$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa File: f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa (raw, json) Hash identifier: QsZs2+XAfwZ6SwcuehT3dOTIn+9bdCjGBgqbrKspXpI= Subject key identifier: 32:C9:D0:FD:53:15:26:0C:DA:BE:D0:A0:06:4D:AA:C3:A1:D9:B0:2F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246FF4D4B59B0512B4FA520 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397243 IP address blocks: 2610:a1:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ff:4d:4b:59:b0:51:2b:4f:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=72baf3dd-19a4-4a8f-9c86-f5a4eb6a92ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e1:f8:de:ca:55:ce:1b:da:65:14:dc:3a:c1: 47:89:8b:86:00:f9:fd:24:ad:52:3c:10:58:8b:7a: f2:fa:dd:2e:a9:dc:d9:c3:7d:c2:3e:a0:81:09:4b: 53:8f:a8:5f:50:c0:19:99:de:88:fd:80:6b:68:fb: 03:93:23:e6:55:d0:41:09:65:8d:8d:62:a4:48:98: 6d:49:8e:15:3a:d5:80:b4:81:09:90:b2:6e:71:95: e9:5a:d2:41:d2:90:06:25:f1:1a:89:0a:18:16:0e: 13:c8:19:df:db:67:94:db:e9:82:75:88:d2:6b:a3: 80:40:38:3a:58:32:a5:7f:2e:82:19:1b:d3:11:f5: dc:2f:81:ce:56:3f:ed:3d:12:01:46:fd:57:15:89: 8d:6d:0f:05:10:f6:2e:86:71:a6:82:20:cf:09:78: 75:50:83:ba:fe:fe:28:d2:db:93:70:a3:63:23:a9: d9:f4:d3:b6:9e:bc:33:97:7d:78:90:5b:54:c9:c7: 27:e4:38:93:ba:98:c4:be:38:57:a5:d5:41:e0:49: 4e:b4:75:d2:b1:82:74:d3:9b:45:30:5b:f7:59:30: 89:8a:1c:37:8f:73:8d:cc:8c:74:d8:ee:f5:18:86: 71:33:d5:07:ba:9f:0a:0b:92:f1:87:fd:ba:84:3f: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C9:D0:FD:53:15:26:0C:DA:BE:D0:A0:06:4D:AA:C3:A1:D9:B0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f1e6e30a-a029-3c26-862b-e2424aa0fa3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2610:a1:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:45:f5:eb:fb:99:8c:c5:89:63:db:5e:ad:ce:05:93:18:ea: e6:32:50:20:6e:3a:cf:2c:0f:3d:41:2b:a5:2f:3a:65:0b:3f: 4c:aa:0b:a1:ec:fd:95:2d:31:47:a5:98:54:61:1b:a7:75:ee: 09:83:7e:80:f6:d5:10:58:82:93:46:04:74:82:e1:1a:f3:70: d2:8b:f1:71:f7:95:8b:ea:87:02:af:c6:03:9e:f4:41:22:34: 8a:ff:cf:67:65:35:f3:ea:37:6a:9f:0f:5d:43:2d:77:d9:e6: 4e:43:dc:c6:d7:87:a9:aa:62:9b:9e:29:a6:18:3f:50:be:b2: 5f:d1:b6:d0:cf:25:74:f2:7a:c3:39:bc:5e:76:25:52:9c:d7: 2e:67:6e:14:0a:58:08:07:40:99:a7:40:91:48:cf:1f:9c:9b: 3c:36:3e:6d:26:df:50:c4:da:1d:96:e8:2b:aa:f2:42:3a:c3: ac:a4:dd:a0:70:ad:72:c0:bd:7f:51:c9:d2:1e:f2:60:bf:0c: e9:81:7c:18:1c:5d:18:a3:d7:05:07:8b:53:49:d9:16:5e:43: 91:1e:af:62:40:5b:2e:b2:c6:93:52:e4:83:6f:56:db:4c:e1: 4f:b1:24:7c:7b:91:95:e3:28:b7:31:04:98:14:69:21:02:61: 58:12:a6:fb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkSRv9NS1mwUStPpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NzJiYWYzZGQtMTlhNC00YThmLTljODYtZjVhNGViNmE5MmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+H43spVzhvaZRTcOsFHiYuGAPn9JK1SPBBY i3ry+t0uqdzZw33CPqCBCUtTj6hfUMAZmd6I/YBraPsDkyPmVdBBCWWNjWKkSJht SY4VOtWAtIEJkLJucZXpWtJB0pAGJfEaiQoYFg4TyBnf22eU2+mCdYjSa6OAQDg6 WDKlfy6CGRvTEfXcL4HOVj/tPRIBRv1XFYmNbQ8FEPYuhnGmgiDPCXh1UIO6/v4o 0tuTcKNjI6nZ9NO2nrwzl314kFtUyccn5DiTupjEvjhXpdVB4ElOtHXSsYJ005tF MFv3WTCJihw3j3ONzIx02O71GIZxM9UHup8KC5Lxh/26hD/vvwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDLJ0P1TFSYM2r7QoAZNqsOh2bAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjFlNmUzMGEtYTAyOS0z YzI2LTg2MmItZTI0MjRhYTBmYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoRAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIkX16/uZjMWJY9terc4Fkxjq5jJQIG46zywPPUErpS86ZQs/TKoL oez9lS0xR6WYVGEbp3XuCYN+gPbVEFiCk0YEdILhGvNw0ovxcfeVi+qHAq/GA570 QSI0iv/PZ2U18+o3ap8PXUMtd9nmTkPcxteHqapim54pphg/UL6yX9G20M8ldPJ6 wzm8XnYlUpzXLmduFApYCAdAmadAkUjPH5ybPDY+bSbfUMTaHZboK6ryQjrDrKTd oHCtcsC9f1HJ0h7yYL8M6YF8GBxdGKPXBQeLU0nZFl5DkR6vYkBbLrLGk1Lkg29W 20zhT7EkfHuRleMotzEEmBRpIQJhWBKm+w== -----END CERTIFICATE-----Generated at Sun Apr 27 14:13:45 2025 by rpki-client