$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e56e81b1-2a66-3f46-9c26-58d7e8427b73.roa File: e56e81b1-2a66-3f46-9c26-58d7e8427b73.roa (raw, json) Hash identifier: RQ03cGENmuFBcyBTc+9hU4rRpHACYVNjNXRdYQBi+yg= Subject key identifier: F2:6F:7A:B2:FA:87:99:23:DE:A2:88:07:69:D2:64:F3:A2:DE:A2:A4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858499D10973165D580054AD9C100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e56e81b1-2a66-3f46-9c26-58d7e8427b73.roa Signing time: Tue 22 Apr 2025 19:09:10 +0000 ROA not before: Tue 22 Apr 2025 19:09:10 +0000 ROA not after: Mon 21 Jul 2025 19:09:10 +0000 asID: 6167 IP address blocks: 2600:1012:a128::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:10:97:31:65:d5:80:05:4a:d9:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 22 19:09:10 2025 GMT Not After : Jul 21 19:09:10 2025 GMT Subject: CN=08b2ad04-58f2-4f24-8a7d-0335305c7763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:61:49:83:49:d0:05:0f:76:d9:0d:b7:b6:48: 19:e9:0c:0c:f3:f6:04:7e:e3:93:d7:a3:ad:41:f0: b4:cd:fa:8d:bb:87:71:5d:c7:2c:6b:eb:45:c0:f8: 9a:00:c7:16:8c:94:8d:dc:b5:ad:2c:c2:80:b7:16: 87:e6:76:9b:f9:11:e0:92:ac:1e:25:b3:69:92:ee: 6d:44:94:49:4a:ab:eb:9d:80:c3:e0:d9:50:ef:10: 56:e9:2b:84:c5:94:53:1e:97:b9:e9:05:7c:57:48: 33:da:da:43:c4:47:31:48:75:7c:79:c0:a2:51:eb: 8b:a6:9b:00:64:70:3d:41:eb:51:1b:e2:41:2d:93: e2:5d:2e:cc:70:09:d8:58:61:29:2c:89:91:6c:6e: 60:39:af:0f:3e:0d:ef:f2:c8:54:11:8e:dc:8a:f4: 12:3e:93:57:47:fd:43:56:7b:86:e6:59:47:70:58: 2f:07:98:fa:9c:b1:2d:9f:e9:80:d1:25:d9:36:8c: 3d:32:fa:88:cc:8a:58:c0:b1:e6:55:6f:78:41:e1: 36:98:06:38:c7:6e:18:95:a6:3a:61:c9:14:fb:5d: e3:b0:77:b5:d7:99:a9:4c:1c:0b:14:be:d3:77:52: 0f:67:1e:30:c9:f3:e4:cb:29:62:3b:6f:65:42:d5: 5b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6F:7A:B2:FA:87:99:23:DE:A2:88:07:69:D2:64:F3:A2:DE:A2:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e56e81b1-2a66-3f46-9c26-58d7e8427b73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1012:a128::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ab:00:42:47:8d:ee:13:57:c6:9e:68:d3:bd:b9:c3:8f:54: d1:56:b2:b8:17:aa:02:56:d5:fe:b1:54:43:45:e3:05:55:ad: d5:a6:7f:ad:ff:83:45:55:55:4e:5c:80:72:04:2f:3d:17:3c: 9b:4f:3e:86:ee:ed:69:e5:e7:fe:d0:51:fd:38:ea:05:a7:b6: a9:32:2b:af:8e:8a:59:7d:de:83:b7:fa:61:11:dc:7e:0c:8d: d5:e8:dd:48:4d:f6:ed:08:fe:90:41:7c:ff:cc:b8:9d:23:78: d2:a2:ee:63:4c:5e:ba:67:92:73:b8:6e:ef:38:da:c6:bb:1f: f9:6d:cb:db:6a:9a:f1:7a:55:40:b7:9d:b9:d8:d9:7b:ef:cf: 81:66:cb:3f:8d:3b:fe:7a:6d:c9:79:1a:34:da:27:fa:91:43: c9:17:76:38:b5:a3:f2:77:4b:14:01:9f:4a:3b:7e:a6:fc:e3: 12:b9:a5:fb:04:92:09:e3:b2:78:59:a1:7f:d6:52:dc:25:15: 6b:c3:00:8c:f8:88:5c:d8:9f:a9:b3:9b:ef:96:67:46:5c:fc: 75:15:2c:b2:9d:7d:9d:b5:43:93:4c:2a:58:43:95:a2:10:09: d6:4c:eb:6b:ac:69:7d:99:89:30:0e:5f:82:6d:12:86:ec:dc: 48:f5:d1:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdEJcxZdWABUrZwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQyMjE5MDkxMFoXDTI1MDcyMTE5MDkxMFowLzEtMCsGA1UEAxMk MDhiMmFkMDQtNThmMi00ZjI0LThhN2QtMDMzNTMwNWM3NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimFJg0nQBQ922Q23tkgZ6QwM8/YEfuOT16Ot QfC0zfqNu4dxXccsa+tFwPiaAMcWjJSN3LWtLMKAtxaH5nab+RHgkqweJbNpku5t RJRJSqvrnYDD4NlQ7xBW6SuExZRTHpe56QV8V0gz2tpDxEcxSHV8ecCiUeuLppsA ZHA9QetRG+JBLZPiXS7McAnYWGEpLImRbG5gOa8PPg3v8shUEY7civQSPpNXR/1D VnuG5llHcFgvB5j6nLEtn+mA0SXZNow9MvqIzIpYwLHmVW94QeE2mAY4x24YlaY6 YckU+13jsHe115mpTBwLFL7Td1IPZx4wyfPkyyliO29lQtVb3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPJverL6h5kj3qKIB2nSZPOi3qKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTU2ZTgxYjEtMmE2Ni0z ZjQ2LTljMjYtNThkN2U4NDI3YjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQEqEo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEmrAEJHje4TV8aeaNO9ucOPVNFWsrgXqgJW1f6xVENF4wVVrdWm f63/g0VVVU5cgHIELz0XPJtPPobu7Wnl5/7QUf046gWntqkyK6+Oill93oO3+mER 3H4MjdXo3UhN9u0I/pBBfP/MuJ0jeNKi7mNMXrpnknO4bu842sa7H/lty9tqmvF6 VUC3nbnY2Xvvz4Fmyz+NO/56bcl5GjTaJ/qRQ8kXdji1o/J3SxQBn0o7fqb84xK5 pfsEkgnjsnhZoX/WUtwlFWvDAIz4iFzYn6mzm++WZ0Zc/HUVLLKdfZ21Q5NMKlhD laIQCdZM62usaX2ZiTAOX4JtEobs3Ej10XY= -----END CERTIFICATE-----Generated at Sun May 11 01:05:23 2025 by rpki-client