$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa File: 1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa (raw, json) Hash identifier: C5E6tIZkmtnEiQTgey2pzl0VVdtUj5voRtiFzFihVsQ= Subject key identifier: 80:F9:A5:85:32:C2:98:9D:2C:37:78:48:29:D4:98:E4:58:0D:9E:52 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6430F5AB3199AE395DDC80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 2605:1f80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:30:f5:ab:31:99:ae:39:5d:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=33c3e666-d059-4b43-bf1a-c0ee95673290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:5b:20:d8:3d:d5:26:1e:25:11:0a:cc:9c: 83:0a:54:f2:d2:17:b3:76:ff:52:2c:2a:d5:1f:29: fb:25:ee:27:75:94:65:f6:59:5b:2d:45:39:d3:43: 41:36:d6:18:d2:9c:26:2c:70:31:2c:b2:cd:1b:de: a7:dc:8d:f3:a9:56:00:38:f7:5f:c9:cc:53:1f:1e: 83:6f:24:ba:27:fe:99:a9:ab:aa:e4:c3:db:ad:d4: 31:23:11:01:22:2c:a0:d8:ee:f8:b1:f0:f9:b7:e4: 0e:08:9b:70:6f:5d:48:ad:4a:ed:56:36:6d:a8:4a: 7b:1b:1e:9a:fe:11:67:15:66:8b:64:82:01:1e:13: fd:bc:15:5b:91:2c:82:bf:63:48:43:c0:f3:6d:54: 45:d7:b2:46:e6:ec:7d:3d:0e:d7:7f:4d:7e:cc:08: e3:44:7f:8a:65:84:00:b8:ae:42:1a:68:db:3b:97: 57:73:74:d6:c7:89:bd:aa:dc:15:73:d6:db:74:58: 25:99:6d:b5:fe:b2:4a:43:e9:51:0d:fe:5c:66:26: 36:37:0e:01:d1:a3:ee:8f:f9:cb:cd:90:09:9f:66: a8:22:4c:b9:e5:6b:0e:c5:dd:ce:1d:9c:5a:95:df: 4e:ab:c0:77:69:15:78:80:93:8a:a9:00:ae:c6:52: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F9:A5:85:32:C2:98:9D:2C:37:78:48:29:D4:98:E4:58:0D:9E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1e07a962-3491-3ddb-baa0-14d0da6e3b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2605:1f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:89:5d:64:66:9f:99:1e:6d:8a:95:05:a4:5e:c1:8f:a0:89: 2f:e6:16:00:4e:ba:6d:19:cc:83:33:ba:5d:f4:da:91:97:7e: ea:74:72:6a:0c:86:ec:bb:2f:ac:ee:de:db:b1:02:90:69:8c: cc:de:69:d2:8c:7c:d0:30:7f:a6:19:e1:5b:78:85:0e:77:99: a6:ec:a5:35:56:84:38:00:4d:a9:29:71:7d:42:e8:31:2c:fa: 4e:d9:f5:a1:36:08:0f:58:a8:0b:54:ac:4e:35:67:f5:a4:a3: a4:22:de:e2:79:68:20:78:9e:42:df:49:77:78:20:ee:5f:a4: 74:fb:9d:ad:fc:fd:0f:8f:7a:23:4b:a7:f6:7d:4b:54:59:56: 66:f4:62:13:83:5b:55:0d:7a:9a:ea:09:61:43:61:1c:7a:79: ab:ea:51:86:04:61:b8:48:71:0b:24:77:8e:e4:7c:26:99:99: ee:40:b5:b0:0a:f0:50:4e:11:33:8c:40:a3:3c:ca:8b:4e:99: f5:d0:ce:99:c6:3c:06:87:96:e6:e9:b9:1f:89:ab:d5:9e:5b: 77:41:79:76:b6:d4:72:31:70:c6:01:c9:38:96:64:a6:cb:08: 28:11:84:40:37:47:5e:64:2e:c0:6e:44:92:72:c8:c8:16:b6: 9b:09:33:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZDD1qzGZrjld3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MzNjM2U2NjYtZDA1OS00YjQzLWJmMWEtYzBlZTk1NjczMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiRbINg91SYeJREKzJyDClTy0hezdv9SLCrV Hyn7Je4ndZRl9llbLUU500NBNtYY0pwmLHAxLLLNG96n3I3zqVYAOPdfycxTHx6D byS6J/6Zqauq5MPbrdQxIxEBIiyg2O74sfD5t+QOCJtwb11IrUrtVjZtqEp7Gx6a /hFnFWaLZIIBHhP9vBVbkSyCv2NIQ8DzbVRF17JG5ux9PQ7Xf01+zAjjRH+KZYQA uK5CGmjbO5dXc3TWx4m9qtwVc9bbdFglmW21/rJKQ+lRDf5cZiY2Nw4B0aPuj/nL zZAJn2aoIky55WsOxd3OHZxald9Oq8B3aRV4gJOKqQCuxlL5WQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFID5pYUywpidLDd4SCnUmORYDZ5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMWUwN2E5NjItMzQ5MS0z ZGRiLWJhYTAtMTRkMGRhNmUzYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUfgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRiV1kZp+ZHm2KlQWkXsGPoIkv5hYATrptGcyDM7pd9NqRl37qdHJq DIbsuy+s7t7bsQKQaYzM3mnSjHzQMH+mGeFbeIUOd5mm7KU1VoQ4AE2pKXF9Qugx LPpO2fWhNggPWKgLVKxONWf1pKOkIt7ieWggeJ5C30l3eCDuX6R0+52t/P0Pj3oj S6f2fUtUWVZm9GITg1tVDXqa6glhQ2Ecenmr6lGGBGG4SHELJHeO5HwmmZnuQLWw CvBQThEzjECjPMqLTpn10M6ZxjwGh5bm6bkfiavVnlt3QXl2ttRyMXDGAck4lmSm ywgoEYRAN0deZC7AbkSScsjIFrabCTPQ -----END CERTIFICATE-----Generated at Sun Apr 13 03:02:40 2025 by rpki-client