$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa File: eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa (raw, json) Hash identifier: G6kpwRUwVYddmPN89MW0SB9pFsHeJPUCTRnZP+fyqUY= Subject key identifier: 03:0E:39:58:8B:2F:62:C2:D6:DE:AA:2A:56:34:24:C7:89:99:76:FF Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642F895BD8BF6840A48AC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 2001:1868::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2f:89:5b:d8:bf:68:40:a4:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=1276c739-87ed-4b80-a72f-883089639dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:82:f0:f3:f4:26:46:12:59:9a:15:14:b1: 24:35:2b:2e:7c:4e:ac:29:3b:02:e2:13:e9:73:2f: 93:2b:d2:85:70:5c:ec:ae:43:96:8e:f4:57:59:2d: 97:78:34:d7:38:74:a7:eb:60:d4:14:60:44:2a:66: 6c:37:65:38:2a:7d:9c:14:bf:f5:ca:15:56:c7:5f: 3f:53:b5:54:05:18:72:ce:b4:2c:c9:24:40:29:6e: 34:c7:45:c8:19:be:4d:eb:92:91:7d:d1:b5:3b:52: 36:c8:f8:0b:c7:35:34:51:8f:a5:bd:1b:7f:83:6a: f8:d8:92:f1:2d:35:62:a6:cf:41:89:32:76:d8:84: 18:6b:e7:18:64:92:cb:b6:62:3e:97:b5:11:36:a2: f7:c1:2b:4a:75:99:08:49:3c:8f:2c:de:ca:4b:8d: f6:7b:dc:f0:a8:74:80:64:6e:3b:b8:89:19:38:b2: c9:95:a4:7e:e3:0c:9b:04:0c:34:a9:db:be:80:4c: f8:81:c0:d2:1f:1d:b5:b3:ea:f5:ac:31:f0:82:e6: ea:ba:86:df:12:40:f8:68:2b:92:da:d0:0c:3d:72: 69:57:32:92:a1:20:49:55:30:fc:e6:3e:5c:d9:8f: fb:d2:85:f4:c6:6f:3e:16:91:21:f6:ad:c6:61:fd: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0E:39:58:8B:2F:62:C2:D6:DE:AA:2A:56:34:24:C7:89:99:76:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2001:1868::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:de:5d:ac:4b:23:1b:bf:f2:e7:49:00:a6:30:47:c8:b2:b4: dc:7b:81:58:95:4b:ae:2b:26:a3:5b:3e:8d:ef:1f:4a:a1:26: 1e:f7:b4:99:4c:99:d0:80:9f:b3:1a:90:b8:4b:08:e9:a5:91: 8d:47:01:9f:09:5b:92:43:dc:55:e7:b9:cd:fa:62:2c:e5:42: b3:98:9a:ea:b8:50:d6:f9:b5:12:9c:33:32:f3:53:7c:ed:08: 3b:81:65:d6:ac:57:4a:5e:ff:fd:63:29:f4:46:98:fd:e9:93: 59:70:39:83:39:7a:4b:84:ee:ad:47:b5:ac:9c:9a:a4:34:0e: 4e:6a:d8:4d:d5:cd:e3:d1:49:3b:64:05:76:0e:92:18:f9:a8: 3c:09:2e:0c:3d:68:7e:8e:ae:be:4a:b2:cc:6e:79:63:be:47: d4:81:f8:33:ce:81:dd:87:90:bc:41:0c:83:e0:59:99:41:77: f5:a3:1f:79:cc:e8:cd:df:40:a4:14:bc:eb:1b:a2:fe:c7:a1: 04:e5:f0:57:20:88:1d:f3:b4:4d:3f:7e:91:f3:30:e8:99:0c: b9:7f:9c:50:83:53:1f:65:65:0d:7c:fc:a4:59:3c:9b:3f:bb: 39:3a:9b:43:a2:59:34:9a:39:5e:53:e5:98:bd:b9:b3:86:fa: 21:87:4a:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZC+JW9i/aECkisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MTI3NmM3MzktODdlZC00YjgwLWE3MmYtODgzMDg5NjM5ZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydCC8PP0JkYSWZoVFLEkNSsufE6sKTsC4hPp cy+TK9KFcFzsrkOWjvRXWS2XeDTXOHSn62DUFGBEKmZsN2U4Kn2cFL/1yhVWx18/ U7VUBRhyzrQsySRAKW40x0XIGb5N65KRfdG1O1I2yPgLxzU0UY+lvRt/g2r42JLx LTVips9BiTJ22IQYa+cYZJLLtmI+l7URNqL3wStKdZkISTyPLN7KS432e9zwqHSA ZG47uIkZOLLJlaR+4wybBAw0qdu+gEz4gcDSHx21s+r1rDHwgubquobfEkD4aCuS 2tAMPXJpVzKSoSBJVTD85j5c2Y/70oX0xm8+FpEh9q3GYf0ZYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAMOOViLL2LC1t6qKlY0JMeJmXb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWZmNzExMmEtMGUwYy0z OGNhLWE1ODUtMTFiNDI5MmJmYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYaDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAI3l2sSyMbv/LnSQCmMEfIsrTce4FYlUuuKyajWz6N7x9KoSYe97SZ TJnQgJ+zGpC4SwjppZGNRwGfCVuSQ9xV57nN+mIs5UKzmJrquFDW+bUSnDMy81N8 7Qg7gWXWrFdKXv/9Yyn0Rpj96ZNZcDmDOXpLhO6tR7WsnJqkNA5OathN1c3j0Uk7 ZAV2DpIY+ag8CS4MPWh+jq6+SrLMbnljvkfUgfgzzoHdh5C8QQyD4FmZQXf1ox95 zOjN30CkFLzrG6L+x6EE5fBXIIgd87RNP36R8zDomQy5f5xQg1MfZWUNfPykWTyb P7s5OptDolk0mjleU+WYvbmzhvohh0pi -----END CERTIFICATE-----Generated at Sun Apr 13 03:00:24 2025 by rpki-client