$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f0c11c66-1ff4-3b31-965c-ae93b3de3594.roa File: f0c11c66-1ff4-3b31-965c-ae93b3de3594.roa (raw, json) Hash identifier: VTxxbr7oFjhYQEsYOgEXNO8gSRbqC1DDE5WbEK43RGM= Subject key identifier: F5:9E:7A:8A:A8:F4:DA:E1:87:5A:01:F8:58:A5:96:64:AE:B1:C6:5B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64233E7F6A3A8165361480 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f0c11c66-1ff4-3b31-965c-ae93b3de3594.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 2607:8100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:23:3e:7f:6a:3a:81:65:36:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=04682440-1a2c-461b-9baa-0b1b4a2cb4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:db:9c:85:86:a6:7b:ae:23:d9:20:18:94: 85:a6:a3:65:96:d5:32:bd:8c:0d:1b:4e:76:75:ca: 3c:d4:59:13:4f:6e:11:71:00:2e:13:46:bb:fe:97: 4c:fd:15:e9:bb:89:90:f5:72:4f:95:e0:90:69:23: e9:8a:44:35:ff:32:22:49:81:dd:4b:53:9a:6f:27: d0:10:56:90:17:75:70:15:2c:3d:51:30:80:48:9c: 39:53:c3:fd:00:ba:c6:65:c7:d8:b8:8f:9f:2b:df: 63:78:19:15:30:1a:47:fd:cf:28:9c:33:70:15:56: ab:f8:2d:ed:c6:83:6e:6c:31:e3:7a:18:a0:8d:ac: 7d:88:2d:3d:81:54:dc:8c:e9:6b:51:19:1d:79:d9: a2:e8:3c:19:e2:59:3b:fb:0c:d9:ae:cb:44:46:d7: d8:52:5b:d7:d8:99:0c:5f:31:84:86:7a:67:7d:6a: 9f:41:84:37:62:4a:31:49:f9:80:8d:fc:9f:0e:8c: d8:7d:66:7a:c3:0c:93:4b:72:6a:50:98:5a:a7:e0: ea:c7:87:62:c4:11:7d:39:8d:87:ba:c0:48:be:d8: 11:d0:80:3c:e8:65:6f:15:e5:b2:63:96:51:31:67: 8f:db:7e:5d:f5:0d:20:14:8a:ba:46:0d:78:69:e8: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9E:7A:8A:A8:F4:DA:E1:87:5A:01:F8:58:A5:96:64:AE:B1:C6:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f0c11c66-1ff4-3b31-965c-ae93b3de3594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2607:8100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e0:af:90:86:a0:a8:c2:d8:7b:74:6d:b5:ca:f1:32:cf:d3: 33:26:b9:02:d4:6a:1a:fb:c2:5a:5c:c9:f4:46:b7:d5:36:07: b1:7b:94:ef:ed:3e:91:ad:86:f8:44:3b:06:ea:ff:55:59:df: 28:47:84:3d:aa:dc:9c:ee:76:c4:f6:b1:20:2a:90:a8:74:cd: 36:5b:5a:91:c0:a7:d5:72:55:c5:86:a7:81:e4:e8:02:59:f9: 03:62:8f:d5:a3:0b:e3:b3:9d:f5:16:e2:25:63:2a:4c:69:b8: 6e:eb:3e:93:fe:03:2e:9d:23:01:79:3e:3b:44:59:39:17:e5: 10:ed:e8:14:b5:56:74:e3:f1:ca:6b:a0:cc:cf:9e:33:27:db: ec:62:a3:9d:fc:82:fa:60:32:28:ab:97:81:9e:02:b6:d9:ba: 28:41:9a:55:99:c4:d8:bf:da:b5:b6:3a:23:ee:29:01:15:c9: b6:ad:a9:95:f7:11:b1:43:52:5b:2e:d5:9f:f0:15:85:bc:7a: b8:22:ac:d3:69:7c:bf:6d:49:5c:9b:b2:84:19:e2:4a:8b:34: e1:7e:e1:70:e7:21:44:b0:60:41:74:a7:ca:5d:67:02:84:9d: 41:d2:1a:8b:85:dd:88:60:bc:06:64:53:ba:13:68:64:06:9e: 31:b9:28:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZCM+f2o6gWU2FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MDQ2ODI0NDAtMWEyYy00NjFiLTliYWEtMGIxYjRhMmNiNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjobbnIWGpnuuI9kgGJSFpqNlltUyvYwNG052 dco81FkTT24RcQAuE0a7/pdM/RXpu4mQ9XJPleCQaSPpikQ1/zIiSYHdS1OabyfQ EFaQF3VwFSw9UTCASJw5U8P9ALrGZcfYuI+fK99jeBkVMBpH/c8onDNwFVar+C3t xoNubDHjehigjax9iC09gVTcjOlrURkdedmi6DwZ4lk7+wzZrstERtfYUlvX2JkM XzGEhnpnfWqfQYQ3YkoxSfmAjfyfDozYfWZ6wwyTS3JqUJhap+Dqx4dixBF9OY2H usBIvtgR0IA86GVvFeWyY5ZRMWeP235d9Q0gFIq6Rg14aehi4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPWeeoqo9Nrhh1oB+FillmSuscZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjBjMTFjNjYtMWZmNC0z YjMxLTk2NWMtYWU5M2IzZGUzNTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeBADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB84K+QhqCowth7dG21yvEyz9MzJrkC1Goa+8JaXMn0RrfVNgexe5Tv 7T6RrYb4RDsG6v9VWd8oR4Q9qtyc7nbE9rEgKpCodM02W1qRwKfVclXFhqeB5OgC WfkDYo/Vowvjs531FuIlYypMabhu6z6T/gMunSMBeT47RFk5F+UQ7egUtVZ04/HK a6DMz54zJ9vsYqOd/IL6YDIoq5eBngK22booQZpVmcTYv9q1tjoj7ikBFcm2ramV 9xGxQ1JbLtWf8BWFvHq4IqzTaXy/bUlcm7KEGeJKizThfuFw5yFEsGBBdKfKXWcC hJ1B0hqLhd2IYLwGZFO6E2hkBp4xuShJ -----END CERTIFICATE-----Generated at Sat Apr 12 12:26:23 2025 by rpki-client