$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6abb6798-8321-3fe3-a56c-c6c7cf15e968.roa File: 6abb6798-8321-3fe3-a56c-c6c7cf15e968.roa (raw, json) Hash identifier: KK0QVWxO1xEw6/cXmCO7NeMtkID4XNHcXP7C0tshNl0= Subject key identifier: 04:AA:FA:16:5B:E4:B3:2E:97:D9:F9:63:DB:2D:44:27:3C:51:2B:60 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64247D415962CCEF285C00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6abb6798-8321-3fe3-a56c-c6c7cf15e968.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 2605:9080::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:24:7d:41:59:62:cc:ef:28:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=16ec4b22-19f5-402c-a4b7-0d8ff6e5c9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fd:13:ff:11:81:ad:0a:e1:90:ec:bb:ae:82: c5:b3:f0:0d:4c:92:3e:ef:c0:d8:44:5e:e1:f9:16: 4a:f4:ac:27:b8:08:04:d3:0b:58:5d:b1:fa:0a:d9: cd:d4:55:66:2e:0c:ab:9a:f3:70:44:5f:e8:05:65: 8e:9d:6b:8a:2a:49:e9:f7:39:38:1d:fd:77:d4:1d: e7:5d:54:e9:10:99:ab:a3:eb:d4:28:4d:9a:4b:27: af:09:b8:77:88:aa:f2:3c:09:2e:9b:f4:d6:87:c1: 0d:9a:ff:9c:7b:41:72:1f:97:a7:b9:d5:4d:a4:98: df:8c:41:e7:a6:1b:69:1f:76:5d:f0:3d:7c:8e:75: 20:c6:e2:49:94:58:6b:3b:d1:fe:d0:f6:3e:6c:5b: b2:25:5f:9f:0b:ad:fe:ea:3c:60:b4:8e:5e:96:76: 0b:73:ea:19:79:51:f3:25:cd:49:aa:54:db:da:ec: e5:cf:18:52:b1:3d:fd:18:ef:1f:19:88:ba:f5:d9: 38:2d:fa:04:3d:68:02:5c:eb:fa:55:ff:22:45:fe: 8e:f9:33:3d:ed:7d:4b:87:17:6a:8d:6a:75:42:04: 56:07:2d:2a:a1:99:39:7a:f9:58:aa:27:ba:64:af: c5:6d:5f:c8:ef:3a:6b:5c:37:22:d2:6d:73:0f:65: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AA:FA:16:5B:E4:B3:2E:97:D9:F9:63:DB:2D:44:27:3C:51:2B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6abb6798-8321-3fe3-a56c-c6c7cf15e968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2605:9080::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6d:58:9a:6d:0d:b1:06:30:58:eb:94:f3:d2:b6:09:c3:5d: b1:f4:8a:60:51:64:f2:b3:0f:06:8d:76:01:c8:e3:e3:02:97: 2e:2c:75:57:17:ed:9f:99:8c:dd:b6:3f:92:77:0f:b1:df:45: 7b:62:4f:85:39:8e:78:f2:ff:f0:b2:ad:42:8e:73:8d:7a:ac: 7c:c0:2d:e0:f3:6e:aa:f1:94:ac:4a:63:28:8e:67:26:33:f3: 5e:19:19:99:67:22:8e:f5:b9:83:63:3e:f1:f9:e0:33:6b:55: dd:79:89:12:69:5c:f7:05:37:2d:e4:c0:61:12:e4:77:e6:ca: ef:ef:76:87:45:b0:ed:e1:19:17:01:9b:ec:2a:84:63:5b:70: 74:75:aa:c8:1e:89:2e:1d:b4:b4:17:b8:7c:17:6e:bc:2e:e8: 3e:bd:f4:7e:ac:1f:30:22:61:58:4f:8e:28:c1:04:56:b7:89: 19:02:5b:fb:bb:81:3b:21:80:4b:9c:f1:45:f8:0e:23:a2:37: be:5e:35:cf:25:b6:fd:d6:10:7a:f7:63:07:30:97:0a:3b:4b: 87:bd:1b:26:85:62:76:06:74:bd:17:da:f1:ac:ac:0b:85:62: eb:01:22:8f:eb:f0:38:bb:91:2c:8a:d3:73:1f:e7:d7:7e:d3: dc:1d:c3:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZCR9QVlizO8oXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MTZlYzRiMjItMTlmNS00MDJjLWE0YjctMGQ4ZmY2ZTVjOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf0T/xGBrQrhkOy7roLFs/ANTJI+78DYRF7h +RZK9KwnuAgE0wtYXbH6CtnN1FVmLgyrmvNwRF/oBWWOnWuKKknp9zk4Hf131B3n XVTpEJmro+vUKE2aSyevCbh3iKryPAkum/TWh8ENmv+ce0FyH5enudVNpJjfjEHn phtpH3Zd8D18jnUgxuJJlFhrO9H+0PY+bFuyJV+fC63+6jxgtI5elnYLc+oZeVHz Jc1JqlTb2uzlzxhSsT39GO8fGYi69dk4LfoEPWgCXOv6Vf8iRf6O+TM97X1Lhxdq jWp1QgRWBy0qoZk5evlYqie6ZK/FbV/I7zprXDci0m1zD2XY8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFASq+hZb5LMul9n5Y9stRCc8UStgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNmFiYjY3OTgtODMyMS0z ZmUzLWE1NmMtYzZjN2NmMTVlOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWQgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArbViabQ2xBjBY65Tz0rYJw12x9IpgUWTysw8GjXYByOPjApcuLHVX F+2fmYzdtj+Sdw+x30V7Yk+FOY548v/wsq1CjnONeqx8wC3g826q8ZSsSmMojmcm M/NeGRmZZyKO9bmDYz7x+eAza1XdeYkSaVz3BTct5MBhEuR35srv73aHRbDt4RkX AZvsKoRjW3B0darIHokuHbS0F7h8F268Lug+vfR+rB8wImFYT44owQRWt4kZAlv7 u4E7IYBLnPFF+A4joje+XjXPJbb91hB692MHMJcKO0uHvRsmhWJ2BnS9F9rxrKwL hWLrASKP6/A4u5EsitNzH+fXftPcHcNo -----END CERTIFICATE-----Generated at Sun Apr 13 02:43:41 2025 by rpki-client