$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa File: 095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa (raw, json) Hash identifier: SwduwAvoxPjkLbA/E6LDrzpTZFJk/MJipDaX4HQ3/OQ= Subject key identifier: A2:67:D7:74:59:F2:BC:FF:36:D9:E4:AB:A9:46:77:07:4C:06:0A:91 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A23E51ABDED1932EE041DD80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa Signing time: Thu 24 Apr 2025 15:40:21 +0000 ROA not before: Thu 24 Apr 2025 15:40:21 +0000 ROA not after: Wed 23 Jul 2025 15:40:21 +0000 asID: 207266 IP address blocks: 2001:500:4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:3e:51:ab:de:d1:93:2e:e0:41:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 15:40:21 2025 GMT Not After : Jul 23 15:40:21 2025 GMT Subject: CN=bad77f63-3896-4d20-864c-e03b1c395b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:cb:41:34:ba:23:fb:f3:80:a8:05:40:a7: 2c:88:b3:e1:25:cc:84:3a:37:76:06:d1:67:78:22: 9b:06:e8:9b:07:24:d0:eb:46:58:54:e2:23:86:cf: 43:e5:ef:ed:43:2f:62:34:5a:81:63:ab:35:ca:27: b7:26:26:a9:63:72:4e:9d:38:d1:7a:e8:23:a9:7e: 1f:1c:b8:d9:10:a4:2b:77:99:0e:3f:ae:ba:4d:6b: f4:f1:1b:5b:7d:a4:71:be:34:cd:e4:6d:8f:51:d7: fe:76:93:f5:52:10:d9:bb:77:3c:a0:84:9f:bd:05: c5:ba:3f:0e:7e:44:51:11:4c:bc:63:6c:1e:e6:0a: 62:5e:31:10:97:72:11:09:d8:d1:f9:35:03:26:19: a6:0f:6d:38:ee:2b:7c:b7:e8:68:67:60:4e:c3:8d: 3a:dd:6c:a0:19:5e:cf:7e:d9:bc:4a:c4:71:8e:f6: 79:89:52:e0:a3:27:bf:44:b4:62:fe:31:ba:48:7f: 0b:c4:b2:ac:b9:ca:55:d6:12:bc:b5:c5:e3:77:ef: a2:a2:46:90:d8:95:7b:bc:ab:33:e8:db:82:7d:2d: d2:29:5a:45:76:9e:09:e7:81:14:52:43:40:d1:a7: 14:f6:bf:26:ad:9f:f3:2e:5b:b0:8b:9c:24:27:97: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:67:D7:74:59:F2:BC:FF:36:D9:E4:AB:A9:46:77:07:4C:06:0A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/095223a2-77aa-32e9-9655-7dc8e7c6bb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ab:51:2f:2a:18:b2:00:79:2f:a2:21:e2:e7:5e:51:34:74: 4f:c7:65:3f:cf:4e:e4:4a:ee:6a:74:98:94:d0:5c:41:1d:0a: 45:6d:c8:8b:6f:f4:d6:08:35:13:4c:18:ab:1b:9d:bc:cf:d1: 5a:ec:8b:9d:ac:0a:ce:af:6e:be:3c:9c:9d:55:57:e3:c6:81: 8f:05:f8:69:35:23:79:c1:82:86:89:31:c4:1e:67:9c:ae:f8: 82:b6:c8:0d:43:e9:87:7a:17:71:6c:d3:f2:ed:2e:11:a2:b3: c9:11:6f:98:e7:81:1b:79:ad:c5:fe:aa:41:f0:92:7b:88:c2: 65:fa:b5:45:ba:91:b8:ca:48:7f:be:e9:39:e3:6f:07:05:34: 1f:1c:5e:89:b7:68:ca:4f:e7:96:38:9c:dd:ab:2e:3e:6d:b0: 60:77:72:d1:6b:29:ff:ba:13:02:1c:03:d0:c2:eb:9f:e7:d6: 31:74:d7:96:24:72:7e:53:21:8b:4d:15:42:9c:5d:60:65:77: e7:b6:34:25:f0:04:dd:52:3a:25:2e:12:43:50:e9:26:ee:d7: 73:85:37:2a:d5:cd:fe:6f:f2:af:59:32:79:8d:ab:f6:52:c5: b5:dc:a7:7d:34:3d:85:ca:25:2d:c3:83:f3:35:f9:b6:b6:1f: 92:4a:eb:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmiPlGr3tGTLuBB3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE1NDAyMVoXDTI1MDcyMzE1NDAyMVowLzEtMCsGA1UEAxMk YmFkNzdmNjMtMzg5Ni00ZDIwLTg2NGMtZTAzYjFjMzk1YjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1vLQTS6I/vzgKgFQKcsiLPhJcyEOjd2BtFn eCKbBuibByTQ60ZYVOIjhs9D5e/tQy9iNFqBY6s1yie3JiapY3JOnTjReugjqX4f HLjZEKQrd5kOP666TWv08RtbfaRxvjTN5G2PUdf+dpP1UhDZu3c8oISfvQXFuj8O fkRREUy8Y2we5gpiXjEQl3IRCdjR+TUDJhmmD2047it8t+hoZ2BOw4063WygGV7P ftm8SsRxjvZ5iVLgoye/RLRi/jG6SH8LxLKsucpV1hK8tcXjd++iokaQ2JV7vKsz 6NuCfS3SKVpFdp4J54EUUkNA0acU9r8mrZ/zLluwi5wkJ5cWfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKJn13RZ8rz/Ntnkq6lGdwdMBgqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDk1MjIzYTItNzdhYS0z MmU5LTk2NTUtN2RjOGU3YzZiYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADarUS8qGLIAeS+iIeLnXlE0dE/HZT/PTuRK7mp0mJTQXEEdCkVt yItv9NYINRNMGKsbnbzP0Vrsi52sCs6vbr48nJ1VV+PGgY8F+Gk1I3nBgoaJMcQe Z5yu+IK2yA1D6Yd6F3Fs0/LtLhGis8kRb5jngRt5rcX+qkHwknuIwmX6tUW6kbjK SH++6TnjbwcFNB8cXom3aMpP55Y4nN2rLj5tsGB3ctFrKf+6EwIcA9DC65/n1jF0 15Ykcn5TIYtNFUKcXWBld+e2NCXwBN1SOiUuEkNQ6Sbu13OFNyrVzf5v8q9ZMnmN q/ZSxbXcp300PYXKJS3Dg/M1+ba2H5JK62w= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:42 2025 by rpki-client