$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1aa3061e-cd36-3631-95a1-de48bf29290c.roa File: 1aa3061e-cd36-3631-95a1-de48bf29290c.roa (raw, json) Hash identifier: XOfu55ekvJUQLLpJ+t0IR3dCUu07MrNNaLdrOakKRmI= Subject key identifier: F0:79:28:3B:D1:7E:43:C6:3F:87:10:CB:40:05:78:51:71:B4:E7:C2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584912470459B5220EC887D01880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1aa3061e-cd36-3631-95a1-de48bf29290c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397237 IP address blocks: 2001:502:100e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:04:59:b5:22:0e:c8:87:d0:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bf1e51f6-c5b4-42a9-b36e-842b12551dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:a5:5d:4c:03:30:e4:ac:8d:b8:c4:2c:23: 84:90:85:09:df:d4:fd:d3:7f:af:f1:3b:4a:4e:fd: f7:38:e0:0b:31:a7:19:63:14:f7:63:36:57:e8:72: 02:20:60:c1:87:8f:aa:f3:6a:b4:4b:e1:00:71:8c: 3c:49:7e:89:2c:7c:6d:22:0a:c8:95:14:b0:9a:10: 8c:61:1d:72:70:0e:89:23:18:2d:93:49:da:ff:ca: 7e:a4:65:ae:da:e6:90:b1:d7:2e:f1:75:87:3f:aa: d8:57:c3:dc:d2:6a:30:20:d1:29:6f:82:4a:b4:77: c8:da:85:b0:43:4d:e4:17:33:61:dc:8f:92:ef:43: b5:a7:df:1c:b1:5f:c6:16:97:3e:65:a1:97:2e:6c: 17:03:f5:e6:dd:e8:df:fc:6a:27:66:6a:51:17:98: 26:ff:92:c4:4d:e9:1b:7b:9a:2e:2e:fb:f8:fe:dd: 2e:c2:98:db:d6:26:7f:5f:79:aa:7f:4a:e2:c5:64: b5:29:61:b9:b5:dd:a3:55:9d:91:31:22:77:a0:91: 63:56:62:4e:2f:96:4c:af:f4:c7:2e:c3:99:b8:f4: c1:ce:70:78:c3:85:96:bb:89:f4:be:d1:81:8e:33: 3c:ab:19:2f:b0:ff:df:de:64:d2:41:ec:89:ba:a6: 5c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:28:3B:D1:7E:43:C6:3F:87:10:CB:40:05:78:51:71:B4:E7:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1aa3061e-cd36-3631-95a1-de48bf29290c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:100e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:df:49:01:03:62:e0:c5:c6:91:25:e8:c9:b0:6a:b4:77:79: 58:8e:83:22:cf:58:65:21:c1:f0:f5:76:a7:83:b0:98:be:a1: bc:a4:bf:b6:68:55:ec:57:21:13:85:dd:c9:82:97:af:43:0a: f9:5a:0f:28:60:fd:75:bd:ea:5e:14:2d:7c:48:c6:d8:74:e7: 91:4f:b1:8d:22:cc:69:f4:8f:c3:ae:fb:ad:5b:2b:6c:ea:c4: ea:f2:52:c7:54:fb:88:2c:d0:06:e1:0d:95:f0:41:ce:8c:ea: fc:0a:b6:98:f3:37:88:d8:41:d7:df:97:4d:fb:e0:93:55:15: a4:cb:ca:b1:d5:f9:1b:e0:c3:0f:0c:01:6d:69:33:a6:ba:17: ab:c4:ae:f0:99:2c:12:d5:70:a5:1c:9b:45:3f:7d:db:65:db: 19:5d:96:52:09:3e:d1:65:18:5e:98:bf:53:e7:6c:ca:56:28: 99:77:15:d2:4a:63:52:dc:06:be:1c:9b:9e:00:76:99:97:ce: 20:69:5e:9d:52:a5:74:78:bc:56:b5:28:b5:55:f9:be:2a:6f: 67:09:fa:14:9d:17:16:00:5f:ce:a0:3c:ee:53:6f:9d:a4:8d: 23:23:ef:4d:02:21:12:2a:89:66:33:97:67:39:76:d8:91:4c: dd:2f:f8:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwRZtSIOyIfQGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmYxZTUxZjYtYzViNC00MmE5LWIzNmUtODQyYjEyNTUxZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGmlXUwDMOSsjbjELCOEkIUJ39T903+v8TtK Tv33OOALMacZYxT3YzZX6HICIGDBh4+q82q0S+EAcYw8SX6JLHxtIgrIlRSwmhCM YR1ycA6JIxgtk0na/8p+pGWu2uaQsdcu8XWHP6rYV8Pc0mowINEpb4JKtHfI2oWw Q03kFzNh3I+S70O1p98csV/GFpc+ZaGXLmwXA/Xm3ejf/GonZmpRF5gm/5LETekb e5ouLvv4/t0uwpjb1iZ/X3mqf0rixWS1KWG5td2jVZ2RMSJ3oJFjVmJOL5ZMr/TH LsOZuPTBznB4w4WWu4n0vtGBjjM8qxkvsP/f3mTSQeyJuqZc3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPB5KDvRfkPGP4cQy0AFeFFxtOfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWFhMzA2MWUtY2QzNi0z NjMxLTk1YTEtZGU0OGJmMjkyOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAbfSQEDYuDFxpEl6MmwarR3eViOgyLPWGUhwfD1dqeDsJi+obyk v7ZoVexXIROF3cmCl69DCvlaDyhg/XW96l4ULXxIxth055FPsY0izGn0j8Ou+61b K2zqxOryUsdU+4gs0AbhDZXwQc6M6vwKtpjzN4jYQdffl0374JNVFaTLyrHV+Rvg ww8MAW1pM6a6F6vErvCZLBLVcKUcm0U/fdtl2xldllIJPtFlGF6Yv1PnbMpWKJl3 FdJKY1LcBr4cm54AdpmXziBpXp1SpXR4vFa1KLVV+b4qb2cJ+hSdFxYAX86gPO5T b52kjSMj700CIRIqiWYzl2c5dtiRTN0v+AY= -----END CERTIFICATE-----Generated at Sun Apr 27 13:12:05 2025 by rpki-client