$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/01d63254-2c2a-337d-a5c5-5c3d27344457.roa File: 01d63254-2c2a-337d-a5c5-5c3d27344457.roa (raw, json) Hash identifier: TSIByfAcWve8bzq+5z3nRlxJ+KEdiUSiF9LDp6LjCv0= Subject key identifier: A6:24:57:C9:D4:E6:13:15:B6:87:3D:BD:78:32:D6:A0:1F:9F:92:9C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4351F6F2E57DE2C3143B6B0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/01d63254-2c2a-337d-a5c5-5c3d27344457.roa Signing time: Fri 25 Apr 2025 08:33:26 +0000 ROA not before: Fri 25 Apr 2025 08:33:26 +0000 ROA not after: Thu 24 Jul 2025 08:33:26 +0000 asID: 12041 IP address blocks: 2001:500:db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:1f:6f:2e:57:de:2c:31:43:b6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:26 2025 GMT Not After : Jul 24 08:33:26 2025 GMT Subject: CN=2a420e7d-9ae9-4d09-a2dc-184f4ba27bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:39:b4:e9:55:9c:ba:24:0e:50:78:dc:1f: 2c:31:61:3c:a1:aa:14:0d:42:57:52:14:8b:ea:47: 21:be:b9:20:06:f7:ed:15:2a:c0:08:66:8b:1d:05: 7d:ca:83:0a:b8:62:2a:c9:05:70:89:4e:f6:da:42: 09:c5:1b:93:6c:4b:ff:b2:45:0b:cd:68:e7:27:6e: 59:a7:8f:69:81:d2:cf:bc:77:ff:ad:21:96:db:ed: 89:3a:d1:0e:8f:d1:39:e8:79:e7:64:5e:6c:02:ed: 9f:24:00:1a:e3:cf:f4:d5:bc:cc:72:13:2b:94:d1: 47:36:f7:9a:2e:7b:14:d1:37:b4:43:48:d6:53:f3: b9:99:fa:79:db:71:1b:14:10:63:e4:dd:ca:2b:02: 44:b5:f8:c2:00:8e:df:b4:63:3f:1b:af:fc:c3:a1: f9:3a:e9:c8:fc:39:e0:e7:df:c6:f8:b6:ba:86:5b: c9:06:7d:89:04:57:59:14:80:0e:b4:cc:65:bd:ed: a3:66:c4:d9:b7:07:f4:39:40:30:69:f5:ee:ef:63: 82:0f:2e:4c:7d:48:2a:3e:cd:42:53:7a:c6:4e:dc: cd:ba:19:fc:cd:04:b9:a3:01:42:6f:82:6e:16:f2: 0b:f9:5a:9d:e1:a4:1f:10:78:b3:ce:3a:92:7c:f0: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:24:57:C9:D4:E6:13:15:B6:87:3D:BD:78:32:D6:A0:1F:9F:92:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/01d63254-2c2a-337d-a5c5-5c3d27344457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:1f:e8:9a:69:ab:7c:39:ed:11:9e:bf:ec:15:88:2f:ba:7c: eb:38:1b:2b:7c:ca:a7:af:07:36:22:34:aa:0e:0a:c9:d0:d2: bf:f8:0a:9f:f9:dc:a6:3b:b0:39:16:81:c9:46:ec:4f:cf:09: ad:ac:ab:ae:8f:d6:4b:64:b7:cc:86:62:de:83:0d:cc:a8:68: a4:df:6d:de:c4:97:06:2a:bf:c8:39:4d:b9:e5:b8:b3:d0:42: 89:a6:42:bb:bf:04:c5:2d:f0:28:b4:38:e1:4e:43:70:8a:af: b1:1c:9e:c6:e6:cd:fe:6f:63:c5:0d:90:56:78:c3:c0:07:57: df:3d:74:3b:3c:cc:f8:f8:be:29:cb:8f:74:27:e3:ae:85:f5: ad:5d:7c:61:6c:96:a9:f4:93:37:4c:f5:2a:bd:7b:ea:f3:24: 31:5c:e7:88:f2:d4:60:bb:0a:30:66:8e:15:a4:b8:c5:54:8d: 1f:ab:4f:37:5a:10:36:bd:06:7a:71:1c:3b:11:9e:4e:55:00: f8:ce:f1:2b:79:2e:86:10:fa:a5:cd:7c:fa:72:95:bf:72:32: b8:42:0a:0f:1b:e0:3b:9b:24:1f:5f:19:91:fa:59:87:29:1b: fd:3c:52:8f:9a:f6:24:dc:b0:17:c7:09:de:91:da:f7:91:b8: d8:e6:b1:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNR9vLlfeLDFDtrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzMyNloXDTI1MDcyNDA4MzMyNlowLzEtMCsGA1UEAxMk MmE0MjBlN2QtOWFlOS00ZDA5LWEyZGMtMTg0ZjRiYTI3YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vI5tOlVnLokDlB43B8sMWE8oaoUDUJXUhSL 6kchvrkgBvftFSrACGaLHQV9yoMKuGIqyQVwiU722kIJxRuTbEv/skULzWjnJ25Z p49pgdLPvHf/rSGW2+2JOtEOj9E56HnnZF5sAu2fJAAa48/01bzMchMrlNFHNvea LnsU0Te0Q0jWU/O5mfp523EbFBBj5N3KKwJEtfjCAI7ftGM/G6/8w6H5OunI/Dng 59/G+La6hlvJBn2JBFdZFIAOtMxlve2jZsTZtwf0OUAwafXu72OCDy5MfUgqPs1C U3rGTtzNuhn8zQS5owFCb4JuFvIL+Vqd4aQfEHizzjqSfPBDCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKYkV8nU5hMVtoc9vXgy1qAfn5KcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDFkNjMyNTQtMmMyYS0z MzdkLWE1YzUtNWMzZDI3MzQ0NDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJIf6Jppq3w57RGev+wViC+6fOs4Gyt8yqevBzYiNKoOCsnQ0r/4 Cp/53KY7sDkWgclG7E/PCa2sq66P1ktkt8yGYt6DDcyoaKTfbd7ElwYqv8g5Tbnl uLPQQommQru/BMUt8Ci0OOFOQ3CKr7Ecnsbmzf5vY8UNkFZ4w8AHV989dDs8zPj4 vinLj3Qn466F9a1dfGFslqn0kzdM9Sq9e+rzJDFc54jy1GC7CjBmjhWkuMVUjR+r TzdaEDa9BnpxHDsRnk5VAPjO8St5LoYQ+qXNfPpylb9yMrhCCg8b4DubJB9fGZH6 WYcpG/08Uo+a9iTcsBfHCd6R2veRuNjmsZw= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:36 2025 by rpki-client