$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa File: 383a3fcc-da13-31fe-9fb7-abe63f181588.roa (raw, json) Hash identifier: fO+id7UEwllvSp0Fdeg/8te0syNjQvAGWZctIyAevc4= Subject key identifier: 4C:F9:57:97:9B:00:C0:D1:D8:85:72:28:35:CD:21:38:37:0E:1C:AF Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642324F8A57D18046E9D70 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 2607:f060:a000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:23:24:f8:a5:7d:18:04:6e:9d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=b78a438b-4661-46bf-ac37-ad65e8bd2e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c2:8d:88:be:80:c8:6a:44:5f:8a:bf:30:f2: ae:a7:bd:93:93:24:7f:1c:1d:8a:1f:77:c0:2c:2c: 0e:5a:b1:5b:15:a9:03:f0:19:93:13:0b:59:66:bf: a6:b2:12:a4:80:f3:5d:c0:92:21:c9:c2:23:e8:4b: 11:e9:25:f9:b0:54:f3:f9:1c:75:66:be:c3:16:3d: 80:ce:4e:ca:03:b5:5b:8f:56:12:39:18:f1:f3:6d: 14:c5:ef:91:f4:af:ac:ba:cc:1a:2d:17:79:d5:e0: 34:2c:39:78:0a:36:9f:07:36:16:43:cc:29:19:45: 8d:1a:f2:b4:6d:8c:bd:12:6c:0a:95:68:16:d2:0f: 15:01:53:f4:36:90:da:4f:b0:e9:7a:cd:17:50:b4: 1a:ac:8f:7d:1b:c1:6a:77:77:dc:0a:25:74:e6:4c: ab:e3:9f:6c:3e:d4:96:f6:66:f1:33:40:43:3d:a8: 16:18:71:36:c6:1a:c0:01:5c:f8:b6:a3:84:1c:7b: 09:53:4d:cb:db:a6:85:7f:18:28:88:60:a8:c7:28: 09:83:02:7d:e1:13:27:df:a9:75:ab:ef:2a:1a:97: d2:50:93:5d:99:3e:cb:1d:cf:e6:af:aa:a6:df:0a: 35:07:ef:69:1c:54:33:f0:a2:aa:ca:78:c4:cf:40: 46:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F9:57:97:9B:00:C0:D1:D8:85:72:28:35:CD:21:38:37:0E:1C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/383a3fcc-da13-31fe-9fb7-abe63f181588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2607:f060:a000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:01:00:a5:d2:79:dd:da:1a:a7:05:ef:cf:81:f0:5d:5e:49: 47:89:8a:ff:d3:f4:d9:10:07:12:56:ef:d6:1f:be:f1:e8:c3: fc:7c:88:ff:57:c7:98:5d:32:38:51:c7:fe:c5:c5:cd:21:75: 5a:55:d4:fd:63:51:fe:4e:7b:a7:14:e8:0f:16:47:33:a9:fc: 39:f1:1e:eb:9c:20:31:c2:8f:3c:9c:a0:7b:3c:9a:37:a1:fd: f9:b3:5a:be:4c:d8:dc:7f:7b:b5:3e:dc:a3:78:83:11:f7:b2: cd:5c:39:77:66:0c:f7:c8:2b:26:90:4b:c8:15:0f:54:ab:ef: 72:8d:6e:84:19:8c:2c:42:28:5d:07:a1:29:af:ef:9f:4a:da: fe:d0:b7:25:25:81:ae:63:9d:44:4c:8c:ef:09:80:da:d5:48: 78:66:30:da:9e:01:98:9d:05:5d:83:2a:46:8b:ec:ce:59:57: 13:cc:10:c2:a9:b4:f8:32:b7:ee:32:62:24:0e:53:32:d6:34: df:02:5a:64:5a:ae:f0:0e:78:59:87:62:c2:59:5c:29:dc:c3: f6:a2:c4:b2:74:d5:43:c0:44:f3:ba:db:bc:e6:a3:65:57:8b: 88:bf:ac:16:4f:c7:ef:d4:37:55:cd:2b:88:12:d3:d8:6c:22: 4f:74:b2:36 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElLZCMk+KV9GARunXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk Yjc4YTQzOGItNDY2MS00NmJmLWFjMzctYWQ2NWU4YmQyZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MKNiL6AyGpEX4q/MPKup72TkyR/HB2KH3fA LCwOWrFbFakD8BmTEwtZZr+mshKkgPNdwJIhycIj6EsR6SX5sFTz+Rx1Zr7DFj2A zk7KA7Vbj1YSORjx820Uxe+R9K+suswaLRd51eA0LDl4CjafBzYWQ8wpGUWNGvK0 bYy9EmwKlWgW0g8VAVP0NpDaT7Dpes0XULQarI99G8Fqd3fcCiV05kyr459sPtSW 9mbxM0BDPagWGHE2xhrAAVz4tqOEHHsJU03L26aFfxgoiGCoxygJgwJ94RMn36l1 q+8qGpfSUJNdmT7LHc/mr6qm3wo1B+9pHFQz8KKqynjEz0BGowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEz5V5ebAMDR2IVyKDXNITg3DhyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMzgzYTNmY2MtZGExMy0z MWZlLTlmYjctYWJlNjNmMTgxNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfwYKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcQEApdJ53doapwXvz4HwXV5JR4mK/9P02RAHElbv1h++8ejD/HyI /1fHmF0yOFHH/sXFzSF1WlXU/WNR/k57pxToDxZHM6n8OfEe65wgMcKPPJygezya N6H9+bNavkzY3H97tT7co3iDEfeyzVw5d2YM98grJpBLyBUPVKvvco1uhBmMLEIo XQehKa/vn0ra/tC3JSWBrmOdREyM7wmA2tVIeGYw2p4BmJ0FXYMqRovszllXE8wQ wqm0+DK37jJiJA5TMtY03wJaZFqu8A54WYdiwllcKdzD9qLEsnTVQ8BE87rbvOaj ZVeLiL+sFk/H79Q3Vc0riBLT2GwiT3SyNg== -----END CERTIFICATE-----Generated at Mon Apr 28 00:00:29 2025 by rpki-client