$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa File: 9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa (raw, json) Hash identifier: JIRtRk2TI+LdT61tWq4cf++xMCFCd/54fWKBY12GOcs= Subject key identifier: 99:D1:B9:6D:36:5F:8A:1A:ED:AC:32:DF:24:3B:56:C1:64:80:B0:06 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584912470FDA59B0AD00ED54B3BC Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 12008 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:0f:da:59:b0:ad:00:ed:54:b3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=44c2c04e-afd4-4626-b809-b448d92b5913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:d3:67:9f:d2:7b:52:b1:ef:d7:82:8e:87: 79:f8:2c:06:a9:a0:2b:c3:18:5a:c9:e8:64:85:f5: a8:6c:44:ec:7d:45:69:b0:d2:0f:73:8b:17:67:82: 52:79:fb:21:fd:8a:03:06:07:e4:2d:9f:12:1e:ad: 8f:57:35:c2:c8:46:e4:d7:9d:ec:ce:06:04:6e:d7: 33:16:e5:2f:de:c3:5d:86:9a:79:96:bd:e8:f1:44: f4:be:fd:df:0e:91:57:ea:9f:13:f4:41:19:30:6f: 95:d5:de:ec:f4:ba:af:8e:aa:f1:00:3c:77:bf:67: c8:0a:44:7f:e2:cd:9d:09:bc:f2:26:80:f9:42:4a: 47:c6:54:32:37:54:ee:51:66:c9:9e:bc:e8:dc:94: 50:e4:a3:f6:3f:35:dc:61:ad:b9:e3:04:65:da:51: 5c:0c:60:42:27:5d:a7:3e:12:22:e7:28:c0:dc:34: 6e:7f:f0:e5:88:0c:2f:94:b6:35:d0:4d:19:31:a7: 9d:6e:f0:3b:15:73:24:d9:6d:e7:3c:51:eb:f6:e0: de:4e:32:bd:18:fd:5c:88:f9:f2:dd:d4:5d:04:5b: bc:8b:8b:6c:44:e0:95:d5:54:62:d0:02:3c:26:19: d3:2d:e7:a9:d5:a6:ed:39:58:6b:40:5a:b9:34:63: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D1:B9:6D:36:5F:8A:1A:ED:AC:32:DF:24:3B:56:C1:64:80:B0:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:bc:30:ef:97:64:31:88:0e:f2:b5:0e:2b:3d:4e:80:60:36: 3e:56:0e:ac:da:0c:8b:3e:60:d7:34:d1:bd:8c:37:89:b9:d3: 0f:88:ad:9c:ae:ea:37:6a:00:1e:fb:6c:0e:64:b6:a1:4f:47: 2a:fe:a1:46:fd:74:cc:83:0c:2a:ef:ae:f8:36:4a:3a:30:b6: 14:bd:91:f2:63:95:33:c3:20:c4:38:3b:36:46:01:61:8c:fc: 7c:83:f8:a5:60:81:9b:b1:05:b8:94:fe:dd:27:b3:63:3b:0e: b2:38:56:4d:4a:db:16:b0:a3:74:dc:ec:3c:78:26:77:88:2b: 64:07:d5:0c:9c:1f:68:cf:e6:0b:19:55:3b:95:9f:f4:3d:b3: 17:a4:02:bb:08:fe:a1:bc:bc:80:61:d6:bf:17:2c:b3:96:31: 39:fb:ea:3b:14:f0:54:99:63:9d:ed:0e:c3:bb:3f:f7:a9:0d: b2:19:d4:f6:6e:0b:44:41:d4:1a:fc:c1:2b:4a:7f:50:90:04: a2:ff:7e:02:21:7e:02:c7:46:81:4e:3d:ee:e0:1c:5c:89:89: 93:af:14:c8:b4:70:99:3d:c0:b8:a0:11:14:e4:be:60:cf:f3: 9b:a3:92:b8:cc:ae:e1:7a:f3:10:49:09:29:01:48:df:5d:b6: 9d:fc:c1:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRw/aWbCtAO1Us7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NDRjMmMwNGUtYWZkNC00NjI2LWI4MDktYjQ0OGQ5MmI1OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaPTZ5/Se1Kx79eCjod5+CwGqaArwxhayehk hfWobETsfUVpsNIPc4sXZ4JSefsh/YoDBgfkLZ8SHq2PVzXCyEbk153szgYEbtcz FuUv3sNdhpp5lr3o8UT0vv3fDpFX6p8T9EEZMG+V1d7s9LqvjqrxADx3v2fICkR/ 4s2dCbzyJoD5QkpHxlQyN1TuUWbJnrzo3JRQ5KP2PzXcYa254wRl2lFcDGBCJ12n PhIi5yjA3DRuf/DliAwvlLY10E0ZMaedbvA7FXMk2W3nPFHr9uDeTjK9GP1ciPny 3dRdBFu8i4tsROCV1VRi0AI8JhnTLeep1abtOVhrQFq5NGMeQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJnRuW02X4oa7awy3yQ7VsFkgLAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWEwYmNmMjktMTEyOC0z YjA1LThkMTItYWYyMjdlOWFkZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADi8MO+XZDGIDvK1Dis9ToBgNj5WDqzaDIs+YNc00b2MN4m50w+I rZyu6jdqAB77bA5ktqFPRyr+oUb9dMyDDCrvrvg2SjowthS9kfJjlTPDIMQ4OzZG AWGM/HyD+KVggZuxBbiU/t0ns2M7DrI4Vk1K2xawo3Tc7Dx4JneIK2QH1QycH2jP 5gsZVTuVn/Q9sxekArsI/qG8vIBh1r8XLLOWMTn76jsU8FSZY53tDsO7P/epDbIZ 1PZuC0RB1Br8wStKf1CQBKL/fgIhfgLHRoFOPe7gHFyJiZOvFMi0cJk9wLigERTk vmDP85ujkrjMruF68xBJCSkBSN9dtp38wUY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:17 2025 by rpki-client