$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba938988-b182-316a-a82e-b05596bbea07.roa File: ba938988-b182-316a-a82e-b05596bbea07.roa (raw, json) Hash identifier: VOP9XaY67FGRAJAR9/grkikcwLGyySOG7Il63Gn5htM= Subject key identifier: E2:EB:85:95:71:CE:89:F5:81:82:01:7F:EE:98:13:B6:02:9E:F4:2D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849124708CC12F7CB0CFCA58140 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba938988-b182-316a-a82e-b05596bbea07.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397217 IP address blocks: 2001:502:ad09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:08:cc:12:f7:cb:0c:fc:a5:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=8bca6a1c-1fca-4021-ac35-f7bdcc94f652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:62:12:26:27:23:32:18:1e:f9:6c:14:c3: 4a:59:d6:46:2c:57:55:8e:ba:8b:83:cf:98:75:d0: 34:da:9c:2a:ef:c6:dd:11:aa:03:57:7d:a9:c8:f9: cc:4d:03:68:9c:ff:66:fd:8e:f9:d5:1e:cf:57:00: d7:d5:6d:d4:78:7a:96:c5:0c:70:76:6d:eb:63:55: 96:05:02:b5:f3:83:66:32:ff:36:3e:1e:27:45:fc: 05:66:c6:79:6d:48:f4:a8:86:0b:4b:93:97:e7:1b: b4:e0:7e:a8:e4:67:29:7a:e2:aa:7c:2f:e1:2c:10: 9e:4d:d1:17:71:b0:0e:3a:70:df:9c:07:54:de:05: 65:38:34:2d:83:cd:98:2e:a8:48:12:67:02:68:76: 16:cf:31:00:05:be:8f:5b:9f:a3:64:96:52:cd:71: 23:31:f8:92:db:10:6b:db:fc:40:46:22:3c:f6:a3: 60:b0:b8:06:fe:6d:41:42:93:9d:79:1f:2d:0c:9b: 3a:fb:cf:84:29:84:2f:6b:f9:b6:f8:46:25:c0:52: be:b4:bd:79:96:35:f8:f7:79:e5:d6:b7:d7:be:b4: 3b:23:46:73:f6:65:7c:3b:37:d3:97:c7:74:98:68: 86:a2:b6:65:c0:ca:c9:8f:b4:b5:e9:aa:b7:1f:4f: c4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EB:85:95:71:CE:89:F5:81:82:01:7F:EE:98:13:B6:02:9E:F4:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba938988-b182-316a-a82e-b05596bbea07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:ad09::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:26:e3:81:7f:b3:f4:52:52:48:92:6e:dd:e9:68:02:f0:7f: ae:53:b7:b8:3b:d8:6c:1b:16:1f:cb:b4:34:21:50:aa:a0:e0: 5c:24:f9:57:0e:b8:7c:0c:0a:18:5e:c6:4e:c0:07:42:dc:0e: f5:84:45:e5:d6:84:63:66:4e:04:c9:d7:17:84:77:eb:fd:fb: 67:05:e2:84:71:9f:72:61:76:a4:b9:11:f2:20:be:e8:9b:ac: f0:8d:86:d3:9f:90:f1:cb:c0:86:e8:ba:14:54:05:b7:d6:0c: ba:cf:60:56:f7:38:33:58:db:1b:96:4e:61:ba:29:09:f9:9d: c5:79:5b:67:52:3c:5e:bb:6b:4f:0c:5e:a0:4f:e8:58:1f:cc: 8f:4b:99:68:ee:a3:32:f7:76:91:75:4e:1f:bf:2f:91:4d:a0: 4e:25:2b:39:fc:f2:78:54:05:f6:34:cf:ef:2d:71:38:92:3d: e9:7b:b2:a3:6d:e8:a3:a7:c4:2d:9f:14:7e:0e:c0:94:2c:5c: 3d:d3:50:8d:d6:c4:45:21:10:cd:34:a3:5d:b7:b6:f0:07:30: da:ca:9f:47:df:88:5a:d9:1a:91:e6:bf:2c:7e:80:a7:e6:48: 42:65:d1:85:85:41:96:fa:d1:f5:0d:92:41:07:80:b9:71:fa: f8:f8:20:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwjMEvfLDPylgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OGJjYTZhMWMtMWZjYS00MDIxLWFjMzUtZjdiZGNjOTRmNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX1iEiYnIzIYHvlsFMNKWdZGLFdVjrqLg8+Y ddA02pwq78bdEaoDV32pyPnMTQNonP9m/Y751R7PVwDX1W3UeHqWxQxwdm3rY1WW BQK184NmMv82Ph4nRfwFZsZ5bUj0qIYLS5OX5xu04H6o5GcpeuKqfC/hLBCeTdEX cbAOOnDfnAdU3gVlODQtg82YLqhIEmcCaHYWzzEABb6PW5+jZJZSzXEjMfiS2xBr 2/xARiI89qNgsLgG/m1BQpOdeR8tDJs6+8+EKYQva/m2+EYlwFK+tL15ljX493nl 1rfXvrQ7I0Zz9mV8OzfTl8d0mGiGorZlwMrJj7S16aq3H0/ETwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLrhZVxzon1gYIBf+6YE7YCnvQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmE5Mzg5ODgtYjE4Mi0z MTZhLWE4MmUtYjA1NTk2YmJlYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAq0J MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIAm44F/s/RSUkiSbt3paALwf65Tt7g72GwbFh/LtDQhUKqg4Fwk +VcOuHwMChhexk7AB0LcDvWEReXWhGNmTgTJ1xeEd+v9+2cF4oRxn3JhdqS5EfIg vuibrPCNhtOfkPHLwIbouhRUBbfWDLrPYFb3ODNY2xuWTmG6KQn5ncV5W2dSPF67 a08MXqBP6FgfzI9LmWjuozL3dpF1Th+/L5FNoE4lKzn88nhUBfY0z+8tcTiSPel7 sqNt6KOnxC2fFH4OwJQsXD3TUI3WxEUhEM00o123tvAHMNrKn0ffiFrZGpHmvyx+ gKfmSEJl0YWFQZb60fUNkkEHgLlx+vj4ILQ= -----END CERTIFICATE-----Generated at Sun Apr 6 19:18:18 2025 by rpki-client