$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa File: a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa (raw, json) Hash identifier: t61asvYuppVylv8/xDV2esXO4EYnTJ4lQO6Ju42cbWg= Subject key identifier: 71:5B:7F:AF:34:A6:E6:BF:1A:12:EE:EE:2F:4D:C0:A2:E4:6C:D7:59 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858491247119434EFAB6000D05A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 397242 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:47:11:94:34:ef:ab:60:00:d0:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=b01b178a-496d-470d-8d72-2f42aa3c3872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:db:b9:a8:e5:1b:ad:9f:ba:31:58:21:c8:21: 08:6c:6a:ce:c3:66:fe:18:80:57:c9:b8:69:13:44: e6:33:9a:25:0d:4e:11:84:b2:d3:61:d9:fb:dd:42: 86:72:f6:1c:d7:af:c0:d8:df:14:a4:2a:82:ea:ac: f9:14:1b:55:3f:73:73:02:54:90:42:76:28:4a:6f: 41:9e:7a:6c:c8:b5:0c:f9:53:33:7e:eb:76:77:98: 25:1a:bd:6e:f2:3f:09:7f:ba:45:00:ba:91:58:ec: 9a:de:68:e2:16:7b:58:9d:cc:6a:b6:46:69:5b:34: c4:b0:92:21:ec:a5:db:64:2d:da:70:52:0e:2a:15: d3:08:d9:b1:13:78:d2:92:19:89:19:06:79:a0:c9: b7:3d:d2:7b:12:10:84:13:17:f1:22:af:bf:73:63: c1:4d:b7:da:41:56:42:8f:93:c7:cb:0f:aa:72:fa: e2:cf:42:01:39:9f:cb:1d:0b:5c:69:c7:66:16:a6: b7:5a:ce:42:9b:80:93:26:5e:85:5f:5b:4c:63:c8: 68:41:22:84:79:69:8e:35:51:3c:1d:5d:99:15:44: 06:cd:83:69:70:c9:b2:0d:ec:f0:a8:bf:d1:fc:4d: f1:20:72:6a:d7:8e:56:4e:27:0e:79:a2:a9:07:83: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5B:7F:AF:34:A6:E6:BF:1A:12:EE:EE:2F:4D:C0:A2:E4:6C:D7:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a556adc5-4f8b-3b8f-9a3b-3e2a07e5a872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:63:e5:a4:c1:55:72:a0:71:69:db:e4:47:de:f9:7f:f5:cf: 53:43:6c:3a:6e:83:39:50:36:ac:fa:35:dd:bc:5d:bc:be:7e: aa:05:d3:ba:7b:50:72:98:14:c0:ec:98:fe:31:c7:06:8e:7a: 62:c0:a0:e3:a6:62:4a:f3:c0:59:41:5a:1b:4d:92:a2:a4:df: 10:81:c4:9d:80:34:eb:2a:31:a2:46:38:94:50:43:3e:77:27: df:f4:82:36:10:6b:5e:fa:13:ea:9f:bc:1f:a7:a2:ef:1f:c7: 3b:13:cc:0f:fa:35:8e:a1:2d:f6:11:24:05:f5:08:c0:b0:74: dd:9a:20:a8:fb:1e:83:2e:2f:58:21:f9:d8:f6:2f:59:05:10: bb:ef:d2:b3:4d:f6:f6:11:9b:78:11:ac:1f:a6:72:3c:b0:1d: f6:fb:8e:aa:02:63:9f:e3:37:6d:a3:e0:57:1a:d7:9e:bc:05: e7:c5:b3:03:3e:be:1a:95:a1:8f:ed:ab:e7:9c:01:09:b6:da: b9:8d:d8:81:29:67:30:5f:53:64:dd:1c:fa:5f:0a:bc:64:3e: 8c:6f:4d:e5:bd:62:37:f0:90:ff:60:b5:5e:84:b9:5d:81:a4: cc:74:dc:f5:44:4e:94:e6:fe:83:eb:f4:7b:f0:98:b5:50:89: 81:f4:12:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRxGUNO+rYADQWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YjAxYjE3OGEtNDk2ZC00NzBkLThkNzItMmY0MmFhM2MzODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtu5qOUbrZ+6MVghyCEIbGrOw2b+GIBXybhp E0TmM5olDU4RhLLTYdn73UKGcvYc16/A2N8UpCqC6qz5FBtVP3NzAlSQQnYoSm9B nnpsyLUM+VMzfut2d5glGr1u8j8Jf7pFALqRWOya3mjiFntYncxqtkZpWzTEsJIh 7KXbZC3acFIOKhXTCNmxE3jSkhmJGQZ5oMm3PdJ7EhCEExfxIq+/c2PBTbfaQVZC j5PHyw+qcvriz0IBOZ/LHQtcacdmFqa3Ws5Cm4CTJl6FX1tMY8hoQSKEeWmONVE8 HV2ZFUQGzYNpcMmyDezwqL/R/E3xIHJq145WTicOeaKpB4PjLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHFbf680pua/GhLu7i9NwKLkbNdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTU1NmFkYzUtNGY4Yi0z YjhmLTlhM2ItM2UyYTA3ZTVhODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACdj5aTBVXKgcWnb5Efe+X/1z1NDbDpugzlQNqz6Nd28Xby+fqoF 07p7UHKYFMDsmP4xxwaOemLAoOOmYkrzwFlBWhtNkqKk3xCBxJ2ANOsqMaJGOJRQ Qz53J9/0gjYQa176E+qfvB+nou8fxzsTzA/6NY6hLfYRJAX1CMCwdN2aIKj7HoMu L1gh+dj2L1kFELvv0rNN9vYRm3gRrB+mcjywHfb7jqoCY5/jN22j4Fca1568BefF swM+vhqVoY/tq+ecAQm22rmN2IEpZzBfU2TdHPpfCrxkPoxvTeW9YjfwkP9gtV6E uV2BpMx03PVETpTm/oPr9HvwmLVQiYH0Er0= -----END CERTIFICATE-----Generated at Fri Mar 14 07:47:31 2025 by rpki-client