$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/88fdbc80-e281-3ab7-82c2-89072a339c23.roa File: 88fdbc80-e281-3ab7-82c2-89072a339c23.roa (raw, json) Hash identifier: NPqLCQR+aRYKWOF6+ca+stu7x9cF0Rw/8vsQfSV6H6c= Subject key identifier: 16:51:4F:91:F2:A5:A7:C6:B9:45:FA:71:30:D1:2A:C2:DC:29:A6:7D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642097C785A58B7A662B80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/88fdbc80-e281-3ab7-82c2-89072a339c23.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 2605:1f80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:20:97:c7:85:a5:8b:7a:66:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=af168793-c194-4545-a6c7-99ad79ad876f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1c:a7:6a:54:e2:88:14:1e:76:d2:cb:91:fa: cd:ae:0e:29:a2:86:b2:ac:c2:67:e0:8b:46:be:f1: ac:99:27:fd:fc:e8:0e:3d:6d:cf:e4:50:a8:92:17: 3a:af:11:c8:39:76:98:69:31:56:af:73:a8:4e:5d: 66:e8:29:d7:02:ab:95:5a:84:88:41:f5:c9:9b:af: d8:08:24:18:87:9b:90:5b:67:6d:6c:42:bc:78:f0: 1f:e2:fe:6d:71:89:fa:48:e7:28:cd:fc:b6:34:fb: a2:a4:0e:be:9f:e9:c5:81:3f:81:f1:9c:c9:df:18: ab:db:69:0a:8f:e5:f9:ae:64:82:65:1e:82:6f:c6: 87:65:c8:30:e7:fc:9f:c7:48:c8:28:91:61:d6:52: 73:8a:ab:bd:f6:f8:16:1c:7c:9a:c9:96:20:00:a6: 72:8c:0b:dc:59:dc:b8:0c:42:df:88:15:d2:a6:62: 1a:33:dc:5e:82:51:17:5f:a1:66:cb:c4:bd:82:97: 95:5d:43:22:9c:f0:01:95:a3:e8:66:9b:31:83:8a: 00:a6:aa:cf:06:38:29:3d:97:4b:8f:39:78:c7:da: a1:be:47:79:96:ff:1b:f5:3a:9a:0c:c8:a5:74:47: 21:f9:36:f2:09:81:4d:fd:1d:fc:5f:27:6a:15:49: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:51:4F:91:F2:A5:A7:C6:B9:45:FA:71:30:D1:2A:C2:DC:29:A6:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/88fdbc80-e281-3ab7-82c2-89072a339c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2605:1f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:42:3a:31:c6:d4:6e:98:5b:81:bc:9d:ba:5e:10:81:4b:24: 8c:16:85:2b:8e:96:84:81:a2:24:58:86:f2:d0:17:43:3c:f1: 98:19:7c:22:4b:91:7e:39:b8:2c:1f:12:98:f1:80:4b:db:38: de:72:d3:8f:bc:ec:f7:ee:09:51:08:d9:aa:b5:83:d7:c5:c1: 66:e5:8d:70:32:c8:e6:1c:ef:04:1b:a4:a0:68:93:33:1c:8e: 71:d4:20:22:37:f1:d8:f5:84:9c:94:52:ca:09:9e:83:9f:81: a8:ed:8d:3f:5f:a2:f1:f5:09:85:ae:56:0d:90:01:96:8f:a3: fc:9f:07:e1:f6:89:69:d2:cf:33:58:a0:58:74:7f:be:55:f1: 91:91:6c:c9:24:9c:a8:d9:31:f7:fe:fc:8f:7c:36:81:2f:b3: 84:3b:6b:50:2a:b3:7e:78:2e:e1:e8:aa:05:e0:eb:49:64:1e: fc:90:64:9d:01:53:2a:0b:3c:d1:db:8f:08:11:ec:e5:97:ea: b4:d1:99:7a:b1:f9:22:ae:c0:ab:20:dd:39:a1:cc:f3:50:7a: da:a3:83:f6:5d:30:21:a3:a2:bd:8a:68:12:2c:46:0d:09:72: 34:c0:07:f8:6f:77:09:4f:11:6b:25:12:39:e3:2a:87:20:51: 37:45:6a:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZCCXx4Wli3pmK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YWYxNjg3OTMtYzE5NC00NTQ1LWE2YzctOTlhZDc5YWQ4NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghynalTiiBQedtLLkfrNrg4pooayrMJn4ItG vvGsmSf9/OgOPW3P5FCokhc6rxHIOXaYaTFWr3OoTl1m6CnXAquVWoSIQfXJm6/Y CCQYh5uQW2dtbEK8ePAf4v5tcYn6SOcozfy2NPuipA6+n+nFgT+B8ZzJ3xir22kK j+X5rmSCZR6Cb8aHZcgw5/yfx0jIKJFh1lJziqu99vgWHHyayZYgAKZyjAvcWdy4 DELfiBXSpmIaM9xeglEXX6Fmy8S9gpeVXUMinPABlaPoZpsxg4oApqrPBjgpPZdL jzl4x9qhvkd5lv8b9TqaDMildEch+TbyCYFN/R38XydqFUkiUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBZRT5HypafGuUX6cTDRKsLcKaZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODhmZGJjODAtZTI4MS0z YWI3LTgyYzItODkwNzJhMzM5YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUfgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsQjoxxtRumFuBvJ26XhCBSySMFoUrjpaEgaIkWIby0BdDPPGYGXwi S5F+ObgsHxKY8YBL2zjectOPvOz37glRCNmqtYPXxcFm5Y1wMsjmHO8EG6SgaJMz HI5x1CAiN/HY9YSclFLKCZ6Dn4Go7Y0/X6Lx9QmFrlYNkAGWj6P8nwfh9olp0s8z WKBYdH++VfGRkWzJJJyo2TH3/vyPfDaBL7OEO2tQKrN+eC7h6KoF4OtJZB78kGSd AVMqCzzR248IEezll+q00Zl6sfkirsCrIN05oczzUHrao4P2XTAho6K9imgSLEYN CXI0wAf4b3cJTxFrJRI54yqHIFE3RWon -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:50 2025 by rpki-client