63:45:41:aa:fa:bf:72:ea:0e:fe:1e:da:68:50:63: a2:9f:df:3b:70:e4:c8:42:2f:92:29:5c:3c:65:28:e2:b8:f7: 7b:c2:c2:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmuf0YS/h501tJdWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk ZjhjMWUzZDItZDIxMS00YmJkLTlkMDItNmU3OWNiMGNkMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUqkj7QUV6Iu2DFy6Ngd4eFMxIuO9H3WdIST elk9qkKi+Gy5ukYORYRcuzkpYtAifDd7z8OPgk7eLOdymo+65A3Rj5Jg/eXAGvp9 Zt1aA1HyuXRynZDWEkfDAlvHG6gBheoAydUeNA/KRelS5/tdL+t/ettlHu0ArKG+ +2hua8xbNMnoUZZjsMIyUC66yaK7hQq8X1uEemEH5nsDyPfWVoBWWkc2MVp+xLW+ 8jtD6FOXIFVq+i+awuK72xLFTQADjTziaras1uvSGtfd1l7nyViPfOkn/zhHHwxv MfYsLyrkU+BaiYZXJ3u0MkLkWZ8xX3TL7Bisqbw+vj2R1muJywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD23a77BPHxZmrEvofErUICohVN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzNhZTFiNDAtNjYwMy0z MjVlLWJlMmEtNzhhNmI3YWE1NmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCKEy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI08oauihtE/g+5tDNlfyDMkBb/6SB6gxKLmM+pXy+/+RrEDsMU3 a8fxtUcxRIa4G8njGiXVueRXYylAyIUEcsOzfxs6Y5Hb1MmpsATjdNe36oe8yD5D aU9XzCEbUV0799OoN92sQa8gGAlZgZlo8H+tzs24I/H8v3y3+lEgpE54hrMuCEK2 UBpnxKEMaqcxyseRMboTuWZLEKMgxUvx9B5OsngZnVSMA5qlhlV1i8SRIG8UxUoq 13unDZAJi1EXj9A8rJNgc1OGOrzah7NiX0ImP7GsvLTe6F8eUWNFQar6v3LqDv4e 2mhQY6Kf3ztw5MhCL5IpXDxlKOK493vCwgs= -----END CERTIFICATE-----Generated at Sat May 10 19:43:31 2025 by rpki-client