$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa File: 00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa (raw, json) Hash identifier: lSMrXZ3rZBFZUvk09vrtv8afyIpF9XGXsw3zptuMH90= Subject key identifier: 1B:99:70:4B:CF:3A:98:CA:1C:3D:10:25:11:0A:81:55:63:FB:A2:52 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A434FBA86212F5CDB30F3160 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa Signing time: Fri 25 Apr 2025 08:33:09 +0000 ROA not before: Fri 25 Apr 2025 08:33:09 +0000 ROA not after: Thu 24 Jul 2025 08:33:09 +0000 asID: 12041 IP address blocks: 2001:500:d5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:34:fb:a8:62:12:f5:cd:b3:0f:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:09 2025 GMT Not After : Jul 24 08:33:09 2025 GMT Subject: CN=df2dee03-c45a-466c-800c-209ff02683c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:e3:4b:17:a1:ce:20:97:1b:02:04:b5:37: af:56:0e:cb:8f:be:b3:44:b6:81:cc:74:bd:a9:a7: e2:a2:4c:4c:dd:67:2c:9a:3c:37:ef:9b:e9:71:65: 70:6f:6a:3f:4b:68:3b:3f:0c:f5:94:5a:31:a1:de: 0b:c4:a1:ea:8c:77:67:b4:54:86:af:72:bb:8e:e5: 0d:4f:01:89:2d:63:f1:f9:33:ca:bc:00:eb:cc:42: ed:b8:73:63:9f:0c:32:6f:60:a9:03:2e:e3:8e:9a: 5f:fc:dd:e8:04:80:0c:60:39:07:d4:89:f6:12:ca: f3:1e:9d:17:eb:82:15:6e:ed:7c:11:1b:73:8b:ab: 83:9b:2c:db:2c:7d:46:86:ac:66:cd:bf:ac:e3:dc: e4:c8:70:f4:9d:77:14:a6:b7:68:00:9a:59:df:2f: 78:c2:e9:d5:eb:27:30:f6:36:1d:b4:3e:96:c7:9f: 17:4c:13:cd:e0:5e:a6:24:cf:65:89:a8:7f:46:8c: 17:85:e4:57:6a:1b:97:7b:11:d7:8c:8e:52:c5:11: aa:bc:a0:70:66:67:ea:8b:69:10:d3:31:35:b9:5e: 1c:ee:aa:48:1d:6a:36:92:29:a7:90:b4:56:9e:e7: 12:c5:4e:47:42:09:2d:da:13:27:36:8d:99:d7:43: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:99:70:4B:CF:3A:98:CA:1C:3D:10:25:11:0A:81:55:63:FB:A2:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/00787f8c-cdc9-3cb3-a4be-2f478bc1d337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6c:92:c0:73:f9:e1:64:60:0f:90:a8:de:c3:6e:10:e8:13: 81:91:87:eb:2e:0c:15:c2:45:26:55:4f:ba:c4:ec:c5:28:2c: 1c:f7:b9:b8:57:b9:82:9d:37:04:91:5d:1d:ee:fb:ba:05:f9: 3f:18:fe:1c:e7:87:2f:21:40:c1:43:ff:4a:3b:90:af:c6:90: 1e:ae:f2:cc:bf:a0:12:d1:aa:a7:f2:8f:a2:1f:bf:2b:42:36: 92:2e:85:1e:5c:7a:69:ed:8f:15:84:8a:65:f9:62:5e:70:fe: 9f:21:bb:23:76:05:f0:83:88:99:1b:4f:4e:f6:0c:c6:b9:3e: c6:ac:1d:70:1c:63:40:d4:51:e1:f8:f6:cf:80:1f:cc:3a:2b: 06:48:b2:93:38:b9:a1:dd:a5:64:92:b6:62:3b:1c:2b:92:6b: fb:60:93:07:ec:2f:d0:37:b8:39:f4:91:07:2a:a4:e8:98:3c: b4:c0:84:5f:23:6d:fc:96:5b:f0:51:8e:5c:a8:27:85:10:49: 23:59:0b:2d:b8:57:50:12:25:60:52:20:04:f0:9b:d8:7a:51: a1:c1:35:d1:8a:74:13:0c:13:f4:75:0d:15:21:b0:05:03:63: 6a:ac:d4:70:a1:00:1d:16:ce:d8:d0:17:55:09:f2:8c:66:0c: ca:77:58:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNPuoYhL1zbMPMWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzMwOVoXDTI1MDcyNDA4MzMwOVowLzEtMCsGA1UEAxMk ZGYyZGVlMDMtYzQ1YS00NjZjLTgwMGMtMjA5ZmYwMjY4M2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsjjSxehziCXGwIEtTevVg7Lj76zRLaBzHS9 qafiokxM3Wcsmjw375vpcWVwb2o/S2g7Pwz1lFoxod4LxKHqjHdntFSGr3K7juUN TwGJLWPx+TPKvADrzELtuHNjnwwyb2CpAy7jjppf/N3oBIAMYDkH1In2EsrzHp0X 64IVbu18ERtzi6uDmyzbLH1Ghqxmzb+s49zkyHD0nXcUprdoAJpZ3y94wunV6ycw 9jYdtD6Wx58XTBPN4F6mJM9liah/RowXheRXahuXexHXjI5SxRGqvKBwZmfqi2kQ 0zE1uV4c7qpIHWo2kimnkLRWnucSxU5HQgkt2hMnNo2Z10NygwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBuZcEvPOpjKHD0QJREKgVVj+6JSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDA3ODdmOGMtY2RjOS0z Y2IzLWE0YmUtMmY0NzhiYzFkMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFsksBz+eFkYA+QqN7DbhDoE4GRh+suDBXCRSZVT7rE7MUoLBz3 ubhXuYKdNwSRXR3u+7oF+T8Y/hznhy8hQMFD/0o7kK/GkB6u8sy/oBLRqqfyj6If vytCNpIuhR5cemntjxWEimX5Yl5w/p8huyN2BfCDiJkbT072DMa5PsasHXAcY0DU UeH49s+AH8w6KwZIspM4uaHdpWSStmI7HCuSa/tgkwfsL9A3uDn0kQcqpOiYPLTA hF8jbfyWW/BRjlyoJ4UQSSNZCy24V1ASJWBSIATwm9h6UaHBNdGKdBMME/R1DRUh sAUDY2qs1HChAB0WztjQF1UJ8oxmDMp3WLs= -----END CERTIFICATE-----Generated at Tue Apr 29 12:49:40 2025 by rpki-client