$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa File: 1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa (raw, json) Hash identifier: VB/2cWbw/zPLskFotOvccouiCLoxdDNJfCOWzpXMcug= Subject key identifier: B8:A0:50:FB:75:30:25:0B:02:A7:E5:E3:4B:89:4E:33:FF:9B:38:6A Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B3365B6E5A46E5B962E00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 2605:1f80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:33:65:b6:e5:a4:6e:5b:96:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=eab8db2a-021c-4409-9a58-56ce5cfcf29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6d:e2:9a:6f:85:cc:0d:ac:b0:83:8f:8e:84: 62:07:14:6d:f1:2a:be:83:bf:40:2d:e0:fe:cd:4b: 1f:fc:0d:fc:88:67:fc:6a:24:1a:5d:15:f4:21:ad: 19:c8:8d:ea:30:4c:bc:b0:f1:be:38:54:63:a0:7e: 33:78:ba:0b:2d:10:2a:a3:6a:79:17:95:2f:61:a9: 48:13:92:3a:82:81:2a:cf:bc:63:ff:03:d4:3e:a3: fa:d4:9f:77:a9:7d:4d:66:6b:62:3e:a2:d6:c8:e9: 8e:42:72:18:f2:4c:46:6b:fb:fe:5f:c1:1f:d4:f4: e6:ad:17:6d:e4:ef:7a:21:91:fa:ee:3c:f0:dc:c0: 1c:18:83:42:5f:b4:3d:14:76:a9:7c:dd:45:13:93: d8:c0:38:32:dc:74:c8:fc:ca:25:f0:6d:b6:55:ba: 23:14:7c:ab:2e:a5:9a:33:d4:68:07:10:c7:57:43: 7b:e9:5c:7f:cc:1e:74:b1:bb:fd:df:35:61:9c:29: cc:c5:3e:52:ec:eb:d1:92:cb:41:ec:d6:f9:78:98: 93:34:15:44:dd:2d:d7:b8:8e:e3:2f:1d:11:e0:45: bd:64:2d:8d:27:8a:65:c8:e5:34:96:ab:0c:93:33: bc:e0:5d:15:c6:de:9a:81:04:1f:d0:fa:71:6e:fd: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A0:50:FB:75:30:25:0B:02:A7:E5:E3:4B:89:4E:33:FF:9B:38:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2605:1f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c5:53:f6:7d:13:1d:04:ea:b3:5d:56:bd:e1:20:26:22:d5: 11:50:04:6b:94:ac:64:e3:eb:88:b3:be:36:f3:91:6d:8a:ef: 5b:bd:0b:14:ad:2f:13:f3:ec:5f:a4:26:cf:18:4f:cd:c9:68: 20:9e:e8:35:56:60:d3:36:a2:21:18:f1:4a:16:4a:66:1d:73: 01:8e:2f:2e:98:38:10:01:dd:cd:bb:6a:1a:3e:15:95:b8:47: d4:d7:36:ee:6b:14:73:6a:c7:f1:83:e2:74:2d:f1:a2:4a:09: 45:74:f7:8d:59:72:1e:1c:1b:fd:e7:f4:98:5b:ed:8c:95:4d: 4e:5d:3a:d0:c2:c6:39:69:53:8c:d9:f8:f9:07:bb:fb:6a:de: 1c:52:27:2a:a9:44:77:bc:38:8e:e4:e3:ae:1f:96:24:6f:94: 2b:b5:ce:1f:06:42:7c:19:21:46:80:de:43:19:8d:b4:6e:05: 76:1d:cb:ba:01:5f:1f:37:b8:eb:85:97:60:82:c5:59:06:d9: e4:1d:c7:c5:70:0e:1e:e0:ae:c6:6b:11:83:5a:49:9d:47:ce: 06:5e:64:4f:60:e8:98:09:78:48:40:61:da:bd:db:5a:d8:d1: 03:34:ca:9b:95:a9:6e:79:f9:cd:a1:45:a6:2c:88:49:4e:3f: 3e:99:e7:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhsKzNltuWkbluWLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZWFiOGRiMmEtMDIxYy00NDA5LTlhNTgtNTZjZTVjZmNmMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG3imm+FzA2ssIOPjoRiBxRt8Sq+g79ALeD+ zUsf/A38iGf8aiQaXRX0Ia0ZyI3qMEy8sPG+OFRjoH4zeLoLLRAqo2p5F5UvYalI E5I6goEqz7xj/wPUPqP61J93qX1NZmtiPqLWyOmOQnIY8kxGa/v+X8Ef1PTmrRdt 5O96IZH67jzw3MAcGINCX7Q9FHapfN1FE5PYwDgy3HTI/Mol8G22VbojFHyrLqWa M9RoBxDHV0N76Vx/zB50sbv93zVhnCnMxT5S7OvRkstB7Nb5eJiTNBVE3S3XuI7j Lx0R4EW9ZC2NJ4plyOU0lqsMkzO84F0Vxt6agQQf0Ppxbv3vLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLigUPt1MCULAqfl40uJTjP/mzhqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMWUwN2E5NjItMzQ5MS0z ZGRiLWJhYTAtMTRkMGRhNmUzYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUfgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjxVP2fRMdBOqzXVa94SAmItURUARrlKxk4+uIs74285Ftiu9bvQsU rS8T8+xfpCbPGE/NyWggnug1VmDTNqIhGPFKFkpmHXMBji8umDgQAd3Nu2oaPhWV uEfU1zbuaxRzasfxg+J0LfGiSglFdPeNWXIeHBv95/SYW+2MlU1OXTrQwsY5aVOM 2fj5B7v7at4cUicqqUR3vDiO5OOuH5Ykb5Qrtc4fBkJ8GSFGgN5DGY20bgV2Hcu6 AV8fN7jrhZdggsVZBtnkHcfFcA4e4K7GaxGDWkmdR84GXmRPYOiYCXhIQGHavdta 2NEDNMqblaluefnNoUWmLIhJTj8+mefr -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:22 2025 by rpki-client