$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa File: 38038dcb-67bd-3a83-a87a-911214d393a4.roa (raw, json) Hash identifier: qeMiTnAJS3s8IZlF8OEap5ngIQJg+fREkTYkQXl8tsc= Subject key identifier: 6A:05:3C:F8:58:75:48:B5:AD:76:E1:0C:6A:B4:2D:12:7F:6B:3C:C1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584912470A03C84997B23875F560 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397237 IP address blocks: 2001:502:ad09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:0a:03:c8:49:97:b2:38:75:f5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6607628c-3a57-423c-8165-b7da199031af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:2e:e2:02:4f:c4:c0:a1:84:89:1f:66:1e: af:a8:cd:99:ad:2e:e7:8a:0e:e6:76:fb:69:fc:b6: 7b:4c:59:2d:1a:7c:88:75:84:fe:a0:a1:39:fa:c8: 8b:dc:e1:52:4d:97:24:ae:f7:42:4d:f7:e6:33:43: 52:d1:12:25:88:c5:0c:e1:2f:6d:05:75:b9:9a:c6: f9:37:cc:0c:c6:56:eb:a7:89:c4:10:d1:54:df:7f: fe:0a:e5:1e:de:5f:6e:ec:f3:52:e1:70:d3:8e:2e: 79:24:f8:3f:f8:d1:02:0b:be:2d:29:52:0a:83:91: 4c:e8:c9:65:2a:b9:7e:83:89:55:d8:7f:48:01:90: 3d:22:9c:b0:04:58:5d:44:82:92:81:24:78:6c:ad: af:41:72:e4:af:db:21:7c:6c:d7:f2:db:5b:c2:73: 0d:0f:07:e2:8e:6f:dd:93:d9:6f:77:55:a7:2a:74: fa:06:63:c0:a6:df:5c:bc:24:e8:52:ca:f9:56:53: fc:c3:b7:c9:66:23:2c:9a:be:50:c8:c2:56:5c:3e: b4:7b:6d:c4:75:3c:65:73:8e:a2:4c:bd:89:62:9c: 33:8a:18:26:76:c1:70:a7:23:42:6a:f4:ab:d3:dc: 2c:f0:29:e5:34:07:f0:07:84:49:79:23:46:3d:11: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:05:3C:F8:58:75:48:B5:AD:76:E1:0C:6A:B4:2D:12:7F:6B:3C:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/38038dcb-67bd-3a83-a87a-911214d393a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:ad09::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:44:3d:81:c6:56:81:5c:ae:94:f5:5a:9b:c0:35:61:b4:55: 85:34:21:bc:b8:73:c1:df:72:ef:06:b4:89:68:88:4f:1c:b2: da:a6:59:e9:28:4b:28:ef:3e:0b:60:50:03:54:92:14:55:42: 8d:60:1a:19:ab:a3:53:f3:40:c9:21:9c:4a:16:5f:b3:b0:8a: 4a:9c:22:9f:54:12:85:3d:7d:78:4b:d6:c8:5f:6f:65:8c:b9: b9:0c:9c:62:e9:b0:33:5d:51:75:aa:10:d2:cd:53:91:8f:88: fe:7a:88:c3:9e:b5:e0:bc:bc:df:22:c1:02:df:2a:6d:ce:91: 61:ca:43:ea:c9:5e:6f:2e:77:ac:2d:69:3f:b4:d2:07:cc:d5: 13:88:bb:49:a0:be:80:7d:fe:b9:fd:31:81:80:d5:27:87:87: 79:90:f5:0a:a7:8a:37:c5:a7:be:6b:6f:cc:09:9d:33:fa:73: 4f:5e:5f:f6:99:bb:0f:2a:70:78:d9:bb:42:48:16:5d:cc:33: 80:64:ef:e3:d2:ef:c2:ec:0b:32:c1:f6:7f:14:17:63:5b:97: a4:e8:ed:d7:9a:52:08:b4:b0:6e:f4:34:55:d2:8b:f8:89:de: f3:80:b6:92:76:7b:8d:35:9c:98:02:43:a9:61:cd:55:4b:f4: 7f:ba:7b:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwoDyEmXsjh19WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NjYwNzYyOGMtM2E1Ny00MjNjLTgxNjUtYjdkYTE5OTAzMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot0u4gJPxMChhIkfZh6vqM2ZrS7nig7mdvtp /LZ7TFktGnyIdYT+oKE5+siL3OFSTZckrvdCTffmM0NS0RIliMUM4S9tBXW5msb5 N8wMxlbrp4nEENFU33/+CuUe3l9u7PNS4XDTji55JPg/+NECC74tKVIKg5FM6Mll Krl+g4lV2H9IAZA9IpywBFhdRIKSgSR4bK2vQXLkr9shfGzX8ttbwnMNDwfijm/d k9lvd1WnKnT6BmPApt9cvCToUsr5VlP8w7fJZiMsmr5QyMJWXD60e23EdTxlc46i TL2JYpwzihgmdsFwpyNCavSr09ws8CnlNAfwB4RJeSNGPRF8AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGoFPPhYdUi1rXbhDGq0LRJ/azzBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzgwMzhkY2ItNjdiZC0z YTgzLWE4N2EtOTExMjE0ZDM5M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAq0J MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIhEPYHGVoFcrpT1WpvANWG0VYU0Iby4c8Hfcu8GtIloiE8cstqm WekoSyjvPgtgUANUkhRVQo1gGhmro1PzQMkhnEoWX7OwikqcIp9UEoU9fXhL1shf b2WMubkMnGLpsDNdUXWqENLNU5GPiP56iMOeteC8vN8iwQLfKm3OkWHKQ+rJXm8u d6wtaT+00gfM1ROIu0mgvoB9/rn9MYGA1SeHh3mQ9QqnijfFp75rb8wJnTP6c09e X/aZuw8qcHjZu0JIFl3MM4Bk7+PS78LsCzLB9n8UF2Nbl6To7deaUgi0sG70NFXS i/iJ3vOAtpJ2e401nJgCQ6lhzVVL9H+6e24= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:56 2025 by rpki-client