$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bda2ec36-1e27-350f-8d39-3e8edc39e649.roa File: bda2ec36-1e27-350f-8d39-3e8edc39e649.roa (raw, json) Hash identifier: 6xU8fk90WHqIrpjU3+mzOcvepqml3tVA2RJEK0PsMu0= Subject key identifier: 47:F8:70:E8:AD:3B:61:96:CD:E7:6F:92:D3:38:7E:1F:A6:B6:67:C6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584925B3B954A084B871D4251880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bda2ec36-1e27-350f-8d39-3e8edc39e649.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 399168 IP address blocks: 2610:a1:3300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:b9:54:a0:84:b8:71:d4:25:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=731c7f50-4804-423c-8636-67b2bceca957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:47:7b:f5:c0:bd:c5:71:b1:66:f6:cf:1f:88: 09:0a:c8:eb:7d:9a:a9:25:c9:00:58:2b:71:1b:e5: 73:1c:79:db:5d:a0:ff:4b:f6:ac:35:a2:79:2c:27: ee:e8:95:1e:73:ef:99:03:fe:4e:77:b8:f8:45:21: b6:bc:dc:ef:ce:99:d2:6f:e5:3e:f9:70:ac:24:fa: 06:f4:6a:28:d4:70:4c:6d:b0:58:96:65:e5:5c:a6: b6:28:1d:66:db:3e:9c:b6:90:dc:1c:b7:1d:4a:db: 75:7a:fb:c6:24:22:10:63:43:3e:ef:6e:38:86:93: 99:65:89:71:6a:e9:90:0e:42:d0:55:a6:e9:ac:ca: 59:fe:ba:2a:7e:ec:d3:ca:6c:1e:84:84:f1:0e:9c: 31:b3:aa:19:af:5a:f3:28:b4:04:17:82:d7:cf:04: 86:5d:0d:8c:4b:bf:86:04:ba:0d:ff:5d:db:4b:a0: b6:06:4f:4f:82:3e:55:fe:ba:6f:86:c5:41:c0:90: 9b:15:33:1c:b9:1a:ae:8f:8f:11:b6:c7:74:bd:71: 69:34:59:f8:41:55:a4:90:00:bb:40:89:25:73:1a: 4a:a4:32:3a:c1:d4:ce:cf:f7:d0:83:70:06:e5:dd: c2:a6:7c:23:48:43:c7:0f:7d:b3:e0:79:bf:b9:b2: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F8:70:E8:AD:3B:61:96:CD:E7:6F:92:D3:38:7E:1F:A6:B6:67:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bda2ec36-1e27-350f-8d39-3e8edc39e649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2610:a1:3300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:db:d0:25:de:0c:97:01:3e:b1:7d:27:7a:f7:bc:50:30:bb: e6:65:ae:a1:f7:95:f2:78:e8:9f:2d:0d:ea:cc:aa:97:65:0d: af:af:b9:ef:a9:ed:2d:84:cc:d5:a7:10:eb:2c:98:5b:94:3d: 34:75:76:69:f4:c0:c4:09:5e:c3:1b:b5:e7:1b:18:07:41:cb: 9e:04:2e:73:60:f8:2f:f6:79:cc:7b:39:de:78:8b:7c:9f:11: 95:62:17:e6:4b:f7:81:61:10:7c:1c:73:db:c9:05:c6:19:35: 4b:87:30:f5:3b:35:78:9b:4f:80:62:bc:07:cd:74:a8:75:a0: 7f:5d:21:93:93:54:5b:12:c8:a5:42:98:ca:5e:17:30:0f:d6: 7d:f5:69:04:f3:5e:9a:c0:bd:fb:13:e5:83:04:c3:ba:57:29: d0:d7:d6:30:ba:52:57:23:e3:c7:d1:c2:e9:cc:93:9a:74:74: 86:25:99:64:14:5e:53:97:c7:b4:a5:0e:2b:2c:00:97:5e:14: b4:39:db:ec:d2:e1:8a:10:8e:4e:45:b0:99:c6:aa:e3:1c:6f: c7:6d:f6:bc:87:f1:e4:0d:f7:ac:47:70:9d:8d:cc:7d:21:9d: 82:37:03:3b:54:61:48:d5:c2:83:41:55:10:4f:6c:ca:5f:ff: f5:e1:3c:10 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkls7lUoIS4cdQlGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk NzMxYzdmNTAtNDgwNC00MjNjLTg2MzYtNjdiMmJjZWNhOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0d79cC9xXGxZvbPH4gJCsjrfZqpJckAWCtx G+VzHHnbXaD/S/asNaJ5LCfu6JUec++ZA/5Od7j4RSG2vNzvzpnSb+U++XCsJPoG 9Goo1HBMbbBYlmXlXKa2KB1m2z6ctpDcHLcdStt1evvGJCIQY0M+7244hpOZZYlx aumQDkLQVabprMpZ/roqfuzTymwehITxDpwxs6oZr1rzKLQEF4LXzwSGXQ2MS7+G BLoN/13bS6C2Bk9Pgj5V/rpvhsVBwJCbFTMcuRquj48Rtsd0vXFpNFn4QVWkkAC7 QIklcxpKpDI6wdTOz/fQg3AG5d3CpnwjSEPHD32z4Hm/ubLy9QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEf4cOitO2GWzedvktM4fh+mtmfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmRhMmVjMzYtMWUyNy0z NTBmLThkMzktM2U4ZWRjMzllNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIdvQJd4MlwE+sX0neve8UDC75mWuofeV8njony0N6syql2UNr6+5 76ntLYTM1acQ6yyYW5Q9NHV2afTAxAlewxu15xsYB0HLngQuc2D4L/Z5zHs53niL fJ8RlWIX5kv3gWEQfBxz28kFxhk1S4cw9Ts1eJtPgGK8B810qHWgf10hk5NUWxLI pUKYyl4XMA/WffVpBPNemsC9+xPlgwTDulcp0NfWMLpSVyPjx9HC6cyTmnR0hiWZ ZBReU5fHtKUOKywAl14UtDnb7NLhihCOTkWwmcaq4xxvx232vIfx5A33rEdwnY3M fSGdgjcDO1RhSNXCg0FVEE9syl//9eE8EA== -----END CERTIFICATE-----Generated at Mon Apr 7 13:06:51 2025 by rpki-client