$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/308101b7-4f7a-334d-a356-35db7e3db0fe.roa File: 308101b7-4f7a-334d-a356-35db7e3db0fe.roa (raw, json) Hash identifier: wgzHtyAzLIVnC4kh8wSiW5xSq8+wvfshGftFd33Ywys= Subject key identifier: B1:EE:99:BD:CF:37:60:40:29:24:6F:CB:12:8E:23:D1:50:A6:CD:B1 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642D93602EECB207488080 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/308101b7-4f7a-334d-a356-35db7e3db0fe.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 2605:2980::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2d:93:60:2e:ec:b2:07:48:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=19e32a6c-f342-4393-bbfe-4d2d218cae62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4c:71:53:5f:19:60:46:b3:fd:4b:09:ad:60: 9f:7e:0f:42:17:81:2e:80:58:9f:74:71:ab:7d:f8: 0e:d0:b4:b7:a7:b6:d4:fc:90:2c:39:c5:0c:de:94: aa:aa:d3:f7:55:ec:b3:06:6c:7c:44:d8:28:14:85: ac:6b:af:88:fd:d6:04:81:e0:ed:fd:6e:00:ee:a1: 21:b2:e0:5d:2b:5c:0b:38:13:e6:64:ef:06:4d:6b: 0d:6d:ef:79:02:d6:48:e8:55:82:88:4b:4f:f4:81: f0:23:bd:3b:11:8e:b0:88:7f:19:af:13:78:0e:17: 1d:9b:0a:d1:00:d1:9a:eb:05:97:d0:b4:32:10:78: 85:b8:11:5d:01:c8:42:99:25:ec:a7:94:a1:43:48: 4b:c1:c9:c7:5e:80:0a:9c:58:44:6c:70:30:3c:bf: 8f:1b:9c:f5:6d:a0:02:37:dc:18:f1:89:d2:b1:6e: 0f:3a:d4:ee:c6:1e:b7:00:64:34:50:07:29:97:78: 48:97:c8:26:52:22:b4:29:41:59:64:31:10:99:84: 84:6b:16:c5:9b:02:ea:88:e8:b9:c1:99:97:c5:b6: 1c:e5:2a:cd:dc:40:bc:6b:1c:d0:c4:09:e6:05:e7: d4:f0:b5:a7:0f:03:f0:d7:d9:51:7c:ac:32:f8:b7: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EE:99:BD:CF:37:60:40:29:24:6F:CB:12:8E:23:D1:50:A6:CD:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/308101b7-4f7a-334d-a356-35db7e3db0fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2605:2980::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5d:57:66:a4:45:92:24:16:9e:6c:5d:c4:f2:db:10:2a:5d: 62:31:06:b4:4f:61:bd:ca:2a:8a:08:92:c4:91:52:1b:ac:ea: 65:cf:b8:17:a8:28:74:a1:fa:4e:71:23:85:ff:7b:37:51:69: 95:23:f8:8c:d3:e1:fa:23:a0:96:56:af:34:68:f0:87:b9:eb: 17:43:f0:83:b5:0a:0f:0d:f3:26:05:b2:05:32:ba:86:b0:28: 0a:c0:9a:77:46:3f:5a:1f:e3:52:ab:c2:63:a1:68:10:bf:97: e1:9c:87:ad:40:40:39:92:a3:7b:52:a8:f9:00:1e:b1:dd:ef: 23:b4:bb:fb:14:12:24:b4:66:a6:1b:a9:e0:42:40:6f:7a:77: e6:95:8b:f0:84:03:09:19:7b:e6:14:3b:84:59:3e:71:41:ca: 4e:c4:cc:a1:a0:84:e6:e0:16:7a:3a:34:99:6e:99:7d:51:51: ab:ce:a4:0d:a9:8e:d0:04:ca:e2:33:e8:a7:a9:01:a3:5f:7d: 2e:b9:3d:92:1b:78:ac:b5:67:8b:e1:a9:db:b8:a4:08:71:82: 28:13:b8:c5:10:8e:6f:82:41:08:79:36:3d:01:27:1d:41:ba: 3e:2b:b3:f4:4c:2c:3f:a4:de:ee:20:15:8a:80:53:de:66:de: 21:28:a3:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZC2TYC7ssgdIgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MTllMzJhNmMtZjM0Mi00MzkzLWJiZmUtNGQyZDIxOGNhZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnExxU18ZYEaz/UsJrWCffg9CF4EugFifdHGr ffgO0LS3p7bU/JAsOcUM3pSqqtP3VeyzBmx8RNgoFIWsa6+I/dYEgeDt/W4A7qEh suBdK1wLOBPmZO8GTWsNbe95AtZI6FWCiEtP9IHwI707EY6wiH8ZrxN4DhcdmwrR ANGa6wWX0LQyEHiFuBFdAchCmSXsp5ShQ0hLwcnHXoAKnFhEbHAwPL+PG5z1baAC N9wY8YnSsW4POtTuxh63AGQ0UAcpl3hIl8gmUiK0KUFZZDEQmYSEaxbFmwLqiOi5 wZmXxbYc5SrN3EC8axzQxAnmBefU8LWnDwPw19lRfKwy+LcHcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLHumb3PN2BAKSRvyxKOI9FQps2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMzA4MTAxYjctNGY3YS0z MzRkLWEzNTYtMzVkYjdlM2RiMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUpgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzXVdmpEWSJBaebF3E8tsQKl1iMQa0T2G9yiqKCJLEkVIbrOplz7gX qCh0ofpOcSOF/3s3UWmVI/iM0+H6I6CWVq80aPCHuesXQ/CDtQoPDfMmBbIFMrqG sCgKwJp3Rj9aH+NSq8JjoWgQv5fhnIetQEA5kqN7Uqj5AB6x3e8jtLv7FBIktGam G6ngQkBvenfmlYvwhAMJGXvmFDuEWT5xQcpOxMyhoITm4BZ6OjSZbpl9UVGrzqQN qY7QBMriM+inqQGjX30uuT2SG3istWeL4anbuKQIcYIoE7jFEI5vgkEIeTY9AScd Qbo+K7P0TCw/pN7uIBWKgFPeZt4hKKPY -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:13 2025 by rpki-client