$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fccdd19a-a06f-3678-bd4e-6f2e930520b9.roa File: fccdd19a-a06f-3678-bd4e-6f2e930520b9.roa (raw, json) Hash identifier: xS+UeDbB6vZDXHReXcwh71sZftmlXULpjr/IO4ySSQs= Subject key identifier: 64:A9:88:C4:6C:20:86:FE:E7:18:E8:61:78:6A:9E:DD:FA:6B:5C:0A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584912471123FC83957342337300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fccdd19a-a06f-3678-bd4e-6f2e930520b9.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397235 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:11:23:fc:83:95:73:42:33:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=58bc23df-979f-4d96-9270-cc835c00c3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:b5:7b:9a:f4:4f:a2:99:80:17:15:42:b0: 55:2f:12:41:77:2d:8a:11:ef:80:62:4f:15:75:a0: d4:81:60:5d:1f:83:a2:83:12:f5:cc:be:0a:0d:1a: 5a:c0:b0:0b:76:1c:e5:d3:00:79:48:70:32:04:24: 72:b9:38:89:b1:ee:3b:ee:8d:c1:49:f5:ea:a5:29: 30:ba:de:26:9e:b0:2c:7f:f2:88:94:df:69:1a:b0: 5d:a0:16:4a:db:7e:84:36:14:fa:77:4c:75:34:20: ce:da:0b:64:ce:8d:e8:a3:9f:ac:64:72:d6:ae:f3: 0d:54:01:40:0b:0e:47:d0:79:5f:ba:fe:10:9f:b4: cd:e3:e5:8f:37:e2:c2:6d:2f:0d:d9:16:2c:89:e6: fb:91:e9:15:f9:03:45:30:b8:77:d6:66:35:a1:bf: 3b:5f:85:20:d9:74:ef:85:5f:b8:cc:1b:4e:f2:59: aa:1e:96:36:ad:96:f6:5d:ed:2f:c7:fa:82:c3:6e: 49:bb:6a:23:c5:39:a8:d1:83:2c:5b:b3:71:a2:b1: 4a:17:7d:87:72:8b:0b:3f:26:94:22:cb:2e:5d:f6: 85:48:34:87:cc:89:13:36:a6:1a:b9:b4:c5:03:72: 71:56:35:e9:f3:0e:b5:d5:19:98:03:a6:e6:f1:19: 4b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A9:88:C4:6C:20:86:FE:E7:18:E8:61:78:6A:9E:DD:FA:6B:5C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fccdd19a-a06f-3678-bd4e-6f2e930520b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3a:d9:e3:f3:12:95:8e:6a:92:f1:9f:4a:d2:ab:04:39:bb: 1f:5b:b5:5c:87:b4:71:5b:58:d7:b6:72:f9:7a:9f:81:7e:fb: 3e:8c:54:27:f0:e0:37:13:72:4d:29:60:e9:d2:1b:bb:ec:0c: 55:bf:8a:c1:0f:4f:3c:0c:d5:c5:c9:5e:87:36:d8:4a:4c:1a: 28:d3:76:f1:86:8b:7b:aa:74:3a:09:c5:03:96:4b:b8:3e:b1: 3c:73:5d:e5:ef:49:c9:0d:3f:b7:82:d4:50:9d:91:88:30:16: 8e:58:db:a3:fd:5d:a5:7b:4d:11:a1:c7:9e:cf:53:b1:ed:ed: f6:71:6f:49:6a:74:7e:b8:9c:3c:63:91:83:07:88:82:aa:1d: 72:e2:85:a5:6e:33:e2:63:f6:1c:c7:cc:49:a6:a3:50:48:bc: cb:c7:f4:31:e8:6d:d0:b6:dd:8e:cc:a0:0c:40:b8:9e:7d:29: cd:08:c7:6f:f1:2e:12:5d:8e:e2:78:dc:4f:0c:75:4d:f6:5e: df:3a:fe:f9:af:04:44:8f:87:8b:1c:49:a8:d7:11:29:84:ae: dc:a2:e0:5f:6b:ad:1e:4b:11:c9:63:c0:44:4a:69:db:a6:84: aa:40:c6:d3:58:cf:5a:1f:80:54:38:9e:a5:df:f9:4d:93:5b: 25:49:36:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRxEj/IOVc0IzcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NThiYzIzZGYtOTc5Zi00ZDk2LTkyNzAtY2M4MzVjMDBjM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6e1e5r0T6KZgBcVQrBVLxJBdy2KEe+AYk8V daDUgWBdH4OigxL1zL4KDRpawLALdhzl0wB5SHAyBCRyuTiJse477o3BSfXqpSkw ut4mnrAsf/KIlN9pGrBdoBZK236ENhT6d0x1NCDO2gtkzo3oo5+sZHLWrvMNVAFA Cw5H0Hlfuv4Qn7TN4+WPN+LCbS8N2RYsieb7kekV+QNFMLh31mY1ob87X4Ug2XTv hV+4zBtO8lmqHpY2rZb2Xe0vx/qCw25Ju2ojxTmo0YMsW7NxorFKF32HcosLPyaU IssuXfaFSDSHzIkTNqYaubTFA3JxVjXp8w611RmYA6bm8RlLoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGSpiMRsIIb+5xjoYXhqnt36a1wKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmNjZGQxOWEtYTA2Zi0z Njc4LWJkNGUtNmYyZTkzMDUyMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB462ePzEpWOapLxn0rSqwQ5ux9btVyHtHFbWNe2cvl6n4F++z6M VCfw4DcTck0pYOnSG7vsDFW/isEPTzwM1cXJXoc22EpMGijTdvGGi3uqdDoJxQOW S7g+sTxzXeXvSckNP7eC1FCdkYgwFo5Y26P9XaV7TRGhx57PU7Ht7fZxb0lqdH64 nDxjkYMHiIKqHXLihaVuM+Jj9hzHzEmmo1BIvMvH9DHobdC23Y7MoAxAuJ59Kc0I x2/xLhJdjuJ43E8MdU32Xt86/vmvBESPh4scSajXESmErtyi4F9rrR5LEcljwERK adumhKpAxtNYz1ofgFQ4nqXf+U2TWyVJNvI= -----END CERTIFICATE-----Generated at Sun Apr 6 07:17:40 2025 by rpki-client