$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a686302c-a6ba-3ccb-9f89-080543f21e89.roa File: a686302c-a6ba-3ccb-9f89-080543f21e89.roa (raw, json) Hash identifier: s4u+zHDynTUrpY6jDNoIxOcNZHP41uvimYCi1APj9gs= Subject key identifier: B5:CC:B0:27:56:E9:E6:8F:79:2E:09:0D:33:E4:46:77:F8:D7:94:FC Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642FA1351D183A723DA1C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a686302c-a6ba-3ccb-9f89-080543f21e89.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 2604:4080::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2f:a1:35:1d:18:3a:72:3d:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=92d2ad46-0e63-4a24-a135-1a8e34084acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:89:89:f0:4a:6d:ff:b0:99:06:81:d4:22:30: 33:30:df:12:fe:38:2d:a6:7c:1e:ea:0f:71:b8:5b: 55:e2:82:3c:74:9f:4b:4e:6c:0a:59:41:ce:e3:f3: 21:8d:52:d9:57:2e:f0:77:47:27:7d:c0:44:33:35: 67:76:1c:14:5d:41:00:69:68:ce:37:c2:e1:35:6a: 0e:c8:1f:ae:41:a3:65:55:15:dc:89:23:b8:85:bd: c7:7f:09:d0:4c:be:23:db:f0:4d:8a:74:58:2f:81: d9:dc:8d:7e:d6:6e:5c:9a:d0:31:0a:69:fc:41:80: 69:27:12:c0:f2:c7:ab:25:80:2d:07:54:58:e8:d7: 75:34:c2:4d:60:8e:c5:c8:eb:14:48:0f:2e:6e:8b: 6b:5f:77:0f:b1:ac:71:1e:9b:f5:5a:0e:47:ae:90: 4f:88:07:51:3a:e2:50:1e:9c:82:2c:61:fd:fe:ca: 04:da:81:00:53:5a:5b:48:d7:f0:62:a7:63:e5:5d: c8:77:af:7f:41:df:d7:cb:d4:5d:de:49:63:67:4d: b2:88:44:aa:9b:5f:ea:ca:6d:2d:e5:d5:35:73:96: e2:cc:c5:88:03:0b:c7:41:5c:a8:e2:f6:5c:a4:8a: 3a:16:77:83:43:6e:d3:30:f1:b2:28:ad:bf:78:bc: 5e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CC:B0:27:56:E9:E6:8F:79:2E:09:0D:33:E4:46:77:F8:D7:94:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a686302c-a6ba-3ccb-9f89-080543f21e89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2604:4080::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:27:92:78:0d:66:ff:38:08:e7:45:61:d4:f1:91:62:f0:2b: 8e:1c:a9:96:4d:3f:a6:66:84:99:6a:8f:70:32:88:26:b2:2f: 8a:5d:47:e2:03:cf:e5:fa:2a:be:63:95:4c:c3:c8:b9:86:d0: 98:07:a2:4e:a4:c2:ca:e8:97:f6:d6:3c:8a:e7:db:fd:a8:bc: f7:2e:1d:70:c8:e1:9a:11:1d:19:9d:81:4d:81:33:53:8a:71: 5b:3a:2b:b9:11:cc:d6:b7:06:fb:9d:ba:a7:90:6a:ee:62:c2: 20:10:28:82:4f:cf:12:fe:79:3e:30:7a:15:2c:4c:41:cd:1b: 20:52:17:b8:33:a5:c2:a2:4a:cc:74:13:19:56:ce:fe:44:98: ca:f9:10:5e:6e:40:4c:42:fa:0a:db:f6:28:32:eb:4c:a0:8f: 8a:2d:fa:3f:c8:c1:ff:61:1c:1f:db:3b:8c:70:7d:8b:a4:7b: 48:29:c8:d8:e6:31:0f:3d:3d:bf:d0:01:67:67:4d:bc:c9:ca: 74:5c:76:df:93:c8:0e:89:1d:44:ff:f6:66:e5:60:e3:c5:38: 33:5b:01:cd:ab:84:4a:8d:da:7a:64:73:f2:13:3a:48:cb:b7: 8e:b7:7d:c7:12:0d:71:cf:3a:64:77:bf:c0:63:b1:01:c9:69: 94:82:1b:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZC+hNR0YOnI9ocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTJkMmFkNDYtMGU2My00YTI0LWExMzUtMWE4ZTM0MDg0YWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYmJ8Ept/7CZBoHUIjAzMN8S/jgtpnwe6g9x uFtV4oI8dJ9LTmwKWUHO4/MhjVLZVy7wd0cnfcBEMzVndhwUXUEAaWjON8LhNWoO yB+uQaNlVRXciSO4hb3HfwnQTL4j2/BNinRYL4HZ3I1+1m5cmtAxCmn8QYBpJxLA 8serJYAtB1RY6Nd1NMJNYI7FyOsUSA8ubotrX3cPsaxxHpv1Wg5HrpBPiAdROuJQ HpyCLGH9/soE2oEAU1pbSNfwYqdj5V3Id69/Qd/Xy9Rd3kljZ02yiESqm1/qym0t 5dU1c5bizMWIAwvHQVyo4vZcpIo6FneDQ27TMPGyKK2/eLxebQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLXMsCdW6eaPeS4JDTPkRnf415T8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYTY4NjMwMmMtYTZiYS0z Y2NiLTlmODktMDgwNTQzZjIxZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRAgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJJ5J4DWb/OAjnRWHU8ZFi8CuOHKmWTT+mZoSZao9wMogmsi+KXUfi A8/l+iq+Y5VMw8i5htCYB6JOpMLK6Jf21jyK59v9qLz3Lh1wyOGaER0ZnYFNgTNT inFbOiu5EczWtwb7nbqnkGruYsIgECiCT88S/nk+MHoVLExBzRsgUhe4M6XCokrM dBMZVs7+RJjK+RBebkBMQvoK2/YoMutMoI+KLfo/yMH/YRwf2zuMcH2LpHtIKcjY 5jEPPT2/0AFnZ028ycp0XHbfk8gOiR1E//Zm5WDjxTgzWwHNq4RKjdp6ZHPyEzpI y7eOt33HEg1xzzpkd7/AY7EByWmUghui -----END CERTIFICATE-----Generated at Sun Apr 13 02:44:36 2025 by rpki-client