$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa File: 186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa (raw, json) Hash identifier: hmgP0JdKDqd+bgzWyIoznE2G1Pwj5FFq7wbowEZC09M= Subject key identifier: FF:2E:FC:9A:7D:45:CB:6F:78:D1:E2:BF:40:26:86:E3:D9:94:D7:A6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A434CE801BA201021C94C500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa Signing time: Fri 25 Apr 2025 08:32:48 +0000 ROA not before: Fri 25 Apr 2025 08:32:48 +0000 ROA not after: Thu 24 Jul 2025 08:32:48 +0000 asID: 12041 IP address blocks: 2001:500:cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:34:ce:80:1b:a2:01:02:1c:94:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:32:48 2025 GMT Not After : Jul 24 08:32:48 2025 GMT Subject: CN=c5af30eb-26f4-4b6c-a3b4-43b6fe97dbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:33:46:84:4c:f3:98:2a:01:30:3c:be:08:e2: 25:a5:d0:6e:aa:c6:ff:d5:2b:6f:99:b6:0e:30:de: a3:b6:6c:74:25:ae:2b:d0:68:83:0f:c8:1a:8d:da: 80:0a:90:7e:b6:4a:82:b4:ed:9a:73:81:90:c6:0f: 8a:3c:0a:eb:2b:c0:a0:be:34:c6:51:65:5b:0d:b3: 5a:da:2c:ad:ac:b3:b4:20:c0:16:9e:23:70:8f:1f: cc:b0:55:79:79:a1:10:c5:fe:81:7d:f0:ed:66:9f: d3:98:16:05:9f:d7:87:24:12:ea:ba:0d:19:8d:b8: b7:71:32:00:5e:6b:87:9e:03:c6:ea:71:df:1f:af: 84:a8:9d:33:95:f7:69:3f:45:14:a3:3f:02:c7:6c: 5e:4b:24:bc:8a:59:d9:77:07:fc:81:a2:7e:33:a7: fe:7b:a3:f2:7d:44:25:6a:54:86:d3:ef:e8:d7:57: c3:06:7c:5e:6a:e1:3a:fe:de:2e:61:e3:3d:a3:ea: b3:a0:a6:16:0c:4c:81:85:c3:d3:64:9f:bf:f9:66: 53:40:e5:70:3b:d0:75:f9:4f:8e:84:94:f8:7c:7e: 02:38:8f:72:0d:f9:fe:c0:de:85:f3:50:03:dc:da: 8b:29:62:a9:10:28:09:3c:03:0b:d6:9a:2a:57:fd: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2E:FC:9A:7D:45:CB:6F:78:D1:E2:BF:40:26:86:E3:D9:94:D7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/186e0569-7509-3eb0-9b2e-3dcf2dea8d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6c:be:71:4b:62:25:ce:7c:19:71:7f:80:d4:24:da:7c:31: be:eb:85:9e:76:43:66:5d:ae:40:30:40:9a:de:95:48:41:72: e0:19:b1:fc:29:cb:e8:d9:ea:33:85:96:8d:86:d2:c1:5b:c6: 91:02:bd:61:b8:76:45:da:0d:6c:8b:e7:4e:fd:a7:e8:97:c3: da:78:10:07:4e:fb:0e:e0:e9:a9:de:51:a6:c0:f1:7a:05:84: 6f:32:51:f9:75:ab:8a:db:7e:ec:83:2c:81:3e:bc:bf:09:03: 33:4d:1c:2b:78:ac:7a:97:46:bb:94:a9:80:18:73:92:cd:5a: c7:f5:c2:7f:76:08:a1:32:6d:05:2c:6a:6b:bc:c8:88:6f:d8: be:0c:6b:53:9c:7c:33:94:3a:d8:99:56:3e:27:44:d1:c2:15: ee:2d:68:9f:29:c7:fa:98:2e:8d:ce:87:b0:20:0b:60:21:25: de:2a:45:66:14:c0:f9:f9:c4:2c:c5:78:79:fb:4e:db:2a:47: 69:90:86:d3:a1:d0:11:5c:5b:0f:29:e6:50:fa:0c:09:48:b2: 74:82:f3:98:64:59:9c:8b:eb:0a:9b:70:92:ae:b2:48:88:6b: 21:8a:85:6a:a7:e6:51:00:aa:79:f7:c2:9e:2e:e5:d9:1c:84: 12:0f:08:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNM6AG6IBAhyUxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzI0OFoXDTI1MDcyNDA4MzI0OFowLzEtMCsGA1UEAxMk YzVhZjMwZWItMjZmNC00YjZjLWEzYjQtNDNiNmZlOTdkYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzNGhEzzmCoBMDy+COIlpdBuqsb/1StvmbYO MN6jtmx0Ja4r0GiDD8gajdqACpB+tkqCtO2ac4GQxg+KPArrK8CgvjTGUWVbDbNa 2iytrLO0IMAWniNwjx/MsFV5eaEQxf6BffDtZp/TmBYFn9eHJBLqug0Zjbi3cTIA XmuHngPG6nHfH6+EqJ0zlfdpP0UUoz8Cx2xeSyS8ilnZdwf8gaJ+M6f+e6PyfUQl alSG0+/o11fDBnxeauE6/t4uYeM9o+qzoKYWDEyBhcPTZJ+/+WZTQOVwO9B1+U+O hJT4fH4COI9yDfn+wN6F81AD3NqLKWKpECgJPAML1poqV/0sIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP8u/Jp9RctveNHiv0AmhuPZlNemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTg2ZTA1NjktNzUwOS0z ZWIwLTliMmUtM2RjZjJkZWE4ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAxsvnFLYiXOfBlxf4DUJNp8Mb7rhZ52Q2ZdrkAwQJrelUhBcuAZ sfwpy+jZ6jOFlo2G0sFbxpECvWG4dkXaDWyL5079p+iXw9p4EAdO+w7g6aneUabA 8XoFhG8yUfl1q4rbfuyDLIE+vL8JAzNNHCt4rHqXRruUqYAYc5LNWsf1wn92CKEy bQUsamu8yIhv2L4Ma1OcfDOUOtiZVj4nRNHCFe4taJ8px/qYLo3Oh7AgC2AhJd4q RWYUwPn5xCzFeHn7TtsqR2mQhtOh0BFcWw8p5lD6DAlIsnSC85hkWZyL6wqbcJKu skiIayGKhWqn5lEAqnn3wp4u5dkchBIPCPM= -----END CERTIFICATE-----Generated at Tue Apr 29 10:04:50 2025 by rpki-client