$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa File: 02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa (raw, json) Hash identifier: esBXjBReiuYl4jT079Z86HkgeuSYY92/XB0EEgkswx0= Subject key identifier: BA:E8:91:98:9B:4D:6F:A2:D3:36:70:A2:D5:50:29:FC:BE:08:85:76 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491247100F8212C2D30795D200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397215 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:10:0f:82:12:c2:d3:07:95:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=eeaf1b87-6dee-46fb-86b7-1d32401f8c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:7a:a6:3d:b6:72:02:21:2a:df:3b:2c:44: e8:d3:23:3d:2c:9b:9c:f4:79:ba:26:10:ae:f4:3a: 11:5a:7f:46:31:bf:ab:e4:73:91:81:a1:14:1a:e0: b2:26:5c:fc:29:55:42:d0:11:b1:cd:e6:e6:26:19: ad:f2:22:07:c2:ae:d6:0f:ae:85:0f:63:2b:52:ca: 53:9e:35:47:b0:7f:35:6f:dd:e9:70:bc:69:2d:0c: 19:82:29:8f:03:ab:69:d5:9d:d2:7d:04:37:0d:3e: 6e:26:59:ff:bb:b9:d2:6c:bf:ef:65:f9:8b:fb:6c: 9e:a3:53:a9:db:3e:57:e5:d6:b7:8c:76:d9:8d:4c: 7e:8c:9a:0e:5a:ff:49:79:6f:84:1d:b5:ac:3b:8c: 01:ab:c5:73:e9:58:15:25:8f:96:dd:85:cd:42:d3: cf:b8:a4:03:34:0d:0a:01:70:20:d0:7a:2a:63:de: db:a5:3e:fb:b0:b1:53:bc:f5:c3:99:f3:42:d6:81: c6:99:eb:12:58:7f:d1:04:1b:57:4e:72:a1:f8:ad: 17:d2:85:9e:56:9c:0f:b1:6d:58:37:4f:8a:35:21: 5d:cc:a9:06:e1:99:82:dc:46:28:11:27:69:ba:0d: c7:23:18:dd:c2:6e:d9:80:06:2e:fe:1d:fc:79:04: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E8:91:98:9B:4D:6F:A2:D3:36:70:A2:D5:50:29:FC:BE:08:85:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:49:d5:ca:d1:00:0c:1e:e8:ca:9a:49:4a:f4:ca:3f:f1:f5: 99:95:68:48:de:f6:66:44:5e:36:8a:df:bd:0a:7e:c4:45:dd: 8e:30:c7:0d:f4:6d:36:86:b7:f8:b1:d1:bf:7a:83:33:93:96: 4d:54:41:b7:c3:4b:52:38:cb:fd:20:dc:14:74:67:ee:42:db: 5d:b1:24:b5:3e:ca:52:09:1a:f7:d3:1a:30:98:0f:5b:32:38: 5f:ef:be:08:45:48:2f:43:11:e2:13:bd:4b:99:b5:00:79:7d: a8:31:59:1a:77:16:ca:26:0f:e0:ce:68:47:ad:96:f5:8d:a2: 90:a7:9c:98:42:2c:28:9a:25:f9:16:bb:d2:cd:e0:46:90:27: 80:0a:3f:99:4f:6b:04:38:eb:b0:33:96:dc:1d:b1:84:7d:a5: 48:10:d4:3a:db:14:47:dc:4b:86:2d:c0:09:71:af:b5:b6:2d: 82:a9:f0:66:df:36:b5:44:33:23:a9:f1:78:b8:ba:96:4f:97: 3e:ce:5f:bf:f1:9b:0f:88:84:c8:1b:94:8f:c5:59:25:6c:52: 31:91:0f:c8:db:89:2d:3b:9b:7f:a1:6b:28:76:31:d0:67:30: 75:43:f3:c0:0e:ed:87:32:2f:4d:dc:74:56:ff:08:49:8a:f2: fd:53:ec:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRxAPghLC0weV0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZWVhZjFiODctNmRlZS00NmZiLTg2YjctMWQzMjQwMWY4YzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KV6pj22cgIhKt87LETo0yM9LJuc9Hm6JhCu 9DoRWn9GMb+r5HORgaEUGuCyJlz8KVVC0BGxzebmJhmt8iIHwq7WD66FD2MrUspT njVHsH81b93pcLxpLQwZgimPA6tp1Z3SfQQ3DT5uJln/u7nSbL/vZfmL+2yeo1Op 2z5X5da3jHbZjUx+jJoOWv9JeW+EHbWsO4wBq8Vz6VgVJY+W3YXNQtPPuKQDNA0K AXAg0HoqY97bpT77sLFTvPXDmfNC1oHGmesSWH/RBBtXTnKh+K0X0oWeVpwPsW1Y N0+KNSFdzKkG4ZmC3EYoESdpug3HIxjdwm7ZgAYu/h38eQSYBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLrokZibTW+i0zZwotVQKfy+CIV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDJhOWQ3NDctYjBkZi0z ZWY4LTlkNGEtOWE2NzM0MzYzNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAJJ1crRAAwe6MqaSUr0yj/x9ZmVaEje9mZEXjaK370KfsRF3Y4w xw30bTaGt/ix0b96gzOTlk1UQbfDS1I4y/0g3BR0Z+5C212xJLU+ylIJGvfTGjCY D1syOF/vvghFSC9DEeITvUuZtQB5fagxWRp3FsomD+DOaEetlvWNopCnnJhCLCia JfkWu9LN4EaQJ4AKP5lPawQ467AzltwdsYR9pUgQ1DrbFEfcS4YtwAlxr7W2LYKp 8GbfNrVEMyOp8Xi4upZPlz7OX7/xmw+IhMgblI/FWSVsUjGRD8jbiS07m3+hayh2 MdBnMHVD88AO7YcyL03cdFb/CEmK8v1T7I4= -----END CERTIFICATE-----Generated at Sun Apr 6 11:46:40 2025 by rpki-client