$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa File: 9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa (raw, json) Hash identifier: VdTH0Zxm5wnCJviEXRcov4iQCc4q8LUe2OBe2v0LDZc= Subject key identifier: E8:C6:1F:B4:90:36:B2:6E:95:7D:86:5E:43:A5:68:45:17:43:FF:C5 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584912470544FA71A925A7CB1980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397221 IP address blocks: 2001:502:2eda::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:05:44:fa:71:a9:25:a7:cb:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=e8bed0c1-5fa0-4c58-ac91-14d88ca65c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:2c:85:91:1c:24:0f:fa:a7:07:c0:c9:37: ae:de:0a:2f:d1:05:3c:72:57:8e:91:55:ae:87:32: 81:eb:2c:a0:f6:fe:57:9a:ad:1f:08:00:f8:a2:76: c6:38:66:58:13:c2:d9:c2:bf:90:15:3a:82:2e:1e: 2f:73:53:1d:74:43:58:d6:6d:8f:db:97:34:4d:7d: 1a:78:5f:95:ce:53:d7:aa:1a:4f:eb:fb:8d:38:7d: 2c:fa:30:2d:9e:7e:e1:7f:c9:08:a7:26:a6:27:dd: 6b:bc:2b:16:4d:17:61:63:b1:c4:e8:81:21:fa:22: 08:75:d2:8d:f3:28:b7:cc:e2:76:a5:7b:a8:8d:92: cc:27:94:11:d7:02:9c:dc:65:c6:3f:ea:f3:1a:8d: 1e:cf:4b:1a:01:74:a5:93:98:eb:c8:62:1c:3e:57: a9:be:c3:9d:13:61:95:d0:a7:ed:fb:e0:ab:a2:9e: e1:b9:83:d4:f3:2f:f2:cf:d0:b1:b3:42:fd:1d:7b: 09:28:e8:55:ce:30:d2:8f:4f:78:c3:d9:cc:6a:9b: 5f:44:8d:3d:40:a9:f5:c0:b0:e6:85:c4:c8:b1:5f: cd:db:1a:aa:a0:cc:ed:9f:0e:fb:bc:3b:44:0d:fa: fd:3b:56:62:b6:3e:38:d3:c1:35:17:37:94:8c:4e: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C6:1F:B4:90:36:B2:6E:95:7D:86:5E:43:A5:68:45:17:43:FF:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:2eda::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:09:ac:3c:f4:47:1f:a2:4c:ff:8b:8c:55:1a:ec:3c:2a:8e: f7:8c:f4:d2:05:37:9c:37:66:39:54:3d:de:17:3b:c8:c2:4f: 7e:37:0a:05:e1:a6:d0:c1:27:e4:cf:9e:43:31:2e:45:fd:52: 74:d9:78:63:af:3e:4c:3f:85:38:ab:a2:a7:6b:39:49:a5:a9: 25:82:88:01:62:c5:25:7c:1c:1a:28:1a:99:d6:cb:11:fe:8b: cf:a3:83:d8:94:35:f4:1b:b9:ce:7b:1a:05:6a:df:51:ad:5d: 8d:2c:f7:50:cf:1f:d9:f4:7b:d0:7f:27:18:d7:20:1e:78:8e: 49:a9:e6:03:90:81:b8:be:9b:cb:b7:71:8e:60:6c:29:0a:5e: dc:b8:50:fc:bd:7a:5c:e5:9f:05:cf:45:6a:15:e6:ca:ed:b6: 7e:cd:e1:dd:17:22:d4:e8:5f:81:9c:d1:8b:65:17:95:58:ca: de:81:33:e5:39:30:5c:00:b5:e9:88:99:3b:8b:0f:26:24:3a: aa:29:ce:8e:22:a9:0c:dd:3f:1d:91:04:83:72:6a:b5:37:c9: fc:72:cb:f0:88:69:a3:eb:5a:de:8f:eb:a4:1b:3b:1d:e9:3e: aa:f7:14:20:0c:58:54:66:33:d1:3c:46:9e:41:5c:cf:ff:a4: 0d:a8:93:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwVE+nGpJafLGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZThiZWQwYzEtNWZhMC00YzU4LWFjOTEtMTRkODhjYTY1YzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/gshZEcJA/6pwfAyTeu3gov0QU8cleOkVWu hzKB6yyg9v5Xmq0fCAD4onbGOGZYE8LZwr+QFTqCLh4vc1MddENY1m2P25c0TX0a eF+VzlPXqhpP6/uNOH0s+jAtnn7hf8kIpyamJ91rvCsWTRdhY7HE6IEh+iIIddKN 8yi3zOJ2pXuojZLMJ5QR1wKc3GXGP+rzGo0ez0saAXSlk5jryGIcPlepvsOdE2GV 0Kft++Crop7huYPU8y/yz9Cxs0L9HXsJKOhVzjDSj094w9nMaptfRI09QKn1wLDm hcTIsV/N2xqqoMztnw77vDtEDfr9O1Zitj4408E1FzeUjE4mGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOjGH7SQNrJulX2GXkOlaEUXQ//FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWZmYWQ5YjctZTc3NC0z ZGI0LWFkNjctZTBjNTZkMzU5NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEEJrDz0Rx+iTP+LjFUa7DwqjveM9NIFN5w3ZjlUPd4XO8jCT343 CgXhptDBJ+TPnkMxLkX9UnTZeGOvPkw/hTiroqdrOUmlqSWCiAFixSV8HBooGpnW yxH+i8+jg9iUNfQbuc57GgVq31GtXY0s91DPH9n0e9B/JxjXIB54jkmp5gOQgbi+ m8u3cY5gbCkKXty4UPy9elzlnwXPRWoV5srttn7N4d0XItToX4Gc0YtlF5VYyt6B M+U5MFwAtemImTuLDyYkOqopzo4iqQzdPx2RBINyarU3yfxyy/CIaaPrWt6P66Qb Ox3pPqr3FCAMWFRmM9E8Rp5BXM//pA2ok3c= -----END CERTIFICATE-----Generated at Sun Apr 6 04:40:43 2025 by rpki-client