$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa File: eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa (raw, json) Hash identifier: +WPnNV6uuvDKQ+qpr9CPY/pgAA035cSYl5FFDl9v9xk= Subject key identifier: C6:86:7A:10:14:3F:78:92:34:61:BC:2D:E8:58:57:E0:3B:07:42:3D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B31F634159C3098D54580 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 2001:1868::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:31:f6:34:15:9c:30:98:d5:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=fa87cc2a-18ea-4f4b-a6a7-83fea876c923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:82:b4:41:52:1e:c3:2c:32:cd:dc:37:f2: 00:72:7b:86:13:38:e3:51:39:a8:ec:09:15:e6:1a: 43:33:33:a5:94:aa:31:22:4d:54:14:74:cc:ad:a6: fb:ad:f5:7a:de:15:8d:94:b2:99:3a:e9:ff:a6:6a: b3:15:47:d2:be:8c:66:19:85:2c:f0:d7:5f:bb:08: 28:56:d1:ef:f9:fb:39:75:2d:95:58:00:67:61:f8: 6a:ce:45:50:ea:89:05:bb:1e:f3:69:0d:1f:e9:0e: ce:bf:33:e0:ea:73:3f:68:fa:e2:e8:61:2e:58:35: db:0c:c6:bd:02:47:7c:b3:64:63:bd:29:a8:7f:cd: 90:0d:47:17:92:4e:b2:d8:4b:e2:0e:a9:44:6e:26: f0:51:5d:40:7b:0b:23:1e:ef:5e:10:45:81:99:bc: ce:96:f2:4c:aa:b9:43:46:69:ed:78:25:73:34:f7: df:c8:91:0f:43:34:8e:e8:b7:b9:5e:95:8a:f6:b2: 85:57:54:1c:ac:c1:5b:77:82:93:15:a8:55:60:4c: d3:a2:08:68:a7:50:87:5e:56:df:9d:a6:5a:c8:39: d1:c9:31:60:24:46:68:71:99:ec:1b:96:d7:3a:b3: da:6a:64:a0:c6:2a:fa:93:c8:51:99:4a:0c:f7:cc: 92:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:86:7A:10:14:3F:78:92:34:61:BC:2D:E8:58:57:E0:3B:07:42:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2001:1868::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:78:6f:f1:06:1c:6b:9b:f9:2a:70:f6:f5:4e:b1:0f:35:87: f3:ba:f3:2c:8d:86:65:03:4e:b8:ec:49:29:e9:fd:fe:69:c7: b9:98:23:73:e6:28:bd:14:ff:4d:7c:d2:9e:f9:f8:9e:49:9c: 7b:a7:3b:40:b8:d6:e0:21:e6:e2:81:4e:85:fb:c7:af:cd:b8: ce:70:57:c4:b0:8f:d7:13:6e:7f:3e:b6:eb:5f:4f:e9:e5:bc: 13:89:5a:64:f3:01:e2:a8:b8:2b:f6:6b:3d:46:5a:c8:e5:2b: 21:cc:14:f3:42:81:75:62:b3:dc:14:55:fb:d0:72:49:87:af: 42:bf:dd:5e:4c:c4:c1:ab:72:3b:6a:c9:c0:e5:de:0d:94:1c: 46:c0:3c:4b:86:49:a7:86:75:d6:bf:9e:ee:0b:84:1c:0c:f4: 97:36:3e:3a:43:7e:63:f9:c6:7f:77:a0:b4:f9:0e:c5:0b:16: 2f:3d:0a:3f:35:8c:fc:26:e2:12:21:0b:e9:69:23:18:84:1f: 5a:04:89:d5:81:84:a2:d7:e0:70:9c:b1:63:4d:67:89:8f:fb: bf:41:a8:af:2b:ba:71:ca:62:44:db:a8:b0:6d:19:16:6a:61: dc:ef:03:4a:3c:c7:e9:e3:5c:a8:db:40:dc:c1:06:ef:62:f6: 79:9a:71:8f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhsKzH2NBWcMJjVRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZmE4N2NjMmEtMThlYS00ZjRiLWE2YTctODNmZWE4NzZjOTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGGCtEFSHsMsMs3cN/IAcnuGEzjjUTmo7AkV 5hpDMzOllKoxIk1UFHTMrab7rfV63hWNlLKZOun/pmqzFUfSvoxmGYUs8Ndfuwgo VtHv+fs5dS2VWABnYfhqzkVQ6okFux7zaQ0f6Q7OvzPg6nM/aPri6GEuWDXbDMa9 Akd8s2RjvSmof82QDUcXkk6y2EviDqlEbibwUV1AewsjHu9eEEWBmbzOlvJMqrlD RmnteCVzNPffyJEPQzSO6Le5XpWK9rKFV1QcrMFbd4KTFahVYEzToghop1CHXlbf naZayDnRyTFgJEZocZnsG5bXOrPaamSgxir6k8hRmUoM98ySzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMaGehAUP3iSNGG8LehYV+A7B0I9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWZmNzExMmEtMGUwYy0z OGNhLWE1ODUtMTFiNDI5MmJmYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYaDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1eG/xBhxrm/kqcPb1TrEPNYfzuvMsjYZlA0647Ekp6f3+ace5mCNz 5ii9FP9NfNKe+fieSZx7pztAuNbgIebigU6F+8evzbjOcFfEsI/XE25/PrbrX0/p 5bwTiVpk8wHiqLgr9ms9RlrI5SshzBTzQoF1YrPcFFX70HJJh69Cv91eTMTBq3I7 asnA5d4NlBxGwDxLhkmnhnXWv57uC4QcDPSXNj46Q35j+cZ/d6C0+Q7FCxYvPQo/ NYz8JuISIQvpaSMYhB9aBInVgYSi1+BwnLFjTWeJj/u/QaivK7pxymJE26iwbRkW amHc7wNKPMfp41yo20DcwQbvYvZ5mnGP -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:19 2025 by rpki-client