$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/28138d5b-d4bd-3a5d-b1d4-489db95803ab.roa File: 28138d5b-d4bd-3a5d-b1d4-489db95803ab.roa (raw, json) Hash identifier: uX6rnD1hpkFvWOrkyl9ts99muGKzsFaovehYxYF6LXo= Subject key identifier: BF:EC:DA:A0:34:68:17:63:A1:27:5A:15:07:52:41:3B:99:61:61:BA Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F43285849002158E00F656BA861BE6D40 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/28138d5b-d4bd-3a5d-b1d4-489db95803ab.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 11260 IP address blocks: 2610:170::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:58:e0:0f:65:6b:a8:61:be:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=5bd4f0e8-6ddc-47ab-be2f-5ec9c679a7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4e:68:75:a5:f1:69:ae:7d:a0:a1:f6:77:41: 9d:9c:c8:c8:b0:b8:fd:46:d4:bd:7f:15:f4:7c:97: ae:b9:7d:06:4f:91:73:1d:62:70:97:6c:5f:8b:06: 6c:34:84:5e:be:51:a2:86:7c:6d:1f:73:cb:3a:78: 37:17:f5:e5:a1:86:cc:92:e1:92:ee:01:40:82:c3: 0d:46:44:8d:77:3d:f9:ee:4d:e9:31:d9:fb:86:cf: 4e:b9:bd:be:41:59:35:1a:63:bd:a5:f3:01:1d:13: a1:e9:bd:0f:20:18:e9:2c:0d:4d:e2:73:d8:79:b0: b4:16:74:f1:ff:76:f9:30:14:dd:f4:6d:3b:6f:6c: 3e:da:83:12:0c:8d:b3:1a:52:06:39:b9:59:1e:c5: b4:15:19:d5:f8:ee:38:cb:61:0c:53:7f:27:4f:f6: 17:0f:6f:1a:20:51:a8:d1:1f:0e:52:6a:e0:9f:78: a2:ad:58:b7:bb:6e:84:58:8b:f4:dd:ed:4c:92:50: a7:05:0e:01:ba:e5:74:a6:65:db:29:06:04:2e:75: 18:02:1b:d2:8b:8a:3f:8a:78:46:5d:c1:1d:21:da: c5:0e:0e:1f:bb:11:4f:aa:31:05:24:dc:20:e8:ae: 42:27:fb:34:b6:f4:39:d9:56:d9:79:7d:49:a3:97: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EC:DA:A0:34:68:17:63:A1:27:5A:15:07:52:41:3B:99:61:61:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/28138d5b-d4bd-3a5d-b1d4-489db95803ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv6: 2610:170::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:aa:a3:11:28:a8:46:59:a8:ac:07:75:d0:6f:f5:99:1a:5b: 3d:16:be:92:16:49:11:74:63:a4:5b:1f:06:12:4d:76:ce:cd: d6:47:48:2f:13:7b:a5:5c:dd:df:e8:ba:af:16:50:fa:01:0f: 4a:84:4c:b5:7c:56:81:56:ec:09:4a:c0:8c:19:e2:45:1f:c3: f0:e0:f9:0b:d8:94:aa:6f:e4:16:f3:4d:4e:6e:c8:4e:33:bc: cc:bd:8a:11:bd:54:4a:1a:9e:76:38:62:73:81:8c:98:dc:dd: d8:e9:47:0d:94:a0:f3:ee:d0:d5:ee:92:4e:d7:57:81:e1:22: 0b:e8:a2:9b:d6:dc:a8:42:dc:ef:cd:88:e4:7b:af:74:59:5f: 9c:46:73:47:bf:11:f9:d3:52:60:56:e7:eb:6b:fa:c2:0f:5c: 48:7f:f9:6d:be:79:7d:a2:b0:33:d4:18:e5:2d:0d:15:cb:7c: 7e:0d:6f:1d:c3:9b:39:86:0c:19:67:7a:a3:59:4e:b4:e2:c3: 06:53:d0:e9:81:5f:01:c9:69:9f:f6:f0:3a:ab:43:c5:b9:47: bf:1a:e6:50:0f:05:e0:4f:a6:0e:07:3c:b4:f6:ac:48:be:e0: 11:43:26:df:18:ba:f3:40:eb:ed:19:46:f0:9b:be:14:d5:52: 74:d0:80:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkAIVjgD2VrqGG+bUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NWJkNGYwZTgtNmRkYy00N2FiLWJlMmYtNWVjOWM2NzlhN2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU5odaXxaa59oKH2d0GdnMjIsLj9RtS9fxX0 fJeuuX0GT5FzHWJwl2xfiwZsNIRevlGihnxtH3PLOng3F/XloYbMkuGS7gFAgsMN RkSNdz357k3pMdn7hs9Oub2+QVk1GmO9pfMBHROh6b0PIBjpLA1N4nPYebC0FnTx /3b5MBTd9G07b2w+2oMSDI2zGlIGOblZHsW0FRnV+O44y2EMU38nT/YXD28aIFGo 0R8OUmrgn3iirVi3u26EWIv03e1MklCnBQ4BuuV0pmXbKQYELnUYAhvSi4o/inhG XcEdIdrFDg4fuxFPqjEFJNwg6K5CJ/s0tvQ52VbZeX1Jo5eQuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL/s2qA0aBdjoSdaFQdSQTuZYWG6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvMjgxMzhkNWItZDRiZC0z YTVkLWIxZDQtNDg5ZGI5NTgwM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJhABcDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKqqMRKKhGWaisB3XQb/WZGls9Fr6SFkkRdGOkWx8GEk12zs3WR0gv E3ulXN3f6LqvFlD6AQ9KhEy1fFaBVuwJSsCMGeJFH8Pw4PkL2JSqb+QW801ObshO M7zMvYoRvVRKGp52OGJzgYyY3N3Y6UcNlKDz7tDV7pJO11eB4SIL6KKb1tyoQtzv zYjke690WV+cRnNHvxH501JgVufra/rCD1xIf/ltvnl9orAz1BjlLQ0Vy3x+DW8d w5s5hgwZZ3qjWU604sMGU9DpgV8ByWmf9vA6q0PFuUe/GuZQDwXgT6YOBzy09qxI vuARQybfGLrzQOvtGUbwm74U1VJ00IDq -----END CERTIFICATE-----Generated at Sun Apr 6 11:47:27 2025 by rpki-client