$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa File: 04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa (raw, json) Hash identifier: KnyA8FWUpxzLO4nokRpPZKoMKlmifSFcOl1+88WzfU4= Subject key identifier: 25:A9:2F:7D:12:AE:3E:79:50:17:B3:24:84:6A:7A:C4:10:C0:B0:51 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A435959F7E85502AE6B92880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa Signing time: Fri 25 Apr 2025 08:34:22 +0000 ROA not before: Fri 25 Apr 2025 08:34:22 +0000 ROA not after: Thu 24 Jul 2025 08:34:22 +0000 asID: 12041 IP address blocks: 2001:500:ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:95:9f:7e:85:50:2a:e6:b9:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:34:22 2025 GMT Not After : Jul 24 08:34:22 2025 GMT Subject: CN=3727e5ae-fdd5-4d25-a0a6-0b444e39434c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dd:77:2c:99:46:2b:27:13:ed:f5:cd:63:aa: f7:f9:04:b2:f8:d4:0c:8e:26:4e:77:b0:c2:c1:be: ec:0f:ce:1f:bd:1b:58:b8:84:1c:0d:4d:4a:5c:f8: d9:63:f7:70:fd:75:96:17:74:0b:98:a9:42:d2:2c: a1:53:4e:23:b1:56:c7:a1:8e:f6:64:aa:66:fc:3f: bf:d9:8a:66:bc:2e:18:ae:62:08:bd:02:98:ff:59: f1:5b:6f:6f:7a:3f:1f:df:b5:50:e6:14:e6:b6:d6: b2:62:a7:e6:d7:2b:8e:41:b4:79:03:eb:9b:5c:6d: 59:0d:64:c3:90:29:90:3c:fd:95:34:c2:47:e4:43: 4d:71:f4:24:2d:0b:09:0f:99:3e:c9:a0:fe:b0:00: 30:ee:fc:48:4c:e3:03:f8:ea:20:40:ea:79:b5:3d: 94:43:f3:3b:9d:e3:d0:83:10:dc:cb:fe:88:54:e8: 20:d1:03:94:f6:1c:2b:40:3f:2d:57:5e:16:d5:29: e1:90:53:e4:d2:2b:fa:05:5c:b9:0e:01:78:b7:f0: 71:cc:ac:32:6e:b8:92:22:71:0a:1b:39:ec:4f:ec: 93:bb:51:3c:d3:0c:22:77:bf:03:c6:77:41:92:00: ef:de:01:d0:c2:4c:c3:05:f3:b5:98:b8:7d:7b:d8: 18:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A9:2F:7D:12:AE:3E:79:50:17:B3:24:84:6A:7A:C4:10:C0:B0:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/04ce292f-3ad9-3e36-bd36-09ed1e3b2122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:4f:85:50:37:9a:f8:ee:71:36:17:64:de:22:42:f9:1e:38: 15:ad:dc:10:c4:fa:9f:ae:b2:f4:9a:8f:f0:ea:1d:ff:71:3f: cc:e9:7c:3e:14:b8:8c:97:09:10:14:a9:3f:57:02:18:bc:0a: e1:1b:66:cb:7b:02:be:f0:7f:a7:0f:d4:ee:13:8a:bd:40:6d: ac:ab:3a:02:16:ff:fe:45:0e:e8:36:05:4a:04:83:3c:48:46: 57:ff:cc:0d:84:5a:b2:f1:fe:82:44:58:bd:25:ae:d6:1a:38: 3e:56:23:93:fb:08:86:d6:0c:60:70:bf:1c:99:46:ac:84:59: 77:ab:b9:03:09:bf:9b:8c:f5:0f:6a:f0:d3:e8:03:79:b7:4b: 35:90:9d:08:52:c9:75:0f:0c:3b:07:e5:ec:8a:81:d2:46:cd: 7b:cf:68:5d:cf:66:44:ef:2b:6d:4b:51:16:1b:2e:07:30:c2: cf:61:56:63:b6:20:2a:45:5c:ed:5b:df:47:04:dc:71:79:30: 64:e1:eb:f6:66:0c:1c:9e:24:ae:a0:c2:04:d9:9b:d9:9c:5d: 91:a1:6f:ee:85:f0:f2:2e:89:6b:b3:87:30:3e:04:e3:45:7b: ef:06:58:f1:68:73:4e:d8:d3:f8:49:be:ac:50:a2:ba:93:c0: 8e:36:2e:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNZWffoVQKua5KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzQyMloXDTI1MDcyNDA4MzQyMlowLzEtMCsGA1UEAxMk MzcyN2U1YWUtZmRkNS00ZDI1LWEwYTYtMGI0NDRlMzk0MzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt13LJlGKycT7fXNY6r3+QSy+NQMjiZOd7DC wb7sD84fvRtYuIQcDU1KXPjZY/dw/XWWF3QLmKlC0iyhU04jsVbHoY72ZKpm/D+/ 2YpmvC4YrmIIvQKY/1nxW29vej8f37VQ5hTmttayYqfm1yuOQbR5A+ubXG1ZDWTD kCmQPP2VNMJH5ENNcfQkLQsJD5k+yaD+sAAw7vxITOMD+OogQOp5tT2UQ/M7nePQ gxDcy/6IVOgg0QOU9hwrQD8tV14W1SnhkFPk0iv6BVy5DgF4t/BxzKwybriSInEK GznsT+yTu1E80wwid78DxndBkgDv3gHQwkzDBfO1mLh9e9gYPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCWpL30Srj55UBezJIRqesQQwLBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDRjZTI5MmYtM2FkOS0z ZTM2LWJkMzYtMDllZDFlM2IyMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFtPhVA3mvjucTYXZN4iQvkeOBWt3BDE+p+usvSaj/DqHf9xP8zp fD4UuIyXCRAUqT9XAhi8CuEbZst7Ar7wf6cP1O4Tir1AbayrOgIW//5FDug2BUoE gzxIRlf/zA2EWrLx/oJEWL0lrtYaOD5WI5P7CIbWDGBwvxyZRqyEWXeruQMJv5uM 9Q9q8NPoA3m3SzWQnQhSyXUPDDsH5eyKgdJGzXvPaF3PZkTvK21LURYbLgcwws9h VmO2ICpFXO1b30cE3HF5MGTh6/ZmDByeJK6gwgTZm9mcXZGhb+6F8PIuiWuzhzA+ BONFe+8GWPFoc07Y0/hJvqxQorqTwI42Lmg= -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:32 2025 by rpki-client