$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa File: ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa (raw, json) Hash identifier: wRBa/qiRG+Hx6vt3HlBwL8jU/y0fPNRJ16m8htIYzIY= Subject key identifier: 44:34:4B:94:D1:07:4B:21:40:B3:16:A2:5C:62:B3:AB:72:08:E2:FB Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6420C3AA98F7B08845C740 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 2607:f060::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:20:c3:aa:98:f7:b0:88:45:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=f302e950-d603-4a43-9498-e8ad26d242bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:5d:09:2d:b5:e2:9b:43:39:68:b8:35:09: 2b:18:ce:23:7f:34:d0:69:20:1f:dc:60:b4:86:27: 3b:38:c5:d0:07:b8:0b:5e:58:47:f1:76:26:cb:2e: ed:56:67:bd:51:2b:30:4d:22:1f:8f:ac:8f:16:4f: 09:fb:c4:43:1b:f4:2f:9e:9c:3f:16:11:53:19:a1: ed:7b:7e:c6:3a:99:39:9c:dd:5f:fe:0c:01:48:45: 5c:87:f3:7d:dd:f0:a2:e1:98:81:e4:2b:5f:e5:85: 89:16:1c:ae:76:a3:9e:b3:34:23:d3:5e:66:d7:bb: ee:a9:92:b0:2a:34:82:31:e8:51:16:f8:d7:d2:77: 58:50:87:b6:af:67:8a:27:3f:cf:31:21:08:13:10: 92:0f:0e:97:19:9c:2d:62:ad:5d:f7:b9:b4:15:2a: dc:74:ab:78:d6:7f:f2:b6:e9:66:4b:b6:65:dd:2c: 5b:9e:11:6e:55:08:f2:80:af:7a:be:f2:57:70:90: a6:08:1f:d4:da:59:44:48:ad:c6:b6:b5:67:7f:39: 09:fe:89:47:b0:e6:6f:5d:86:b5:5d:d3:a0:0d:dd: 09:16:c9:3b:df:00:e5:53:a2:b4:64:a8:94:9a:38: 75:30:95:d3:28:fb:2f:74:2d:10:d7:11:84:06:88: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:34:4B:94:D1:07:4B:21:40:B3:16:A2:5C:62:B3:AB:72:08:E2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2607:f060::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c7:38:61:42:e7:3f:18:05:57:d2:db:6e:f0:55:25:e6:b2: f6:17:9f:13:75:5c:72:f9:43:3d:aa:e6:fb:fb:ea:4b:9b:f8: 2f:06:d5:16:59:6a:9b:cc:75:5c:62:66:07:41:3c:38:cb:e7: 91:71:b9:13:d4:76:4f:4a:ed:92:dc:28:21:5f:04:5e:b0:b8: 27:ef:c4:eb:f2:30:d7:83:06:7a:58:bc:c5:ed:13:83:66:e1: 56:3a:a8:a2:66:43:2a:9d:86:91:d7:43:89:68:b9:03:9b:09: 5d:30:2c:55:55:41:0c:48:38:6b:34:b1:1d:9b:5f:34:06:cf: 60:f6:e8:39:df:05:2d:c9:df:85:d6:85:0f:4c:4c:05:22:4f: 40:0a:1d:82:36:99:56:57:ab:14:1f:21:8c:07:73:f9:8a:e6: fb:8f:62:ee:71:92:d6:ea:4c:2f:a4:cd:46:b2:fb:f7:6e:47: 54:04:9e:2b:06:7b:a3:80:f3:ba:f4:1a:20:38:07:58:6c:4e: 13:c0:9a:6c:d6:73:d8:bd:6f:57:9e:73:61:41:db:03:bd:ac: dc:15:dc:0b:b0:3d:40:e5:ae:2a:37:1a:e9:7f:b9:a7:97:c4: 6a:b0:7f:4f:55:e2:f6:22:47:7c:81:4d:5f:54:51:ed:11:20: a4:60:98:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZCDDqpj3sIhFx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZjMwMmU5NTAtZDYwMy00YTQzLTk0OTgtZThhZDI2ZDI0MmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz1dCS214ptDOWi4NQkrGM4jfzTQaSAf3GC0 hic7OMXQB7gLXlhH8XYmyy7tVme9USswTSIfj6yPFk8J+8RDG/Qvnpw/FhFTGaHt e37GOpk5nN1f/gwBSEVch/N93fCi4ZiB5Ctf5YWJFhyudqOeszQj015m17vuqZKw KjSCMehRFvjX0ndYUIe2r2eKJz/PMSEIExCSDw6XGZwtYq1d97m0FSrcdKt41n/y tulmS7Zl3SxbnhFuVQjygK96vvJXcJCmCB/U2llESK3GtrVnfzkJ/olHsOZvXYa1 XdOgDd0JFsk73wDlU6K0ZKiUmjh1MJXTKPsvdC0Q1xGEBogbqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEQ0S5TRB0shQLMWolxis6tyCOL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWY0ZDlkNzYtY2MxNS0z NDBmLWEwZDQtYmE2MDZkYzdlZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfwYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpxzhhQuc/GAVX0ttu8FUl5rL2F58TdVxy+UM9qub7++pLm/gvBtUW WWqbzHVcYmYHQTw4y+eRcbkT1HZPSu2S3CghXwResLgn78Tr8jDXgwZ6WLzF7ROD ZuFWOqiiZkMqnYaR10OJaLkDmwldMCxVVUEMSDhrNLEdm180Bs9g9ug53wUtyd+F 1oUPTEwFIk9ACh2CNplWV6sUHyGMB3P5iub7j2LucZLW6kwvpM1Gsvv3bkdUBJ4r BnujgPO69BogOAdYbE4TwJps1nPYvW9XnnNhQdsDvazcFdwLsD1A5a4qNxrpf7mn l8RqsH9PVeL2Ikd8gU1fVFHtESCkYJjK -----END CERTIFICATE-----Generated at Thu Apr 17 07:09:47 2025 by rpki-client