$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa File: 2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa (raw, json) Hash identifier: NZumIOQHrBayPALJHLe0Rg/R9cfM61gGEd2vEVyVYnA= Subject key identifier: 02:7F:63:48:02:E4:8E:B5:86:78:74:45:35:D1:0F:D5:2E:C0:E1:09 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246FE480900C78621CD6200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397224 IP address blocks: 2610:a1:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:fe:48:09:00:c7:86:21:cd:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=931ea11e-10e0-4a3c-be0a-d2d25be898cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:69:44:d3:c4:f6:67:0b:a8:7e:df:d1:51: a6:61:6b:7f:5e:d6:62:16:f3:05:62:e8:08:74:b0: 5a:98:d5:f9:b6:f9:d0:50:9a:11:55:9d:71:90:0e: 09:4c:71:10:86:4a:ea:cf:bc:59:1e:ed:44:fd:65: 6b:75:12:c0:ef:fd:fe:4e:ab:62:89:94:b0:7b:3a: bc:94:47:fa:ed:b5:da:c6:00:fc:25:e2:27:45:fc: 94:b9:8e:07:36:27:1a:73:f2:c0:82:a4:4b:95:55: 77:03:2f:99:ac:23:24:5c:d5:f6:29:a8:46:5f:94: 0e:80:00:53:ae:3c:da:d6:58:0b:c7:5d:ca:e9:29: ce:c4:ac:09:75:53:79:03:4d:53:6b:71:56:86:3b: 8a:23:36:a9:22:21:58:7a:7f:64:98:38:ca:b5:0e: f0:5b:15:53:01:20:b9:00:78:ed:55:6c:63:4f:37: 2f:74:28:eb:0e:9b:93:8a:e5:d5:47:3c:75:2c:f8: 60:1f:b3:7b:32:f2:79:f6:cc:c9:c9:12:1f:d7:92: 03:fe:0e:fb:03:b3:45:fa:bd:f0:1e:34:a4:80:a3: 25:9f:ed:d0:3d:59:f5:a6:fa:a0:9e:5d:4d:94:8a: 0a:54:54:fd:12:f3:d7:8c:3d:56:4e:49:37:ce:15: c8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7F:63:48:02:E4:8E:B5:86:78:74:45:35:D1:0F:D5:2E:C0:E1:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2610:a1:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:37:1d:6b:9a:92:c6:5c:71:ad:48:00:14:2b:3b:e7:07:81: da:56:d3:44:bb:cc:2f:09:dd:b8:b7:e7:ce:bd:b8:2d:19:f1: 83:1d:fa:b1:31:4c:cc:90:32:43:45:76:f5:88:42:02:b1:9e: cd:35:36:5f:7f:f7:d6:ee:3c:35:a1:50:cf:b2:5a:36:99:5a: 30:e9:d3:29:ad:f7:cd:6b:58:d2:c8:8a:33:44:ec:62:4f:2f: 81:8e:ff:5f:d0:13:36:9e:92:7e:d8:b4:af:65:e7:92:d7:fa: d5:25:5d:92:65:fa:7e:83:e1:0d:70:24:ed:80:a9:1a:0b:3b: 70:5a:88:fc:3b:bf:71:f6:db:8c:f2:95:3f:80:66:72:dd:dd: 01:d9:38:32:c2:ff:e3:09:d9:c2:35:45:9a:cc:a6:63:86:ba: 0a:68:32:1f:74:a3:81:cc:92:df:d6:6c:52:ed:18:e0:23:d9: 3d:34:06:70:d3:01:a4:cb:4d:57:05:94:9a:c3:93:a9:e3:c8: d0:b8:d6:be:92:15:3b:d0:09:be:6c:75:da:d8:ba:af:b0:69: 4b:d0:8f:8b:ac:2a:e0:7c:8c:10:29:60:69:b8:b9:c7:c4:e8: c7:e6:2f:92:e9:f7:5e:e1:06:02:bc:45:d2:d8:74:57:ec:83: 80:d7:85:15 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkSRv5ICQDHhiHNYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OTMxZWExMWUtMTBlMC00YTNjLWJlMGEtZDJkMjViZTg5OGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02FpRNPE9mcLqH7f0VGmYWt/XtZiFvMFYugI dLBamNX5tvnQUJoRVZ1xkA4JTHEQhkrqz7xZHu1E/WVrdRLA7/3+TqtiiZSwezq8 lEf67bXaxgD8JeInRfyUuY4HNicac/LAgqRLlVV3Ay+ZrCMkXNX2KahGX5QOgABT rjza1lgLx13K6SnOxKwJdVN5A01Ta3FWhjuKIzapIiFYen9kmDjKtQ7wWxVTASC5 AHjtVWxjTzcvdCjrDpuTiuXVRzx1LPhgH7N7MvJ59szJyRIf15ID/g77A7NF+r3w HjSkgKMln+3QPVn1pvqgnl1NlIoKVFT9EvPXjD1WTkk3zhXI5QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAJ/Y0gC5I61hnh0RTXRD9UuwOEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjQ4OGFjOGYtNmU4NS0z ZTlhLTk0OTUtNTJmY2EyZWViNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoRAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKTcda5qSxlxxrUgAFCs75weB2lbTRLvMLwnduLfnzr24LRnxgx36 sTFMzJAyQ0V29YhCArGezTU2X3/31u48NaFQz7JaNplaMOnTKa33zWtY0siKM0Ts Yk8vgY7/X9ATNp6Sfti0r2Xnktf61SVdkmX6foPhDXAk7YCpGgs7cFqI/Du/cfbb jPKVP4Bmct3dAdk4MsL/4wnZwjVFmsymY4a6CmgyH3SjgcyS39ZsUu0Y4CPZPTQG cNMBpMtNVwWUmsOTqePI0LjWvpIVO9AJvmx12ti6r7BpS9CPi6wq4HyMEClgabi5 x8Tox+Yvkun3XuEGArxF0th0V+yDgNeFFQ== -----END CERTIFICATE-----Generated at Sun Apr 6 09:45:17 2025 by rpki-client