$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98d0e3e5-2cf9-3436-bcfe-b6e5cacf117a.roa File: 98d0e3e5-2cf9-3436-bcfe-b6e5cacf117a.roa (raw, json) Hash identifier: 53GPlZJeFRb4A6OMnVLgxXwDDme/6cfv7d2XYq2uiLA= Subject key identifier: D1:1F:B2:10:F6:DE:8F:FA:E3:45:E0:85:D6:5C:77:73:62:7A:75:62 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491246FDA113ADD3B7A35D6A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98d0e3e5-2cf9-3436-bcfe-b6e5cacf117a.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 12008 IP address blocks: 2610:a1:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:fd:a1:13:ad:d3:b7:a3:5d:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=be6c7d51-b6c7-49f3-8798-3c036c4fd359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:a5:08:34:ba:c4:71:47:25:0e:4b:fb:86: c6:2a:b2:7c:c2:5e:ac:33:cb:6d:53:4a:e1:a7:84: b6:2a:79:c0:7a:4d:6b:cd:27:3f:5f:af:df:88:d9: ee:94:e1:39:e4:f3:62:4c:44:5a:4a:15:fd:88:1d: 6a:b4:d3:07:bd:3f:bd:b5:43:e4:cb:60:2a:fc:25: e8:68:64:cb:82:09:a2:cd:7f:e3:2f:ad:ac:c7:c9: 9f:72:1f:6e:96:f0:08:72:39:1b:ea:f8:43:fe:be: a6:dc:f5:b0:67:cc:e7:c7:e0:00:2d:98:83:ff:08: 24:c6:ac:17:aa:e6:7d:b6:7e:f3:20:ad:8d:2f:8a: 8b:0f:0f:b2:8e:a2:f2:a1:4e:f8:e8:5f:79:e9:bf: 51:fa:13:a5:9f:2b:ec:4c:cf:e9:eb:1c:f3:66:8e: 74:61:95:b8:8e:33:9b:83:6c:9d:3f:4d:e4:e5:21: fd:46:fd:ee:dd:47:f1:a6:1e:11:0f:9d:ca:da:ad: f7:70:e4:80:64:b0:11:70:81:e2:1f:a9:aa:c9:d9: b5:57:06:a6:da:70:f4:41:8c:5e:21:d4:a2:25:be: a9:b5:bf:98:9b:31:84:d2:c6:f6:7e:ee:76:70:5e: 67:a9:6b:98:17:a8:65:4b:b9:1d:bc:97:b3:87:7b: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1F:B2:10:F6:DE:8F:FA:E3:45:E0:85:D6:5C:77:73:62:7A:75:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98d0e3e5-2cf9-3436-bcfe-b6e5cacf117a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2610:a1:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d6:f7:27:53:e8:2a:eb:a2:0f:b7:b4:89:26:4a:4f:f6:2e: 20:87:45:1d:f6:0b:7b:c8:3d:2e:98:39:81:bc:51:53:12:f6: b1:e6:45:6a:f7:15:3f:ed:23:64:36:b4:82:49:44:46:d0:5d: 60:5a:5d:81:12:0a:b8:79:22:e8:06:f9:be:23:40:a0:9d:af: 8b:74:c1:71:df:8d:5b:2d:d7:ca:d2:85:f0:0d:08:73:ed:b7: c6:50:e5:15:7c:13:85:6d:ed:d1:a9:2a:21:ba:8b:fa:88:f2: a0:fe:5d:95:3c:65:e8:72:72:12:27:1f:70:e8:14:9a:66:6a: 00:45:99:b2:e6:7f:df:0e:49:0f:a7:4c:bf:02:9f:4a:ad:81: 28:e8:df:ac:f4:29:e5:2d:5b:99:14:b0:f9:d6:f6:c7:83:a5: f0:b9:69:1e:66:2f:38:40:18:b5:bd:6d:6d:e1:85:d7:23:42: e0:f3:8d:71:9c:af:33:55:0b:55:85:1f:fb:72:49:74:a5:ce: 28:2a:03:bc:43:e9:98:ec:78:eb:86:58:48:f4:0d:14:e5:15: 9a:bd:77:45:40:12:c9:24:28:00:44:a1:30:ff:44:8b:81:62: db:05:9e:7e:31:9d:73:37:59:d1:04:e8:4f:d2:c4:5e:29:f3: cb:cc:ce:67 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkSRv2hE63Tt6NdagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmU2YzdkNTEtYjZjNy00OWYzLTg3OTgtM2MwMzZjNGZkMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0qlCDS6xHFHJQ5L+4bGKrJ8wl6sM8ttU0rh p4S2KnnAek1rzSc/X6/fiNnulOE55PNiTERaShX9iB1qtNMHvT+9tUPky2Aq/CXo aGTLggmizX/jL62sx8mfch9ulvAIcjkb6vhD/r6m3PWwZ8znx+AALZiD/wgkxqwX quZ9tn7zIK2NL4qLDw+yjqLyoU746F956b9R+hOlnyvsTM/p6xzzZo50YZW4jjOb g2ydP03k5SH9Rv3u3Ufxph4RD53K2q33cOSAZLARcIHiH6mqydm1Vwam2nD0QYxe IdSiJb6ptb+YmzGE0sb2fu52cF5nqWuYF6hlS7kdvJezh3tUXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNEfshD23o/640XghdZcd3NienViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOThkMGUzZTUtMmNmOS0z NDM2LWJjZmUtYjZlNWNhY2YxMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoRAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQ9b3J1PoKuuiD7e0iSZKT/YuIIdFHfYLe8g9Lpg5gbxRUxL2seZF avcVP+0jZDa0gklERtBdYFpdgRIKuHki6Ab5viNAoJ2vi3TBcd+NWy3XytKF8A0I c+23xlDlFXwThW3t0akqIbqL+ojyoP5dlTxl6HJyEicfcOgUmmZqAEWZsuZ/3w5J D6dMvwKfSq2BKOjfrPQp5S1bmRSw+db2x4Ol8LlpHmYvOEAYtb1tbeGF1yNC4PON cZyvM1ULVYUf+3JJdKXOKCoDvEPpmOx464ZYSPQNFOUVmr13RUASySQoAEShMP9E i4Fi2wWefjGdczdZ0QToT9LEXinzy8zOZw== -----END CERTIFICATE-----Generated at Sun Apr 6 18:12:52 2025 by rpki-client