$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf870d0a-847d-319d-9f98-79d07d5cc525.roa File: bf870d0a-847d-319d-9f98-79d07d5cc525.roa (raw, json) Hash identifier: ns6RNERLZGC+BxIoKKYIISu7MaKdlL4LysX3OscPLJE= Subject key identifier: C0:BB:82:E8:CE:B9:33:F8:99:93:E2:2B:01:2E:38:2D:B1:B7:7D:49 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285849F180107A36D0F7DDA0297700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf870d0a-847d-319d-9f98-79d07d5cc525.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 397230 IP address blocks: 2610:a1:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:10:7a:36:d0:f7:dd:a0:29:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=4e43a00a-0dbf-49e1-b252-955f2d4b249f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5d:60:fd:fd:ba:6a:d9:f9:a9:b7:9e:c3:ec: 86:ec:34:5e:00:90:c7:ea:c9:3f:65:58:5a:ac:10: c2:df:56:b1:64:4e:0e:78:95:86:6d:e6:1e:94:7b: ab:61:ba:2e:fe:8d:25:3e:03:dc:78:b4:61:91:dc: aa:45:81:75:48:3b:39:d2:85:e7:0f:62:68:06:b1: 28:79:d7:c2:cf:3d:ce:7e:a2:af:f1:c6:52:67:1a: 32:bf:bf:d6:54:bb:6f:45:c3:6f:0b:fb:39:76:76: bf:65:4f:33:be:7c:dd:bf:d0:38:ff:a9:1f:7c:bc: 6a:a8:79:5a:3d:ac:65:fd:48:f9:cc:74:9b:8e:90: d0:3e:a6:72:e9:1b:9a:5b:f2:b2:6f:40:91:57:a9: c6:e0:3d:ec:93:f5:d8:fb:85:04:fe:1a:8d:b2:3b: 5b:73:fb:a7:e6:ea:6d:a1:d7:45:86:0d:ac:33:b0: 63:61:4b:df:28:2a:9c:53:ae:8c:a8:68:3e:a1:c0: 02:c9:e8:fb:2b:9e:e4:35:01:8e:cc:26:2b:a5:ba: 9d:00:29:72:24:92:b0:75:bc:58:30:07:3c:b1:8b: 37:ff:d8:21:bb:40:5a:ee:66:b1:20:d1:71:f0:85: 97:69:b3:6f:91:30:e1:5b:d0:df:b8:46:3d:0d:57: b4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BB:82:E8:CE:B9:33:F8:99:93:E2:2B:01:2E:38:2D:B1:B7:7D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf870d0a-847d-319d-9f98-79d07d5cc525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2610:a1:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3c:5c:5d:9b:7f:09:b8:1e:b2:7b:fd:96:89:7d:29:d7:30: fc:2f:cc:7a:98:15:30:d5:a6:af:be:de:48:4e:ed:08:06:b3: a5:16:5d:d6:4e:42:6f:cf:9f:5b:52:68:10:cb:7d:6e:43:30: 32:68:f0:f6:ad:fe:35:29:6a:98:6b:dc:b3:52:fc:eb:cd:6e: 65:cb:31:91:ac:7c:8b:13:e6:18:9f:f0:7e:87:4a:26:ec:e7: b2:78:ef:61:e6:3a:7e:41:5c:27:ed:ea:4a:ca:53:e4:bd:1f: 1e:d3:e3:74:6e:7b:23:89:9f:24:f5:3d:a1:8e:58:00:89:cc: 7c:b5:1c:2a:d0:57:b5:a1:64:d5:e3:b1:71:a8:25:9a:78:c1: b2:75:8a:2f:94:31:e5:5f:88:d4:55:8a:47:ca:d6:ea:a1:00: 75:1e:68:28:02:db:af:d3:90:51:f3:a4:d1:3c:2b:ff:d8:5c: b1:71:67:f4:a2:af:c2:9f:2d:cf:ca:b8:7a:58:36:cc:f0:1a: 63:8b:82:6a:6d:9b:13:e9:65:9b:90:4b:0f:b9:7e:6b:a3:19: 52:60:ec:03:e4:cb:5c:16:5f:43:12:c1:e6:59:9e:0d:4d:f1: 20:d4:e5:ca:4d:3a:71:1b:28:7a:16:ff:41:8e:0d:58:a3:a3: d7:03:ce:78 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnxgBB6NtD33aApdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NGU0M2EwMGEtMGRiZi00OWUxLWIyNTItOTU1ZjJkNGIyNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V1g/f26atn5qbeew+yG7DReAJDH6sk/ZVha rBDC31axZE4OeJWGbeYelHurYbou/o0lPgPceLRhkdyqRYF1SDs50oXnD2JoBrEo edfCzz3OfqKv8cZSZxoyv7/WVLtvRcNvC/s5dna/ZU8zvnzdv9A4/6kffLxqqHla Paxl/Uj5zHSbjpDQPqZy6RuaW/Kyb0CRV6nG4D3sk/XY+4UE/hqNsjtbc/un5upt oddFhg2sM7BjYUvfKCqcU66MqGg+ocACyej7K57kNQGOzCYrpbqdAClyJJKwdbxY MAc8sYs3/9ghu0Ba7maxINFx8IWXabNvkTDhW9DfuEY9DVe0AQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMC7gujOuTP4mZPiKwEuOC2xt31JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmY4NzBkMGEtODQ3ZC0z MTlkLTlmOTgtNzlkMDdkNWNjNTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoRAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhjxcXZt/Cbgesnv9lol9Kdcw/C/MepgVMNWmr77eSE7tCAazpRZd 1k5Cb8+fW1JoEMt9bkMwMmjw9q3+NSlqmGvcs1L8681uZcsxkax8ixPmGJ/wfodK JuznsnjvYeY6fkFcJ+3qSspT5L0fHtPjdG57I4mfJPU9oY5YAInMfLUcKtBXtaFk 1eOxcaglmnjBsnWKL5Qx5V+I1FWKR8rW6qEAdR5oKALbr9OQUfOk0Twr/9hcsXFn 9KKvwp8tz8q4elg2zPAaY4uCam2bE+llm5BLD7l+a6MZUmDsA+TLXBZfQxLB5lme DU3xINTlyk06cRsoehb/QY4NWKOj1wPOeA== -----END CERTIFICATE-----Generated at Mon Jun 30 14:53:25 2025 by rpki-client