$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa File: 11cdd2e2-39fe-3cac-a71b-b6844486d252.roa (raw, json) Hash identifier: I10amuVCZlwibB4hchAwFVPpURzbykT+/ZuGJCRNWCk= Subject key identifier: D4:B7:76:0B:2A:72:85:85:0C:CF:7B:4F:02:B3:12:79:A6:EC:AF:37 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A436720109EAB9525F07F080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa Signing time: Fri 25 Apr 2025 08:36:06 +0000 ROA not before: Fri 25 Apr 2025 08:36:06 +0000 ROA not after: Thu 24 Jul 2025 08:36:06 +0000 asID: 12041 IP address blocks: 2001:500:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:72:01:09:ea:b9:52:5f:07:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:36:06 2025 GMT Not After : Jul 24 08:36:06 2025 GMT Subject: CN=b54205d2-57ea-4f10-86e1-44322d3c3dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:38:f1:d8:4f:ae:5a:9a:fd:43:f7:20:e6: 39:65:ce:9d:74:3a:8f:3f:21:26:d3:03:b0:89:80: 0e:0b:58:c0:31:84:ce:74:94:7e:2f:6a:23:ac:08: b1:9d:fa:a5:f9:8a:1b:07:48:52:16:f1:b4:61:65: a3:7e:cf:47:ee:95:04:47:fd:90:b7:e0:c5:44:98: d5:45:90:00:cc:19:55:58:b9:d1:d2:1f:3b:d5:49: df:fc:fe:e7:9c:1a:98:73:b9:cf:4b:96:b2:70:81: 41:db:70:1f:7b:4b:95:83:c5:0a:ca:9c:c8:a3:f8: 41:59:b1:71:e8:a1:0b:ff:88:75:40:69:48:db:05: 2e:ec:bd:15:fd:d6:67:62:db:b0:da:29:1e:fc:a3: 69:bd:cd:b6:60:a5:9f:32:77:c7:f6:5a:1c:71:70: 0e:33:94:91:ef:ca:4c:d6:9f:c5:bf:a3:7d:08:ec: 02:62:d5:be:54:68:85:b6:36:4f:5b:51:c5:9b:05: 46:bc:7e:8d:1d:55:b2:ac:c5:de:a5:39:17:9c:2f: c6:10:88:c9:20:6b:c2:b0:f9:40:10:86:ff:70:d2: c5:a7:62:3a:cf:a2:ce:c8:a1:56:da:f1:4c:7c:92: 6f:14:cd:d3:1b:cd:e7:1b:44:2a:3d:70:7e:5f:b8: 83:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B7:76:0B:2A:72:85:85:0C:CF:7B:4F:02:B3:12:79:A6:EC:AF:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/11cdd2e2-39fe-3cac-a71b-b6844486d252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:71:d5:d8:69:20:50:62:68:d6:31:d8:f5:c3:72:54:31:02: 62:ea:73:15:6a:4b:96:eb:86:23:ab:59:5b:99:ff:9f:eb:4e: e6:9b:e5:39:a6:1a:dd:5e:94:6f:e1:fd:23:00:c8:17:c5:a3: 9f:d5:d6:29:62:8c:fa:71:0a:ff:ad:b0:3e:fd:18:4a:0d:02: ef:c2:ad:79:da:6c:7e:5a:44:ab:6c:96:08:51:08:73:6d:84: 59:67:60:01:cf:a3:c2:3a:e9:60:cf:aa:93:dc:05:24:f8:eb: 1a:27:87:af:7f:32:4c:42:c7:f0:ca:02:0a:84:d7:71:6d:9e: a3:e9:02:3c:a6:5c:4a:12:73:b9:ec:ac:12:24:36:89:3a:4d: 44:a9:80:c1:5e:e9:a2:88:f1:55:ec:94:3f:71:b4:ad:81:03: 44:86:17:04:b2:e8:b2:42:60:3c:e5:37:7b:c2:e4:ce:f1:62: 4f:5d:c3:c4:ef:d0:be:0d:0e:31:a6:01:04:06:0f:5e:6d:59: c8:ff:c6:87:a3:eb:08:33:ef:d7:e9:13:fd:4b:9e:1e:e7:33: 54:0e:1c:bb:91:4e:88:82:45:9a:b3:c8:dc:25:a7:c3:11:6f: a2:a0:2b:5a:b8:73:3a:7d:42:d1:1e:13:ff:2e:9d:df:a4:de: b5:b1:d7:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNnIBCeq5Ul8H8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzYwNloXDTI1MDcyNDA4MzYwNlowLzEtMCsGA1UEAxMk YjU0MjA1ZDItNTdlYS00ZjEwLTg2ZTEtNDQzMjJkM2MzZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk448dhPrlqa/UP3IOY5Zc6ddDqPPyEm0wOw iYAOC1jAMYTOdJR+L2ojrAixnfql+YobB0hSFvG0YWWjfs9H7pUER/2Qt+DFRJjV RZAAzBlVWLnR0h871Unf/P7nnBqYc7nPS5aycIFB23Afe0uVg8UKypzIo/hBWbFx 6KEL/4h1QGlI2wUu7L0V/dZnYtuw2ike/KNpvc22YKWfMnfH9loccXAOM5SR78pM 1p/Fv6N9COwCYtW+VGiFtjZPW1HFmwVGvH6NHVWyrMXepTkXnC/GEIjJIGvCsPlA EIb/cNLFp2I6z6LOyKFW2vFMfJJvFM3TG83nG0QqPXB+X7iDdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNS3dgsqcoWFDM97TwKzEnmm7K83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTFjZGQyZTItMzlmZS0z Y2FjLWE3MWItYjY4NDQ0ODZkMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVx1dhpIFBiaNYx2PXDclQxAmLqcxVqS5brhiOrWVuZ/5/rTuab 5TmmGt1elG/h/SMAyBfFo5/V1ilijPpxCv+tsD79GEoNAu/CrXnabH5aRKtslghR CHNthFlnYAHPo8I66WDPqpPcBST46xonh69/MkxCx/DKAgqE13FtnqPpAjymXEoS c7nsrBIkNok6TUSpgMFe6aKI8VXslD9xtK2BA0SGFwSy6LJCYDzlN3vC5M7xYk9d w8Tv0L4NDjGmAQQGD15tWcj/xoej6wgz79fpE/1Lnh7nM1QOHLuRToiCRZqzyNwl p8MRb6KgK1q4czp9QtEeE/8und+k3rWx19w= -----END CERTIFICATE-----Generated at Tue Apr 29 18:36:23 2025 by rpki-client