$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99eb27fa-b601-371b-8fdc-3ffb7aa14496.roa File: 99eb27fa-b601-371b-8fdc-3ffb7aa14496.roa (raw, json) Hash identifier: F0rpB3I1YXpHLqNMtT82lyhagbYVbfU5gWqGfLkqIUM= Subject key identifier: 83:36:6C:81:9C:90:47:DB:96:2C:BA:E3:D4:6A:0D:C3:9B:E5:0B:19 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584912470F2074804412ACC6F500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99eb27fa-b601-371b-8fdc-3ffb7aa14496.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397230 IP address blocks: 2001:503:e239::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:0f:20:74:80:44:12:ac:c6:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=119dc869-5f3d-490c-b545-80cfc6ccf3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:02:22:22:54:e1:66:19:a8:86:c3:0a:02: 44:fd:37:b1:ef:31:ed:b4:00:ed:65:6b:d7:17:57: 2f:42:ec:90:d8:5d:79:b8:eb:20:75:28:d8:d4:4e: da:ec:52:a5:aa:6a:b9:ed:41:51:29:95:eb:0b:b5: 88:1f:f5:e9:34:66:b2:51:03:60:0b:9d:7c:0b:d2: 37:73:b2:36:a2:d9:42:64:92:5f:0a:af:82:3a:9e: 4f:fd:e0:35:ee:8b:00:ba:7c:e5:51:90:4a:d7:d5: de:b3:d7:3a:29:3d:bb:68:61:ee:b8:20:02:0e:3c: e2:22:88:9f:15:73:b6:7d:c2:19:72:71:ff:52:9a: a3:6f:05:c2:c0:e0:88:77:7c:74:9b:6e:cc:3e:56: 56:a9:ac:0a:cc:88:6c:a6:bc:2a:79:c3:06:df:d0: ff:8b:77:33:65:1d:c1:83:b5:bf:e0:36:52:d6:94: 49:f0:ee:a3:77:56:c0:5e:1a:1c:ad:6a:f7:08:c4: 13:f6:f1:3e:db:cb:91:1b:6a:fe:56:09:7d:37:72: 1e:82:50:6e:77:2c:00:63:78:0b:93:97:e2:31:8c: d2:a1:1b:12:96:a2:b2:43:c3:80:4a:d9:af:ee:be: e3:2e:57:f8:7e:6a:30:c3:84:57:0a:09:f4:5a:2c: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:36:6C:81:9C:90:47:DB:96:2C:BA:E3:D4:6A:0D:C3:9B:E5:0B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99eb27fa-b601-371b-8fdc-3ffb7aa14496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:e239::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ed:3f:43:0e:d3:57:b5:ff:7c:d8:77:37:d8:cf:77:3b:66: e8:c4:60:05:7b:79:9b:2d:b2:5c:7c:ff:54:30:5d:a7:20:dd: c7:60:1e:bc:22:3b:20:9e:ec:78:6d:b9:b1:03:7c:2c:5a:5c: 69:4b:a7:59:73:18:3e:38:14:f9:fd:8f:f4:83:73:99:0b:df: 40:03:2e:93:de:4e:11:27:72:15:9f:0e:ec:5d:94:f6:48:a9: 19:04:65:4b:67:32:7f:ef:7c:12:b6:f9:d0:8f:39:83:78:c6: 0e:ed:7a:17:2a:1d:5e:84:a5:28:17:49:11:e0:fa:8e:4f:b7: 9b:0b:2c:84:e8:5f:25:e2:a9:6c:d4:07:01:ad:62:9d:65:01: 36:f2:ce:f1:9a:20:e6:dc:24:6d:ed:43:2d:67:31:3f:0f:ac: 00:4b:81:15:b9:56:16:bc:4b:fd:28:b7:ec:bc:a2:59:8d:92: 4a:b8:db:c2:20:63:4d:7e:0a:53:79:97:07:aa:71:2b:25:b9: 54:3d:7e:26:c2:2e:89:83:17:a8:d4:1e:d5:24:71:52:d8:b8: 37:75:2c:c6:86:04:d8:1e:28:22:f5:d6:22:65:70:5d:a0:49: a6:f9:02:b4:e6:c7:d4:cb:c7:b2:a0:aa:8d:be:1b:2d:71:25: 2e:5c:3b:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRw8gdIBEEqzG9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MTE5ZGM4NjktNWYzZC00OTBjLWI1NDUtODBjZmM2Y2NmM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL0CIiJU4WYZqIbDCgJE/Tex7zHttADtZWvX F1cvQuyQ2F15uOsgdSjY1E7a7FKlqmq57UFRKZXrC7WIH/XpNGayUQNgC518C9I3 c7I2otlCZJJfCq+COp5P/eA17osAunzlUZBK19Xes9c6KT27aGHuuCACDjziIoif FXO2fcIZcnH/UpqjbwXCwOCId3x0m27MPlZWqawKzIhsprwqecMG39D/i3czZR3B g7W/4DZS1pRJ8O6jd1bAXhocrWr3CMQT9vE+28uRG2r+Vgl9N3IeglBudywAY3gL k5fiMYzSoRsSlqKyQ8OAStmv7r7jLlf4fmoww4RXCgn0WixJhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIM2bIGckEfbliy649RqDcOb5QsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTllYjI3ZmEtYjYwMS0z NzFiLThmZGMtM2ZmYjdhYTE0NDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+I5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADXtP0MO01e1/3zYdzfYz3c7ZujEYAV7eZstslx8/1QwXacg3cdg HrwiOyCe7HhtubEDfCxaXGlLp1lzGD44FPn9j/SDc5kL30ADLpPeThEnchWfDuxd lPZIqRkEZUtnMn/vfBK2+dCPOYN4xg7tehcqHV6EpSgXSRHg+o5Pt5sLLIToXyXi qWzUBwGtYp1lATbyzvGaIObcJG3tQy1nMT8PrABLgRW5Vha8S/0ot+y8olmNkkq4 28IgY01+ClN5lweqcSsluVQ9fibCLomDF6jUHtUkcVLYuDd1LMaGBNgeKCL11iJl cF2gSab5ArTmx9TLx7Kgqo2+Gy1xJS5cO78= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:36 2025 by rpki-client