$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28d37e76-f5f4-3425-89df-6ccdb745f465.roa File: 28d37e76-f5f4-3425-89df-6ccdb745f465.roa (raw, json) Hash identifier: lHIM+5o5LDJCCXGFuk0fp87y+ylqrhfI9wXmT4/1S4s= Subject key identifier: 84:B8:C2:55:96:65:11:9D:F0:F9:48:D2:4D:4C:44:49:02:1C:32:CC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491247021CAD1C18122F443140 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28d37e76-f5f4-3425-89df-6ccdb745f465.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397228 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:02:1c:ad:1c:18:12:2f:44:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=7dedeac8-decc-4ce0-b3a8-a64fd009a6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:27:77:94:3a:00:8f:d6:e7:7e:4d:d3:03:21: 99:c4:78:32:61:bd:bf:34:30:8e:80:f2:5e:8d:e5: 31:ae:1a:aa:12:e9:70:7d:4b:91:fd:56:9e:c3:38: 68:10:50:6a:08:4c:8d:1a:7c:a8:83:af:65:41:f5: 8f:4d:d4:ed:68:94:a6:3d:d1:c4:2d:e3:3c:be:a4: 2a:8d:05:d5:15:c2:a0:89:ab:31:70:d1:df:66:af: f9:39:8a:c2:f8:b7:61:a7:87:ad:b9:ee:62:28:d5: c4:8c:bf:a0:33:38:95:ed:44:d2:1b:6b:9a:66:3a: 7b:c5:e7:de:00:4f:73:27:48:40:f1:63:e0:49:dd: 16:62:71:11:91:4c:fc:2d:13:f9:1b:8a:06:00:7e: 67:e5:f5:3a:d2:44:5a:a2:18:4d:4b:f7:3a:bc:d1: 8c:13:2c:c4:23:ea:af:52:46:94:d7:d9:2b:79:7b: 0d:47:61:ad:db:50:22:72:42:78:26:87:cd:50:2c: e0:7a:94:0f:4e:f4:6b:6b:e3:6e:c9:2a:3e:35:37: 39:ff:4f:3d:b0:88:ab:46:f4:49:76:c4:33:57:74: 7a:22:90:1b:ea:54:c7:a0:f0:e6:3b:68:fc:6f:e6: ce:59:d1:c0:21:b7:79:b4:11:30:f8:d3:05:7d:b2: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B8:C2:55:96:65:11:9D:F0:F9:48:D2:4D:4C:44:49:02:1C:32:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28d37e76-f5f4-3425-89df-6ccdb745f465.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:79:35:c8:dc:54:35:dc:55:46:e9:27:ce:37:a5:b8:b0:de: db:54:cf:51:3d:32:29:db:e7:57:99:03:3b:95:d1:80:cc:ea: 53:2a:1f:12:86:28:a8:67:a5:3d:ce:ca:7d:f0:c0:f5:d4:0d: 36:4a:6a:a2:96:71:00:72:cb:ee:42:62:5d:e9:67:2c:13:f5: f6:66:ec:82:83:b7:74:1d:cb:43:b8:49:8b:9d:54:05:bd:42: 0d:63:26:5f:4b:a4:ae:51:e7:ab:5a:9c:ec:60:35:e7:99:9c: ac:a6:21:44:8a:d1:74:5d:2f:3c:5c:27:95:e1:9a:e6:51:6b: f8:e0:04:8c:0c:b3:69:34:59:9a:e1:7a:d7:ac:b7:e6:df:7d: 50:b9:a2:68:6c:ea:d7:bb:69:d5:15:ef:ee:6c:d5:d7:82:c8: 42:84:c7:5e:aa:a0:69:17:44:cc:79:10:45:a6:6c:7e:12:a8: 3f:ea:66:03:75:69:7c:3f:28:ec:26:35:27:3c:7f:72:b7:ee: ca:a9:29:5c:a3:8b:5b:3c:23:af:a6:a2:b7:0b:cf:ec:a6:9d: 38:1c:b9:93:93:73:d1:5d:7d:f6:5b:60:fa:14:22:33:ae:16: 8d:0a:fd:97:77:ea:19:82:fe:a4:c7:fc:0a:c2:f7:93:6c:cc: 43:98:19:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwIcrRwYEi9EMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk N2RlZGVhYzgtZGVjYy00Y2UwLWIzYTgtYTY0ZmQwMDlhNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCd3lDoAj9bnfk3TAyGZxHgyYb2/NDCOgPJe jeUxrhqqEulwfUuR/VaewzhoEFBqCEyNGnyog69lQfWPTdTtaJSmPdHELeM8vqQq jQXVFcKgiasxcNHfZq/5OYrC+Ldhp4etue5iKNXEjL+gMziV7UTSG2uaZjp7xefe AE9zJ0hA8WPgSd0WYnERkUz8LRP5G4oGAH5n5fU60kRaohhNS/c6vNGMEyzEI+qv UkaU19kreXsNR2Gt21AickJ4JofNUCzgepQPTvRra+NuySo+NTc5/089sIirRvRJ dsQzV3R6IpAb6lTHoPDmO2j8b+bOWdHAIbd5tBEw+NMFfbILzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIS4wlWWZRGd8PlI0k1MREkCHDLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjhkMzdlNzYtZjVmNC0z NDI1LTg5ZGYtNmNjZGI3NDVmNDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADN5NcjcVDXcVUbpJ843pbiw3ttUz1E9Minb51eZAzuV0YDM6lMq HxKGKKhnpT3Oyn3wwPXUDTZKaqKWcQByy+5CYl3pZywT9fZm7IKDt3Qdy0O4SYud VAW9Qg1jJl9LpK5R56tanOxgNeeZnKymIUSK0XRdLzxcJ5XhmuZRa/jgBIwMs2k0 WZrhetest+bffVC5omhs6te7adUV7+5s1deCyEKEx16qoGkXRMx5EEWmbH4SqD/q ZgN1aXw/KOwmNSc8f3K37sqpKVyji1s8I6+morcLz+ymnTgcuZOTc9FdffZbYPoU IjOuFo0K/Zd36hmC/qTH/ArC95NszEOYGYw= -----END CERTIFICATE-----Generated at Sun Apr 6 09:57:47 2025 by rpki-client