$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67306a7f-1d74-332d-bae7-a0aab88aa0de.roa File: 67306a7f-1d74-332d-bae7-a0aab88aa0de.roa (raw, json) Hash identifier: ic3M9RQsOqhjAkA3UQpb3JvoLW5WDM1YgIzFoPNaYJE= Subject key identifier: 17:17:4E:F2:A5:DB:CB:A4:A3:81:53:75:FA:1F:0D:7D:95:4D:F8:B8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584912470988C4F0D41CD59CBC00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67306a7f-1d74-332d-bae7-a0aab88aa0de.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397229 IP address blocks: 2001:502:ad09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:09:88:c4:f0:d4:1c:d5:9c:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=aa036d2c-2745-4fdf-87e0-aaf89acc9ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:45:b8:7f:df:2e:5f:8a:c6:e2:f7:8e:1c: 4d:c1:b6:e2:65:95:30:12:68:ed:b9:20:f7:19:b0: 10:28:78:e6:c2:4b:a4:ab:88:f7:a8:26:07:cb:e2: 78:ea:14:0b:bd:71:64:32:7f:e2:a4:5e:68:cb:ca: 16:92:a7:4f:26:9d:9e:3a:e3:77:d3:0a:64:6c:c4: 2d:4a:ca:9a:d9:49:98:8f:36:71:1a:26:76:3e:76: ef:ff:1a:60:ed:af:7b:f8:16:ec:1d:c1:b6:21:90: 1c:7e:77:cb:9c:ce:51:1d:f3:53:c3:da:b2:50:16: f5:ae:1c:6e:9d:2b:dc:7d:0a:d6:45:0b:3d:e4:ab: 45:97:8b:04:8a:f5:c1:a5:4b:4f:0b:2f:0f:cb:b9: a3:6e:23:ed:99:cd:a1:62:04:c2:5a:c3:62:33:e6: 40:fb:42:70:2f:7e:75:39:de:58:a1:e1:0a:5c:c0: 42:10:d2:65:5d:a9:e0:5d:52:87:76:c8:4a:db:95: 64:8c:2b:6c:73:04:9f:67:75:44:42:95:e1:6e:c2: ed:be:bc:2a:e6:81:2d:f0:07:ab:a8:47:dd:8a:42: 25:57:0d:f4:58:2d:d0:a0:39:3f:d2:b3:ea:ce:5f: a9:97:82:fa:d1:7c:bd:c7:00:3e:da:80:d0:80:71: 9b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:17:4E:F2:A5:DB:CB:A4:A3:81:53:75:FA:1F:0D:7D:95:4D:F8:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67306a7f-1d74-332d-bae7-a0aab88aa0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:ad09::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f8:62:2f:07:69:2f:45:08:e9:e9:28:19:68:9a:44:1d:66: 3d:d9:55:78:3c:d8:82:bc:e3:7e:df:54:62:d4:a9:2a:4c:be: bc:52:f2:b7:c8:e0:ad:49:2e:85:08:43:e2:ab:2e:6b:99:87: 77:a2:53:ea:a8:35:51:49:80:6e:ef:dc:8b:9f:d2:c0:89:32: e2:42:44:3c:1a:55:d4:71:db:52:d5:70:6a:cb:d4:ea:3d:1f: 1d:9b:08:a2:f7:20:2d:94:08:eb:aa:d1:1e:77:24:86:35:6b: 91:b8:7b:25:bb:4b:b6:f8:f1:be:68:25:43:ce:ae:c5:9a:aa: 8c:07:39:d2:37:bf:3d:a4:07:aa:ec:a8:d8:82:20:40:df:11: 3e:5f:e8:66:67:d7:68:fa:ff:7a:f0:5f:06:ec:ed:30:8e:5e: 79:c2:e1:37:ca:c3:28:a9:08:4a:e5:0e:80:ac:01:0f:37:3c: f8:16:ad:a1:96:62:cf:c6:13:85:bd:06:39:83:b3:cc:c5:12: a2:6d:f0:f4:23:9d:e2:c6:3f:46:43:6b:4e:7e:47:e7:37:7d: ad:ce:17:ec:a0:cd:2e:b1:4b:e2:b4:2c:bd:bd:9e:ee:55:d1: 17:82:2a:27:14:a7:af:c3:64:d9:42:c2:45:96:d3:c2:51:68: 89:7e:bb:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwmIxPDUHNWcvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YWEwMzZkMmMtMjc0NS00ZmRmLTg3ZTAtYWFmODlhY2M5ZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtztFuH/fLl+KxuL3jhxNwbbiZZUwEmjtuSD3 GbAQKHjmwkukq4j3qCYHy+J46hQLvXFkMn/ipF5oy8oWkqdPJp2eOuN30wpkbMQt Ssqa2UmYjzZxGiZ2Pnbv/xpg7a97+BbsHcG2IZAcfnfLnM5RHfNTw9qyUBb1rhxu nSvcfQrWRQs95KtFl4sEivXBpUtPCy8Py7mjbiPtmc2hYgTCWsNiM+ZA+0JwL351 Od5YoeEKXMBCENJlXangXVKHdshK25VkjCtscwSfZ3VEQpXhbsLtvrwq5oEt8Aer qEfdikIlVw30WC3QoDk/0rPqzl+pl4L60Xy9xwA+2oDQgHGbjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBcXTvKl28uko4FTdfofDX2VTfi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjczMDZhN2YtMWQ3NC0z MzJkLWJhZTctYTBhYWI4OGFhMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAq0J MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE/4Yi8HaS9FCOnpKBlomkQdZj3ZVXg82IK8437fVGLUqSpMvrxS 8rfI4K1JLoUIQ+KrLmuZh3eiU+qoNVFJgG7v3Iuf0sCJMuJCRDwaVdRx21LVcGrL 1Oo9Hx2bCKL3IC2UCOuq0R53JIY1a5G4eyW7S7b48b5oJUPOrsWaqowHOdI3vz2k B6rsqNiCIEDfET5f6GZn12j6/3rwXwbs7TCOXnnC4TfKwyipCErlDoCsAQ83PPgW raGWYs/GE4W9BjmDs8zFEqJt8PQjneLGP0ZDa05+R+c3fa3OF+ygzS6xS+K0LL29 nu5V0ReCKicUp6/DZNlCwkWW08JRaIl+u2E= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:49 2025 by rpki-client