$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be954fde-99c0-3a8c-a578-42e9713c616f.roa File: be954fde-99c0-3a8c-a578-42e9713c616f.roa (raw, json) Hash identifier: ctEJ09RTsuOkb6whidasjuvSMZHJqfmb5NpJPA0xQJA= Subject key identifier: 40:21:72:B8:67:D1:AA:10:CD:1E:92:A4:C7:00:AD:5A:E9:FB:11:FB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584912470349858EF0717258BA1B Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be954fde-99c0-3a8c-a578-42e9713c616f.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397217 IP address blocks: 2001:502:100e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:03:49:85:8e:f0:71:72:58:ba:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=dc9d61d7-ed73-4e26-ae8a-13732fd9cab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:0e:ed:5b:64:fc:ec:5e:cc:b8:bc:62:b8: 3a:60:3a:87:10:85:aa:59:09:80:c0:28:54:b2:74: 03:dc:6b:0b:e4:94:e7:88:e0:c0:b2:06:b1:ec:3d: 66:f0:17:29:a0:02:45:1a:b0:0e:f4:d4:1f:f2:eb: 87:4f:c7:b7:83:d0:63:4f:5e:d1:3d:e1:b4:9c:47: 90:de:4a:94:61:47:e9:ab:df:bb:78:a3:60:11:22: 5e:bd:e4:8a:be:77:47:1f:f0:40:90:22:bb:15:49: bc:ab:70:34:75:7f:1c:f4:bf:ec:2a:90:07:ad:81: da:16:f8:de:75:b0:33:02:a3:27:07:20:49:84:53: 7d:db:7d:1e:7f:c1:1f:ec:ad:38:65:86:92:fd:53: 4d:48:ef:e5:fc:43:a6:01:67:a9:cc:0a:c9:db:01: e6:8e:17:c3:4d:88:1b:5a:0b:be:8e:fa:16:44:a9: 5c:69:56:c7:41:ee:e3:be:c2:6a:2d:f6:66:12:b2: 18:43:09:77:9a:87:80:d3:c9:35:de:c6:e1:0c:9c: c6:8e:de:d9:bf:7c:b6:0b:bd:b7:19:38:34:0a:76: 69:4d:ac:d6:35:92:4a:46:4c:fa:92:b0:1b:f6:a4: ac:8e:95:49:84:8c:7e:7e:81:a1:09:01:69:3a:09: 68:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:21:72:B8:67:D1:AA:10:CD:1E:92:A4:C7:00:AD:5A:E9:FB:11:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be954fde-99c0-3a8c-a578-42e9713c616f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:100e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f3:cf:99:09:ef:8e:6b:27:90:7b:19:36:b1:c3:bf:e0:43: cf:4f:a6:b2:44:04:92:28:99:c2:44:84:56:1a:3c:82:7b:6a: 13:9d:c2:0e:5e:63:2c:9b:7c:3f:0b:f7:47:c5:1d:0b:41:8d: c8:6b:42:67:85:48:d1:75:4a:66:3a:66:b2:89:49:65:33:d3: 49:34:60:c2:35:b7:c8:d5:64:51:79:92:53:84:b1:10:cc:29: 71:49:60:81:61:87:c1:b6:b9:1c:88:b0:f6:0a:a8:01:62:59: 97:76:15:b2:b5:7c:8b:30:1a:31:c9:60:6e:47:6b:7b:ab:bf: 58:cb:b3:74:2c:87:bb:39:95:c9:33:af:01:87:ad:b9:c3:f8: 17:86:f9:de:7a:02:06:8d:4e:19:28:cc:ae:27:6a:d8:d2:99: 8a:d6:ac:a7:d1:46:07:7b:20:5c:cb:6c:3e:6b:87:07:bb:fd: 51:53:19:84:47:7c:93:db:38:41:be:00:10:cb:4b:7d:da:c9: 7b:86:ff:4b:45:a9:71:5d:98:c3:21:d2:c8:13:16:51:4b:ea: 65:32:ae:cc:08:41:a5:83:35:f3:7f:a0:09:98:b4:e8:f9:62: d8:dc:5f:91:29:84:b5:45:81:96:db:ed:a3:89:8a:1f:50:4b: 67:93:06:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRwNJhY7wcXJYuhswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZGM5ZDYxZDctZWQ3My00ZTI2LWFlOGEtMTM3MzJmZDljYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQIO7Vtk/OxezLi8Yrg6YDqHEIWqWQmAwChU snQD3GsL5JTniODAsgax7D1m8BcpoAJFGrAO9NQf8uuHT8e3g9BjT17RPeG0nEeQ 3kqUYUfpq9+7eKNgESJeveSKvndHH/BAkCK7FUm8q3A0dX8c9L/sKpAHrYHaFvje dbAzAqMnByBJhFN9230ef8Ef7K04ZYaS/VNNSO/l/EOmAWepzArJ2wHmjhfDTYgb Wgu+jvoWRKlcaVbHQe7jvsJqLfZmErIYQwl3moeA08k13sbhDJzGjt7Zv3y2C723 GTg0CnZpTazWNZJKRkz6krAb9qSsjpVJhIx+foGhCQFpOglozwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEAhcrhn0aoQzR6SpMcArVrp+xH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmU5NTRmZGUtOTljMC0z YThjLWE1NzgtNDJlOTcxM2M2MTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADPzz5kJ745rJ5B7GTaxw7/gQ89PprJEBJIomcJEhFYaPIJ7ahOd wg5eYyybfD8L90fFHQtBjchrQmeFSNF1SmY6ZrKJSWUz00k0YMI1t8jVZFF5klOE sRDMKXFJYIFhh8G2uRyIsPYKqAFiWZd2FbK1fIswGjHJYG5Ha3urv1jLs3Qsh7s5 lckzrwGHrbnD+BeG+d56AgaNThkozK4natjSmYrWrKfRRgd7IFzLbD5rhwe7/VFT GYRHfJPbOEG+ABDLS33ayXuG/0tFqXFdmMMh0sgTFlFL6mUyrswIQaWDNfN/oAmY tOj5YtjcX5EphLVFgZbb7aOJih9QS2eTBrU= -----END CERTIFICATE-----Generated at Sun Apr 6 19:07:48 2025 by rpki-client