$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa File: 08891ef8-25ed-318c-973b-a8f9d9331675.roa (raw, json) Hash identifier: i+05UaZAoztcCTnHjU4xRKbYTcwRLhzPAfTDUXud8Qc= Subject key identifier: CE:86:D7:FF:15:CF:D8:87:98:C7:F0:85:54:EE:90:AC:3A:80:A8:99 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A42E9D9F9D2005F44C303380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa Signing time: Fri 25 Apr 2025 08:20:19 +0000 ROA not before: Fri 25 Apr 2025 08:20:19 +0000 ROA not after: Thu 24 Jul 2025 08:20:19 +0000 asID: 12041 IP address blocks: 2001:500:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:2e:9d:9f:9d:20:05:f4:4c:30:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:20:19 2025 GMT Not After : Jul 24 08:20:19 2025 GMT Subject: CN=fb5200c7-0b6e-4712-b130-1077b0bbaf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:00:83:14:71:47:bb:09:f0:29:ae:e3:63:b4: 21:6e:e6:59:f9:ed:16:fd:af:98:ef:b2:97:f6:d3: 0d:45:1a:c4:38:a7:07:0e:b5:c0:89:d7:69:68:f7: 33:62:2f:c7:eb:f3:24:7b:e5:2c:dd:36:fb:12:f4: 74:f7:e1:11:f5:ce:cb:7d:38:0e:04:de:fa:c7:6c: ce:06:c0:72:82:b5:87:54:ae:2c:22:6c:a5:da:a5: fa:f0:6b:be:6e:3c:fb:53:fc:76:10:c5:13:82:20: 85:91:32:7a:cf:b7:11:d0:b9:2f:3b:18:09:6d:29: 04:50:69:a3:62:bb:3e:4c:c8:67:d3:5f:e0:0f:4f: 6d:1d:4f:86:95:2a:2d:6b:4c:5a:28:11:f7:ae:a0: a4:c2:5a:90:ec:92:ca:bb:1f:b2:c9:fa:a2:6b:3f: 98:cd:e5:86:10:69:d9:eb:3d:ed:f4:d3:05:03:c0: b1:73:c8:c9:c0:be:e0:a7:ca:36:41:0a:92:72:b9: 7c:2e:2a:25:9d:50:e4:7d:b3:20:36:3a:03:ad:6f: fe:7a:f1:97:ba:f7:b8:f9:78:05:35:27:d3:68:83: 46:4f:74:9e:69:b2:2e:7f:4f:2e:a7:37:d3:ea:66: ec:34:06:82:8c:e2:29:fa:ef:c3:fc:4b:06:96:49: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:86:D7:FF:15:CF:D8:87:98:C7:F0:85:54:EE:90:AC:3A:80:A8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/08891ef8-25ed-318c-973b-a8f9d9331675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:25:9a:17:ca:2d:f8:f4:06:36:9c:3f:3e:4b:f4:e6:8b:df: 5f:60:2d:82:a8:0e:bc:6e:07:f6:0e:0a:ee:54:eb:7c:03:fc: d5:88:24:d5:c3:c1:dc:e1:41:d1:01:f4:18:2f:e8:d8:89:1f: 47:3a:3f:7d:e2:db:6f:38:d0:f2:82:24:6e:92:62:86:09:59: 4f:c3:05:a2:ee:91:f0:b4:b8:e6:3c:b3:6d:3a:88:37:4c:a9: 3d:d9:f4:90:a0:0a:21:8b:e3:1a:3a:1b:06:29:37:0d:98:f0: 67:54:83:39:51:fd:31:62:81:a0:64:80:3a:b1:cb:3c:3a:c5: 95:c3:c1:da:1e:80:77:b5:14:61:97:16:04:82:19:82:10:e4: ca:ff:ad:f0:e8:61:6f:ae:be:b0:c5:de:80:32:69:b4:01:8a: 78:07:6d:06:f0:1b:e4:59:58:b7:7a:8e:c0:99:74:ca:26:af: 8f:32:5b:20:8e:da:8d:c9:a9:88:9c:a2:82:ec:fb:83:b5:b3: 4f:5c:e6:bf:50:ef:c4:2a:f6:b9:44:8c:58:e4:23:aa:d2:89: 76:aa:9e:c9:c2:c8:4b:9d:60:d3:c0:5d:b0:83:0d:1d:d3:29: b9:ad:09:90:d1:21:eb:6d:ae:08:89:13:01:d4:0a:04:2a:86: d9:33:3b:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkLp2fnSAF9EwwM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MjAxOVoXDTI1MDcyNDA4MjAxOVowLzEtMCsGA1UEAxMk ZmI1MjAwYzctMGI2ZS00NzEyLWIxMzAtMTA3N2IwYmJhZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhACDFHFHuwnwKa7jY7QhbuZZ+e0W/a+Y77KX 9tMNRRrEOKcHDrXAiddpaPczYi/H6/Mke+Us3Tb7EvR09+ER9c7LfTgOBN76x2zO BsBygrWHVK4sImyl2qX68Gu+bjz7U/x2EMUTgiCFkTJ6z7cR0LkvOxgJbSkEUGmj Yrs+TMhn01/gD09tHU+GlSota0xaKBH3rqCkwlqQ7JLKux+yyfqiaz+YzeWGEGnZ 6z3t9NMFA8Cxc8jJwL7gp8o2QQqScrl8LiolnVDkfbMgNjoDrW/+evGXuve4+XgF NSfTaINGT3SeabIuf08upzfT6mbsNAaCjOIp+u/D/EsGlknW5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM6G1/8Vz9iHmMfwhVTukKw6gKiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDg4OTFlZjgtMjVlZC0z MThjLTk3M2ItYThmOWQ5MzMxNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIwlmhfKLfj0BjacPz5L9OaL319gLYKoDrxuB/YOCu5U63wD/NWI JNXDwdzhQdEB9Bgv6NiJH0c6P33i22840PKCJG6SYoYJWU/DBaLukfC0uOY8s206 iDdMqT3Z9JCgCiGL4xo6GwYpNw2Y8GdUgzlR/TFigaBkgDqxyzw6xZXDwdoegHe1 FGGXFgSCGYIQ5Mr/rfDoYW+uvrDF3oAyabQBingHbQbwG+RZWLd6jsCZdMomr48y WyCO2o3JqYicooLs+4O1s09c5r9Q78Qq9rlEjFjkI6rSiXaqnsnCyEudYNPAXbCD DR3TKbmtCZDRIettrgiJEwHUCgQqhtkzOyU= -----END CERTIFICATE-----Generated at Tue Apr 29 16:20:24 2025 by rpki-client