$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9d012b17-b11b-3687-8057-e5e651029aba.roa File: 9d012b17-b11b-3687-8057-e5e651029aba.roa (raw, json) Hash identifier: 5fYDKCvurkuW+naM0QUgOV6imZ4zkPoKil5XkK1py+0= Subject key identifier: 70:A5:C1:16:62:46:34:CE:D8:11:3D:24:FE:BC:58:EE:74:B1:8D:26 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849124707C2784CB61AD8ED5940 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9d012b17-b11b-3687-8057-e5e651029aba.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397232 IP address blocks: 2001:502:4612::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:07:c2:78:4c:b6:1a:d8:ed:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=abbfa8ab-af62-4a13-afb8-426cc91251a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:17:42:1d:f8:e1:64:46:7c:b8:43:59:65: ab:3e:f3:d6:2d:4c:d0:e5:9c:b6:f3:1e:b5:5e:a0: f5:43:cc:84:a1:87:15:e2:8f:82:60:10:ba:8c:5c: 6f:94:d4:18:59:29:17:a3:98:d1:a1:26:f0:5c:3a: e0:cf:18:cd:c1:89:d0:32:49:a9:85:40:d2:29:56: 8f:73:71:6f:7f:8b:8e:53:d9:d6:cf:80:09:13:1f: 77:3e:4e:54:c8:ba:97:2f:f8:83:ec:a8:df:56:f2: 9d:23:c8:93:e2:53:51:16:aa:d6:e8:d3:1d:8c:51: d9:a0:28:a2:0f:21:c7:fa:8a:3b:c7:d7:6a:d5:6e: 7a:7b:67:db:5a:c0:d7:c4:a5:35:1c:16:1c:14:57: 00:eb:00:4a:7f:b4:da:5e:8b:23:20:c0:16:4d:1c: 0d:74:97:c7:df:86:6a:84:af:10:a7:44:90:4a:46: bb:a1:ad:13:99:96:08:b1:f9:37:0a:7a:7e:b9:2a: 4c:15:c5:84:01:31:45:50:42:73:94:be:74:3c:0a: 9b:5b:b1:5d:79:52:51:48:83:06:f7:31:92:8c:97: 56:93:e2:33:ff:aa:5b:93:d2:d6:34:28:41:51:2f: 1a:9f:5d:8d:6e:98:58:9b:fe:e2:0f:90:7b:44:a5: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A5:C1:16:62:46:34:CE:D8:11:3D:24:FE:BC:58:EE:74:B1:8D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9d012b17-b11b-3687-8057-e5e651029aba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:4612::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d1:0d:8a:61:cf:4a:1c:00:7b:3f:ec:7a:31:b1:bb:27:82: 4d:17:56:e2:af:51:68:98:17:04:3c:c6:c8:17:33:fc:b4:de: 01:05:e0:35:f7:c4:1c:f9:cf:3f:1c:21:56:5d:e9:fa:92:6f: 49:0c:a6:57:1f:77:8b:c0:5b:de:5a:f1:c8:69:16:92:ce:21: 1d:59:8c:3b:89:eb:93:5d:30:0a:78:c0:c6:da:28:c7:1d:3c: f7:50:c0:5c:90:fc:06:34:4c:7a:a1:b2:eb:e4:d3:b8:3e:a9: 4b:0e:b2:93:6a:e9:cc:a3:06:09:4a:ec:d2:3c:e2:f6:f8:d2: dd:59:82:ac:2c:93:80:22:74:ad:5f:29:55:da:66:47:6d:9e: 4d:f4:cf:d3:d5:79:86:93:53:1a:fd:21:f3:ee:fd:60:e1:ff: c7:4d:6a:a5:fe:77:fc:8b:3a:0f:a8:45:26:d5:1d:ec:5c:e2: 14:82:55:25:4b:89:fd:54:16:01:fc:37:9a:d4:d5:27:85:b8: 36:4f:3b:ec:9f:29:6b:7f:43:5f:38:3f:4d:d0:18:3b:38:39: 82:8d:b7:c3:90:65:b9:32:a9:99:fa:40:0d:c5:07:c6:1e:c9: f7:4b:70:5f:02:f2:05:fa:00:6c:8a:80:4a:d6:ea:97:93:fe: c2:f3:0b:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwfCeEy2GtjtWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YWJiZmE4YWItYWY2Mi00YTEzLWFmYjgtNDI2Y2M5MTI1MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5UXQh344WRGfLhDWWWrPvPWLUzQ5Zy28x61 XqD1Q8yEoYcV4o+CYBC6jFxvlNQYWSkXo5jRoSbwXDrgzxjNwYnQMkmphUDSKVaP c3Fvf4uOU9nWz4AJEx93Pk5UyLqXL/iD7KjfVvKdI8iT4lNRFqrW6NMdjFHZoCii DyHH+oo7x9dq1W56e2fbWsDXxKU1HBYcFFcA6wBKf7TaXosjIMAWTRwNdJfH34Zq hK8Qp0SQSka7oa0TmZYIsfk3Cnp+uSpMFcWEATFFUEJzlL50PAqbW7FdeVJRSIMG 9zGSjJdWk+Iz/6pbk9LWNChBUS8an12NbphYm/7iD5B7RKUY2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHClwRZiRjTO2BE9JP68WO50sY0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWQwMTJiMTctYjExYi0z Njg3LTgwNTctZTVlNjUxMDI5YWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAkYS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHnRDYphz0ocAHs/7Hoxsbsngk0XVuKvUWiYFwQ8xsgXM/y03gEF 4DX3xBz5zz8cIVZd6fqSb0kMplcfd4vAW95a8chpFpLOIR1ZjDuJ65NdMAp4wMba KMcdPPdQwFyQ/AY0THqhsuvk07g+qUsOspNq6cyjBglK7NI84vb40t1Zgqwsk4Ai dK1fKVXaZkdtnk30z9PVeYaTUxr9IfPu/WDh/8dNaqX+d/yLOg+oRSbVHexc4hSC VSVLif1UFgH8N5rU1SeFuDZPO+yfKWt/Q184P03QGDs4OYKNt8OQZbkyqZn6QA3F B8YeyfdLcF8C8gX6AGyKgErW6peT/sLzC0g= -----END CERTIFICATE-----Generated at Sun Apr 6 20:46:43 2025 by rpki-client