$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00269369-6d50-3e7c-a36d-c1f672a4342a.roa File: 00269369-6d50-3e7c-a36d-c1f672a4342a.roa (raw, json) Hash identifier: lLNrtIyIKjfMJaSEuKaZCxOPpcnwuuKQuaPm7xfaXmc= Subject key identifier: 8F:28:CF:43:A1:68:19:8C:62:DB:E5:20:FC:F3:00:62:BD:42:E2:6D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A23E2C560F402C87EA795460 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00269369-6d50-3e7c-a36d-c1f672a4342a.roa Signing time: Thu 24 Apr 2025 15:40:03 +0000 ROA not before: Thu 24 Apr 2025 15:40:03 +0000 ROA not after: Wed 23 Jul 2025 15:40:03 +0000 asID: 207266 IP address blocks: 2001:500:49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:3e:2c:56:0f:40:2c:87:ea:79:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 15:40:03 2025 GMT Not After : Jul 23 15:40:03 2025 GMT Subject: CN=78c92019-fdad-4fbc-abf6-57c6ca6f9c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:9e:97:09:25:61:d3:97:77:a9:53:9e:4a: f5:e2:7f:a8:3d:a7:f2:05:23:d9:1f:a5:b7:9b:60: 78:e7:dd:a1:af:2d:12:2d:b6:18:f5:8c:8b:97:f0: cf:9f:9b:11:2e:63:5d:d6:ba:0c:7c:95:6a:0a:70: e7:7c:3e:b9:15:21:91:83:45:a6:df:87:83:c5:82: 75:42:ec:79:2a:ae:0c:dd:17:d3:d7:1c:45:60:4a: 29:3f:02:82:c2:24:23:37:a1:4b:0a:81:9d:24:55: 7d:69:55:8d:fc:38:0f:4a:c5:f2:92:03:58:11:c1: ba:ed:46:0e:b6:a7:b5:83:e3:d2:6d:bc:2d:90:18: 19:58:30:78:e6:83:57:86:31:dc:c6:9a:f9:ed:7e: 34:c3:41:67:9a:08:d3:50:00:8a:1d:44:77:58:1b: 73:14:58:94:8a:77:62:ee:38:4c:62:f2:84:ea:63: 6c:c0:26:ba:ca:6e:e5:a1:ff:f9:24:98:7e:84:53: 20:b5:63:2a:ac:a4:d6:e9:55:1f:3c:26:2e:a7:d9: df:f4:06:48:8f:83:5b:d5:7e:79:01:96:14:81:7e: 0e:03:b1:cf:c8:80:01:e6:2a:9e:1b:15:37:59:b0: 9b:6e:2e:70:13:95:b0:43:83:79:c9:3b:d5:d2:dd: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:28:CF:43:A1:68:19:8C:62:DB:E5:20:FC:F3:00:62:BD:42:E2:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00269369-6d50-3e7c-a36d-c1f672a4342a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:49::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:35:a8:b8:78:f3:df:66:68:10:dd:f8:71:43:0f:06:18:ff: 60:cc:78:a4:7d:f2:7e:88:80:14:2c:26:b6:02:fb:dd:36:c6: 75:45:04:5b:b3:b0:b1:dc:89:a8:fc:85:97:2c:1f:9c:26:37: 25:43:76:68:05:91:36:57:17:48:6c:24:21:7a:8e:c7:9d:c5: 79:a4:a7:6f:b8:f1:31:5b:4c:a3:06:89:88:83:b8:85:f8:9c: 23:00:ca:f5:74:04:4a:32:ae:67:2d:b7:37:b7:e7:57:7a:72: d6:55:b4:f0:cb:06:6f:b4:b1:94:c0:9f:d2:c3:f4:9a:04:c4: ab:d1:39:d0:2d:3b:9c:e2:6d:7c:47:b9:86:31:b3:f3:ea:03: 9d:11:a5:13:fe:85:25:a6:d5:84:5b:9d:3a:c8:42:3c:6d:a3: fb:5a:14:9e:c7:0b:02:ce:cb:c2:83:1b:6c:e2:fa:1d:41:23: c3:3c:79:9e:d2:11:2f:19:ef:0e:91:26:e2:ea:42:a3:f3:03: 2b:df:89:ec:4a:4c:18:ba:61:9a:64:dd:38:cd:6f:ef:cc:98: 4e:bd:76:63:1b:9b:f3:1c:84:4e:bc:d3:2d:40:9f:86:32:58: f4:5c:8a:f5:fe:c1:ae:76:d8:2f:0a:67:00:cd:43:81:9f:21: 2c:cd:16:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmiPixWD0Ash+p5VGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE1NDAwM1oXDTI1MDcyMzE1NDAwM1owLzEtMCsGA1UEAxMk NzhjOTIwMTktZmRhZC00ZmJjLWFiZjYtNTdjNmNhNmY5YzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNGelwklYdOXd6lTnkr14n+oPafyBSPZH6W3 m2B4592hry0SLbYY9YyLl/DPn5sRLmNd1roMfJVqCnDnfD65FSGRg0Wm34eDxYJ1 Qux5Kq4M3RfT1xxFYEopPwKCwiQjN6FLCoGdJFV9aVWN/DgPSsXykgNYEcG67UYO tqe1g+PSbbwtkBgZWDB45oNXhjHcxpr57X40w0FnmgjTUACKHUR3WBtzFFiUindi 7jhMYvKE6mNswCa6ym7lof/5JJh+hFMgtWMqrKTW6VUfPCYup9nf9AZIj4Nb1X55 AZYUgX4OA7HPyIAB5iqeGxU3WbCbbi5wE5WwQ4N5yTvV0t0yVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI8oz0OhaBmMYtvlIPzzAGK9QuJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDAyNjkzNjktNmQ1MC0z ZTdjLWEzNmQtYzFmNjcyYTQzNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH01qLh4899maBDd+HFDDwYY/2DMeKR98n6IgBQsJrYC+902xnVF BFuzsLHciaj8hZcsH5wmNyVDdmgFkTZXF0hsJCF6jsedxXmkp2+48TFbTKMGiYiD uIX4nCMAyvV0BEoyrmcttze351d6ctZVtPDLBm+0sZTAn9LD9JoExKvROdAtO5zi bXxHuYYxs/PqA50RpRP+hSWm1YRbnTrIQjxto/taFJ7HCwLOy8KDG2zi+h1BI8M8 eZ7SES8Z7w6RJuLqQqPzAyvfiexKTBi6YZpk3TjNb+/MmE69dmMbm/MchE680y1A n4YyWPRcivX+wa522C8KZwDNQ4GfISzNFrk= -----END CERTIFICATE-----Generated at Tue Apr 29 23:30:46 2025 by rpki-client