$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b30d8df0-1f48-31e1-a05f-8db841a6372c.roa File: b30d8df0-1f48-31e1-a05f-8db841a6372c.roa (raw, json) Hash identifier: IVLSaFhgKnwcHPgP8S7fhYP/L5gGxkNG8af7wV4e34U= Subject key identifier: D4:7D:65:AC:E8:2A:B5:47:E0:BE:25:C4:36:84:59:D2:A7:8D:81:0D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F1801EFC1FB3FF77F70083C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b30d8df0-1f48-31e1-a05f-8db841a6372c.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397215 IP address blocks: 2001:502:f3ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:1e:fc:1f:b3:ff:77:f7:00:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=2541f8c5-0901-462a-8685-0dd99287a186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:05:f3:a4:bd:2f:d8:05:fe:a5:a6:6e:da: d9:43:10:34:3f:d5:ea:d2:8f:c5:ba:e3:0a:22:10: 47:f1:36:3c:0f:2d:5d:21:ba:ff:51:cc:2e:ee:aa: f7:12:a9:07:4f:10:54:60:41:d2:09:e4:2c:d5:3d: 96:7b:e2:17:1b:e7:a9:13:50:32:ae:3b:91:cb:45: 63:da:b5:cd:c6:61:45:61:48:8e:ff:a5:93:a7:cb: 93:c1:3f:81:55:01:8c:d1:c2:25:62:df:5b:26:7a: 9c:d3:90:5a:32:d9:cd:b4:85:80:93:02:a2:04:21: a3:3e:5f:1d:9e:06:05:73:ff:da:b4:e6:37:9b:2b: bd:40:9a:ef:6d:82:95:c7:88:36:1d:40:f9:7f:45: 8e:4f:54:e3:e0:4a:09:00:bd:0b:49:d6:15:a8:8b: 30:c8:f2:6a:c9:ac:ee:35:8f:fa:4f:41:f1:ce:74: 1b:c2:8a:5f:db:fa:ad:d0:2a:39:f4:32:68:cf:c8: 13:c1:ff:be:f7:f5:34:37:d2:fb:ac:29:72:c6:7f: 2e:50:05:bf:ac:47:87:ae:60:c1:b5:fd:e4:e0:93: 67:1c:3f:9c:9a:d3:dd:71:b6:f8:a6:98:11:28:0b: 8d:63:2a:3d:12:74:85:59:07:c2:f0:83:4d:ae:39: 0a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7D:65:AC:E8:2A:B5:47:E0:BE:25:C4:36:84:59:D2:A7:8D:81:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b30d8df0-1f48-31e1-a05f-8db841a6372c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:f3ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9b:1d:41:68:80:7a:d7:d9:af:c6:c1:56:66:72:9f:f0:47: 87:83:45:93:4d:fb:8c:f2:7a:8b:25:6c:bc:37:85:0b:9d:b7: ca:d5:2f:1f:e6:39:33:5e:f5:ca:80:82:bc:da:e1:79:b9:95: 66:62:b4:8d:43:0f:28:9c:23:3f:fa:a2:05:23:0f:ed:56:ce: 5a:36:52:45:9f:f3:40:74:00:f7:fd:79:54:85:42:50:c0:c7: b5:11:64:33:a5:23:3c:61:83:08:2e:9e:b5:0e:cd:f9:d9:d8: 7b:0c:c2:84:c9:11:c6:ce:d9:49:72:05:a8:4c:31:70:ad:95: 9c:a7:59:6d:42:87:a0:dd:3d:39:5c:50:27:ee:07:6d:a0:9b: 55:45:01:b3:3d:1c:d6:a5:e2:6a:47:e3:9f:33:7d:12:e4:e9: 35:83:6f:42:4c:49:8a:e0:8d:3d:f8:f3:9a:b7:15:5f:a5:2f: e5:ab:b5:2c:60:ab:f8:ac:5d:3b:d7:4f:c8:f7:d7:e2:78:a4: ce:89:a9:65:e9:5a:69:ff:d8:21:df:3e:87:dc:c0:0a:c0:84: 9f:0e:e7:f6:f4:02:70:d8:93:db:18:c1:81:51:ff:41:f5:41: 23:3f:49:74:9f:a0:bd:09:94:0a:96:69:d1:69:6d:fd:7e:6d: 44:c0:d4:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxgB78H7P/d/cAg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MjU0MWY4YzUtMDkwMS00NjJhLTg2ODUtMGRkOTkyODdhMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrcF86S9L9gF/qWmbtrZQxA0P9Xq0o/FuuMK IhBH8TY8Dy1dIbr/Ucwu7qr3EqkHTxBUYEHSCeQs1T2We+IXG+epE1AyrjuRy0Vj 2rXNxmFFYUiO/6WTp8uTwT+BVQGM0cIlYt9bJnqc05BaMtnNtIWAkwKiBCGjPl8d ngYFc//atOY3myu9QJrvbYKVx4g2HUD5f0WOT1Tj4EoJAL0LSdYVqIswyPJqyazu NY/6T0HxznQbwopf2/qt0Co59DJoz8gTwf++9/U0N9L7rClyxn8uUAW/rEeHrmDB tf3k4JNnHD+cmtPdcbb4ppgRKAuNYyo9EnSFWQfC8INNrjkK+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNR9ZazoKrVH4L4lxDaEWdKnjYENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjMwZDhkZjAtMWY0OC0z MWUxLWEwNWYtOGRiODQxYTYzNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAvP/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADybHUFogHrX2a/GwVZmcp/wR4eDRZNN+4zyeoslbLw3hQudt8rV Lx/mOTNe9cqAgrza4Xm5lWZitI1DDyicIz/6ogUjD+1Wzlo2UkWf80B0APf9eVSF QlDAx7URZDOlIzxhgwgunrUOzfnZ2HsMwoTJEcbO2UlyBahMMXCtlZynWW1Ch6Dd PTlcUCfuB22gm1VFAbM9HNal4mpH458zfRLk6TWDb0JMSYrgjT3485q3FV+lL+Wr tSxgq/isXTvXT8j31+J4pM6JqWXpWmn/2CHfPofcwArAhJ8O5/b0AnDYk9sYwYFR /0H1QSM/SXSfoL0JlAqWadFpbf1+bUTA1MA= -----END CERTIFICATE-----Generated at Mon Jun 30 13:14:59 2025 by rpki-client