$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99f3067f-73bc-3ae6-8684-6b3625dfd14c.roa File: 99f3067f-73bc-3ae6-8684-6b3625dfd14c.roa (raw, json) Hash identifier: dNkk1mvXuM4yUFUIEVLWLBZxOKQaxQl1isrxaciIO5Y= Subject key identifier: FC:1C:C1:36:67:3D:72:F2:C8:23:69:89:2E:67:B7:00:F5:83:AD:7D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F180179E2A9C3F50594FC380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99f3067f-73bc-3ae6-8684-6b3625dfd14c.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397222 IP address blocks: 2001:502:2eda::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:17:9e:2a:9c:3f:50:59:4f:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=67636f4d-4669-4c2b-bbd3-a4c7a2a82027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:be:17:7a:33:1a:cd:37:8f:74:a3:57:2e:d6: 4c:0f:8d:1b:b0:7d:ea:36:e0:4a:47:f7:7d:b0:d0: c1:40:34:77:42:e1:31:27:f7:bd:36:2e:17:e8:f1: 17:1f:ee:95:81:f6:fd:fc:a5:b5:99:89:9f:ec:9a: fc:e8:18:80:90:b0:ef:f1:20:02:45:cf:64:2a:a4: 96:8f:fa:ff:14:26:0c:79:59:16:e2:28:c7:c8:fd: 8c:be:24:93:81:7a:2f:99:9d:6e:d0:b9:b9:6f:e7: 27:33:1a:22:e9:0b:f3:69:25:ac:41:aa:4c:06:85: 23:ad:79:c2:03:c5:28:9c:ac:f1:47:3d:21:e0:96: c6:58:bd:a1:d6:ae:35:59:f0:8b:d6:eb:8f:2d:44: b9:d7:f0:61:1a:c1:9c:13:d3:86:dc:ee:68:d3:f2: 0f:f2:48:fc:b0:e1:70:72:b0:87:92:0e:c2:d8:af: 1a:6e:25:5c:bb:eb:d1:55:b9:97:39:04:8d:f4:be: 84:73:ce:00:9b:0e:58:f6:67:a1:ba:ab:1d:c2:ca: 2c:7a:f8:ca:69:58:08:46:da:f5:7d:96:c9:8c:82: eb:f1:84:05:5f:3b:dc:59:c4:5f:ec:a1:c4:3d:c0: 67:f7:6c:93:92:2b:42:9e:33:89:9e:69:70:b2:33: 85:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1C:C1:36:67:3D:72:F2:C8:23:69:89:2E:67:B7:00:F5:83:AD:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99f3067f-73bc-3ae6-8684-6b3625dfd14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:2eda::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ae:ab:a2:6f:00:65:9d:ff:88:0c:15:c4:0b:68:20:41:c6: 47:e5:ca:a9:a1:c6:d1:36:c9:26:d0:34:97:5b:bb:07:fa:ec: fe:e6:12:5b:af:94:a5:a4:a4:40:9e:0f:7b:39:dc:d3:c4:02: 22:f8:73:07:83:d2:fe:75:84:21:0d:ef:79:80:62:26:fa:b7: 92:15:6b:18:dc:e9:ad:53:f3:e1:b5:e5:02:d5:e6:a5:33:7a: 73:1e:43:f0:0e:4a:25:36:8b:58:38:e6:f5:f0:ed:0c:75:ca: 85:e9:64:28:50:b4:22:76:0a:f0:ba:f9:ce:67:a2:71:bf:62: e2:07:25:76:ad:88:79:ab:46:41:f3:02:d1:0d:43:bc:6b:7b: 42:1f:78:e9:e9:c4:9b:f6:22:af:92:a6:f7:aa:9b:5b:92:3a: e9:15:df:b5:45:a6:0c:4f:d1:2e:40:f5:a2:db:63:2c:68:05: 71:37:02:dc:d2:b8:18:32:40:f5:6d:2d:83:2b:6b:2a:2b:ff: fe:9c:a4:1c:09:13:0f:4c:fc:05:a7:12:30:08:8a:bb:b9:09: 18:7f:49:9c:b0:2c:c7:23:61:57:a2:49:31:9a:11:43:83:1e: 3f:98:1a:f4:81:c5:cd:1b:19:d0:fa:6b:b8:a4:fa:6e:f4:bf: f8:d6:27:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxgBeeKpw/UFlPw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk Njc2MzZmNGQtNDY2OS00YzJiLWJiZDMtYTRjN2EyYTgyMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L4XejMazTePdKNXLtZMD40bsH3qNuBKR/d9 sNDBQDR3QuExJ/e9Ni4X6PEXH+6Vgfb9/KW1mYmf7Jr86BiAkLDv8SACRc9kKqSW j/r/FCYMeVkW4ijHyP2MviSTgXovmZ1u0Lm5b+cnMxoi6QvzaSWsQapMBoUjrXnC A8UonKzxRz0h4JbGWL2h1q41WfCL1uuPLUS51/BhGsGcE9OG3O5o0/IP8kj8sOFw crCHkg7C2K8abiVcu+vRVbmXOQSN9L6Ec84Amw5Y9mehuqsdwsosevjKaVgIRtr1 fZbJjILr8YQFXzvcWcRf7KHEPcBn92yTkitCnjOJnmlwsjOFqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPwcwTZnPXLyyCNpiS5ntwD1g619MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTlmMzA2N2YtNzNiYy0z YWU2LTg2ODQtNmIzNjI1ZGZkMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG+uq6JvAGWd/4gMFcQLaCBBxkflyqmhxtE2ySbQNJdbuwf67P7m EluvlKWkpECeD3s53NPEAiL4cweD0v51hCEN73mAYib6t5IVaxjc6a1T8+G15QLV 5qUzenMeQ/AOSiU2i1g45vXw7Qx1yoXpZChQtCJ2CvC6+c5nonG/YuIHJXatiHmr RkHzAtENQ7xre0IfeOnpxJv2Iq+Spveqm1uSOukV37VFpgxP0S5A9aLbYyxoBXE3 AtzSuBgyQPVtLYMrayor//6cpBwJEw9M/AWnEjAIiru5CRh/SZywLMcjYVeiSTGa EUODHj+YGvSBxc0bGdD6a7ik+m70v/jWJ/k= -----END CERTIFICATE-----Generated at Tue Jul 1 03:49:20 2025 by rpki-client