$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0366b212-bc0f-30f9-baec-e5a537914813.roa File: 0366b212-bc0f-30f9-baec-e5a537914813.roa (raw, json) Hash identifier: XrORjTAFB8QXW85tjyh0eNfTa9XoofhGin3KkRhl4CU= Subject key identifier: 61:7A:1C:8B:54:83:03:29:44:3C:9D:A7:1F:3D:E5:1E:52:EC:5B:B3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4361BC0B0AE7D2303F45318 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0366b212-bc0f-30f9-baec-e5a537914813.roa Signing time: Fri 25 Apr 2025 08:35:25 +0000 ROA not before: Fri 25 Apr 2025 08:35:25 +0000 ROA not after: Thu 24 Jul 2025 08:35:25 +0000 asID: 12041 IP address blocks: 2001:500:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:1b:c0:b0:ae:7d:23:03:f4:53:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:35:25 2025 GMT Not After : Jul 24 08:35:25 2025 GMT Subject: CN=184f620e-0f83-4908-a7c3-ada95ac994e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:18:1f:31:a8:5d:fc:45:87:85:8c:c2:87:9b: e6:ff:83:4e:23:ff:a3:14:a0:dc:c1:57:8d:b7:ac: 70:64:29:0f:44:93:cd:96:82:e9:e6:f0:07:9b:5d: 79:83:84:e5:ed:4b:03:7b:a9:38:9d:90:f5:8e:33: 4b:46:42:05:76:a4:49:4f:0a:4f:21:c2:e9:d2:5b: cc:c0:ff:25:52:24:e4:42:d9:67:94:b2:4b:fa:00: 55:54:79:5b:c0:53:07:76:c0:5c:08:9d:a2:c5:58: 8f:fb:04:8d:4a:59:68:4e:69:61:fd:0b:98:ce:9b: f3:34:36:2f:80:48:ac:d1:12:0f:05:fe:b1:d3:91: 60:27:b6:eb:ea:13:0d:6f:b7:37:f6:4b:e9:22:03: 1e:a9:ae:48:d9:5e:34:ca:e9:37:5f:97:3c:16:35: f2:ea:54:37:82:fb:9a:d6:88:a3:94:80:a4:bd:56: 2c:1f:2e:89:17:3a:4d:15:4d:54:00:0b:52:3b:88: b0:7b:58:9b:64:0f:24:86:75:0b:a5:1b:7e:78:44: 28:69:e1:2c:06:0b:db:d1:07:45:62:6d:b0:4b:78: a5:35:88:b7:a5:80:6e:34:ca:0d:a4:2c:f1:ef:eb: d9:45:a4:fe:3e:9b:bb:b2:93:ff:ea:59:8b:43:ee: f5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7A:1C:8B:54:83:03:29:44:3C:9D:A7:1F:3D:E5:1E:52:EC:5B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0366b212-bc0f-30f9-baec-e5a537914813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:42:08:91:ed:85:80:41:87:63:90:95:a4:42:7f:56:fc:18: 72:76:9d:64:6b:df:5a:e1:17:ce:52:f4:66:3a:05:81:a1:9e: 0f:d5:82:bc:e7:28:58:2c:e1:cf:09:0a:dd:c8:fb:ff:69:72: 5c:24:92:2b:47:a6:5c:84:b9:bd:fb:64:01:20:58:48:47:9d: 26:7d:58:fc:dd:35:37:a7:f3:be:a4:91:f6:c7:86:87:62:3d: a0:75:e8:ee:af:29:e7:bb:a6:96:f0:93:38:24:6d:87:d1:1e: 3d:69:d6:87:23:04:4a:63:a3:91:1a:30:01:0c:b5:a2:98:70: 94:65:25:90:5f:c6:1f:db:f8:54:f2:cd:d0:0e:65:3c:6c:c4: 79:c6:eb:bd:8e:fe:9c:dc:d2:f3:d4:6c:b0:3e:86:a2:79:b2: 48:e2:06:42:a4:c4:61:18:ff:71:86:53:43:4e:21:3a:cd:3c: fc:f0:01:cb:23:c7:26:f6:da:95:6b:0f:f4:f5:86:b7:a9:51: d8:ad:4f:5f:f9:73:ca:12:bc:fd:a8:6b:5d:48:5f:ac:8e:a5: 30:e0:dd:c0:ad:91:76:71:aa:a8:ed:46:ab:55:8a:6a:f0:05: 3b:dd:52:65:42:71:cb:97:f2:40:34:62:03:40:d3:aa:51:2e: c9:09:17:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNhvAsK59IwP0UxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzUyNVoXDTI1MDcyNDA4MzUyNVowLzEtMCsGA1UEAxMk MTg0ZjYyMGUtMGY4My00OTA4LWE3YzMtYWRhOTVhYzk5NGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BgfMahd/EWHhYzCh5vm/4NOI/+jFKDcwVeN t6xwZCkPRJPNloLp5vAHm115g4Tl7UsDe6k4nZD1jjNLRkIFdqRJTwpPIcLp0lvM wP8lUiTkQtlnlLJL+gBVVHlbwFMHdsBcCJ2ixViP+wSNSlloTmlh/QuYzpvzNDYv gEis0RIPBf6x05FgJ7br6hMNb7c39kvpIgMeqa5I2V40yuk3X5c8FjXy6lQ3gvua 1oijlICkvVYsHy6JFzpNFU1UAAtSO4iwe1ibZA8khnULpRt+eEQoaeEsBgvb0QdF Ym2wS3ilNYi3pYBuNMoNpCzx7+vZRaT+Ppu7spP/6lmLQ+71dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGF6HItUgwMpRDydpx895R5S7FuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDM2NmIyMTItYmMwZi0z MGY5LWJhZWMtZTVhNTM3OTE0ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABRCCJHthYBBh2OQlaRCf1b8GHJ2nWRr31rhF85S9GY6BYGhng/V grznKFgs4c8JCt3I+/9pclwkkitHplyEub37ZAEgWEhHnSZ9WPzdNTen876kkfbH hodiPaB16O6vKee7ppbwkzgkbYfRHj1p1ocjBEpjo5EaMAEMtaKYcJRlJZBfxh/b +FTyzdAOZTxsxHnG672O/pzc0vPUbLA+hqJ5skjiBkKkxGEY/3GGU0NOITrNPPzw Acsjxyb22pVrD/T1hrepUditT1/5c8oSvP2oa11IX6yOpTDg3cCtkXZxqqjtRqtV imrwBTvdUmVCccuX8kA0YgNA06pRLskJF3w= -----END CERTIFICATE-----Generated at Tue Apr 29 10:05:22 2025 by rpki-client