$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28d37e76-f5f4-3425-89df-6ccdb745f465.roa File: 28d37e76-f5f4-3425-89df-6ccdb745f465.roa (raw, json) Hash identifier: cFzUFviH6A30Pvn8CC5l6Du6jvxjTWKXwc/ZChnOhyM= Subject key identifier: FD:35:6B:AC:19:47:E6:52:51:19:5E:40:51:ED:C4:AC:EA:D5:AB:23 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F180142B9A0627DDF285F000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28d37e76-f5f4-3425-89df-6ccdb745f465.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397228 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:14:2b:9a:06:27:dd:f2:85:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=660c9a2f-0f04-4532-9a56-916241f09bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:b9:b9:08:ff:32:c2:85:cb:5e:88:74:23: b4:eb:6b:05:87:fd:69:1c:c4:14:07:d3:1a:e5:1c: de:34:e2:b3:2a:74:f4:b1:e4:b6:60:4b:71:e0:94: 56:97:cd:d2:e3:c6:02:d5:bd:51:f2:d6:6b:5a:a2: 61:6f:4a:25:a0:ce:f1:20:66:42:4c:e0:ad:a6:0c: 5a:ca:6b:df:e5:cf:b4:46:52:33:ea:5b:74:55:bc: f4:10:3a:1b:0a:a7:eb:50:02:9b:e7:43:8c:66:f3: 2f:d9:52:cc:d8:b1:28:cb:b3:ed:98:bc:b2:dd:b7: fb:c1:d6:bf:78:2d:e7:3c:bd:87:b7:7c:26:3f:b0: b5:59:49:12:70:9f:92:c7:47:d4:5d:9b:69:a3:7a: 45:d5:8d:a4:02:31:46:09:77:b1:38:bc:fa:4b:85: 4b:a5:35:82:75:fe:aa:bf:5d:3d:7c:4d:62:cd:aa: 4b:92:f0:6d:af:fe:b5:59:5a:e5:6b:5a:7d:27:b2: e3:83:b8:09:39:5a:0f:90:64:5f:8b:ef:e2:09:ca: b4:d5:88:76:9d:3e:11:c6:08:84:aa:68:85:ac:fb: 9a:c7:d5:4d:1e:e6:be:e5:ff:ec:c6:0c:88:4a:d6: f8:4c:8e:c6:a6:17:0c:c8:f0:47:34:ce:32:db:8b: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:35:6B:AC:19:47:E6:52:51:19:5E:40:51:ED:C4:AC:EA:D5:AB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/28d37e76-f5f4-3425-89df-6ccdb745f465.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:dc:39:ac:b8:bd:b1:91:4c:03:5b:e3:18:1b:c0:b5:2d:30: 9a:63:0b:a2:a2:bf:2c:8b:e7:1a:88:48:17:ac:2e:99:04:ed: 7f:ee:ca:e7:07:bc:8c:2b:ce:cd:ff:43:9e:7a:c6:1a:74:3d: 8a:97:8a:82:9a:7b:bf:0a:1e:58:95:68:f6:4e:c8:1e:89:f7: c1:35:c8:21:0b:9d:5d:ff:65:ec:d1:68:bb:6d:12:e3:0a:eb: 9f:16:29:48:13:fa:37:a4:56:51:6d:50:10:58:03:09:42:0c: 8e:1f:2f:bd:6c:32:d0:9f:18:63:f1:a5:d1:ec:bd:54:70:c1: 71:ff:b2:f9:56:b5:20:bd:d2:11:d7:96:ec:10:e8:1f:01:63: c0:9a:7e:6b:65:69:a5:c8:b2:2d:81:61:12:76:21:47:ac:1b: c5:8e:1a:49:6d:83:3b:ae:99:ea:7c:3c:6d:79:57:c8:35:0b: e2:55:74:a2:01:ec:37:07:88:45:52:70:91:d5:6f:0c:b9:24: 56:68:f0:84:84:10:ad:38:88:42:95:9f:a1:29:2c:e6:6c:3e: 6c:0e:d6:0a:29:76:19:75:f2:33:da:0f:cf:1f:4f:f3:6a:03: e7:b4:9d:01:e6:8b:7f:2e:55:55:45:f0:d2:84:92:0c:77:bb: da:4b:f3:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxgBQrmgYn3fKF8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NjYwYzlhMmYtMGYwNC00NTMyLTlhNTYtOTE2MjQxZjA5YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFq5uQj/MsKFy16IdCO062sFh/1pHMQUB9Ma 5RzeNOKzKnT0seS2YEtx4JRWl83S48YC1b1R8tZrWqJhb0oloM7xIGZCTOCtpgxa ymvf5c+0RlIz6lt0Vbz0EDobCqfrUAKb50OMZvMv2VLM2LEoy7PtmLyy3bf7wda/ eC3nPL2Ht3wmP7C1WUkScJ+Sx0fUXZtpo3pF1Y2kAjFGCXexOLz6S4VLpTWCdf6q v109fE1izapLkvBtr/61WVrla1p9J7Ljg7gJOVoPkGRfi+/iCcq01Yh2nT4RxgiE qmiFrPuax9VNHua+5f/sxgyIStb4TI7GphcMyPBHNM4y24uBfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP01a6wZR+ZSURleQFHtxKzq1asjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjhkMzdlNzYtZjVmNC0z NDI1LTg5ZGYtNmNjZGI3NDVmNDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjcOay4vbGRTANb4xgbwLUtMJpjC6KivyyL5xqISBesLpkE7X/u yucHvIwrzs3/Q556xhp0PYqXioKae78KHliVaPZOyB6J98E1yCELnV3/ZezRaLtt EuMK658WKUgT+jekVlFtUBBYAwlCDI4fL71sMtCfGGPxpdHsvVRwwXH/svlWtSC9 0hHXluwQ6B8BY8CafmtlaaXIsi2BYRJ2IUesG8WOGkltgzuumep8PG15V8g1C+JV dKIB7DcHiEVScJHVbwy5JFZo8ISEEK04iEKVn6EpLOZsPmwO1gopdhl18jPaD88f T/NqA+e0nQHmi38uVVVF8NKEkgx3u9pL81c= -----END CERTIFICATE-----Generated at Mon Jun 30 18:13:09 2025 by rpki-client