$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/318e4f33-d285-3655-ab9d-10c9a0009d02.roa File: 318e4f33-d285-3655-ab9d-10c9a0009d02.roa (raw, json) Hash identifier: Uyr3uRj5SEgA65FsiGXFsPT8i1FoBJi71X/YEvc5iaI= Subject key identifier: 4E:BC:F1:1C:4C:CE:2B:28:DF:57:63:1F:69:62:A0:70:CC:74:0F:E7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A23E324E47D8624882EB7980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/318e4f33-d285-3655-ab9d-10c9a0009d02.roa Signing time: Thu 24 Apr 2025 15:40:06 +0000 ROA not before: Thu 24 Apr 2025 15:40:06 +0000 ROA not after: Wed 23 Jul 2025 15:40:06 +0000 asID: 207266 IP address blocks: 2001:500:4a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:3e:32:4e:47:d8:62:48:82:eb:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 15:40:06 2025 GMT Not After : Jul 23 15:40:06 2025 GMT Subject: CN=c13fb35b-89c9-4d04-8d9f-3a72a1789192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:ac:04:32:cd:cf:cd:7d:53:d8:45:a8:2e: 1f:3f:02:20:b2:f0:0a:e0:19:a8:76:96:cd:34:5e: 98:ce:42:e5:55:9c:ce:44:89:38:d2:4c:85:f5:1b: 8d:1c:c8:68:a9:16:37:c9:8a:44:a2:9f:37:03:42: d5:5b:b6:a9:65:0c:e6:5b:4c:e0:a2:17:e4:84:3d: 47:64:7c:5c:d1:5d:a1:d9:ca:67:f3:9b:92:20:46: 34:ee:40:82:e2:40:35:46:0f:e9:a9:c9:08:6a:11: 5c:36:28:04:2b:18:84:88:64:76:a2:97:4a:17:2a: c1:1a:df:37:27:e5:1f:2a:70:f9:3d:0f:ab:69:87: ed:98:3a:e4:21:29:63:8a:b3:74:95:1d:38:6b:05: 3b:9a:38:5b:95:9d:29:62:e6:d5:5d:e8:bd:b6:b3: fb:43:2a:8e:8f:0a:ce:79:18:eb:ae:39:08:95:bc: 77:c7:22:96:35:4f:be:f0:73:32:2c:06:23:03:65: bc:41:06:a7:39:bd:0f:23:1c:ca:5b:68:4d:76:25: 8d:84:f9:5f:9f:e1:0a:d8:c7:55:77:0e:db:37:43: f5:9a:1d:00:60:a7:e7:69:e1:ac:f4:73:53:e5:08: 8a:55:d7:68:f0:95:60:be:df:d3:97:d9:d5:22:61: 7b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BC:F1:1C:4C:CE:2B:28:DF:57:63:1F:69:62:A0:70:CC:74:0F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/318e4f33-d285-3655-ab9d-10c9a0009d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:77:c1:fa:b0:2d:ea:d6:6b:37:cb:c4:63:a5:36:ed:d3:b3: bd:a4:81:d9:09:c6:af:e5:05:2c:6c:9c:17:44:d7:de:f2:74: d2:33:0a:6f:d8:78:b7:7a:11:3f:6a:58:e9:4e:8a:2a:7f:30: e4:b2:41:2c:1b:62:20:48:5f:a4:5a:e1:61:20:6e:c7:c5:87: 47:9f:c0:89:07:0d:4f:a5:b1:54:b7:c8:8e:41:14:1d:73:16: 9b:39:80:2f:ac:e9:25:f5:86:d4:01:52:ab:1b:1a:50:7d:6e: 87:cd:57:52:a8:44:de:17:ee:6d:1e:c1:f5:24:82:e2:32:42: 94:c8:e0:dd:f0:09:e4:92:df:b2:bc:94:ee:93:be:69:4e:e7: a2:bd:c1:cf:59:96:b1:df:5d:89:04:08:c1:68:29:2c:ce:f0: 76:72:53:e2:c5:c0:27:79:a4:11:22:43:20:60:96:54:b5:f2: c0:1e:ac:49:d0:b9:c5:7b:35:5b:7f:11:63:fc:18:cc:c0:12: 4a:60:2f:99:f7:fc:37:19:d9:65:b8:58:a0:0d:83:b2:1b:93: b9:4f:75:a4:e7:f5:85:c7:7a:dd:fd:60:96:5b:bb:9e:20:d9: 0c:4a:f0:43:0e:bd:42:af:61:92:b9:0a:21:98:ad:78:9e:dd: e4:1e:66:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmiPjJOR9hiSILreYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE1NDAwNloXDTI1MDcyMzE1NDAwNlowLzEtMCsGA1UEAxMk YzEzZmIzNWItODljOS00ZDA0LThkOWYtM2E3MmExNzg5MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiKsBDLNz819U9hFqC4fPwIgsvAK4BmodpbN NF6YzkLlVZzORIk40kyF9RuNHMhoqRY3yYpEop83A0LVW7apZQzmW0zgohfkhD1H ZHxc0V2h2cpn85uSIEY07kCC4kA1Rg/pqckIahFcNigEKxiEiGR2opdKFyrBGt83 J+UfKnD5PQ+raYftmDrkISljirN0lR04awU7mjhblZ0pYubVXei9trP7QyqOjwrO eRjrrjkIlbx3xyKWNU++8HMyLAYjA2W8QQanOb0PIxzKW2hNdiWNhPlfn+EK2MdV dw7bN0P1mh0AYKfnaeGs9HNT5QiKVddo8JVgvt/Tl9nVImF7NQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE688RxMziso31djH2lioHDMdA/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzE4ZTRmMzMtZDI4NS0z NjU1LWFiOWQtMTBjOWEwMDA5ZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKd3wfqwLerWazfLxGOlNu3Ts72kgdkJxq/lBSxsnBdE197ydNIz Cm/YeLd6ET9qWOlOiip/MOSyQSwbYiBIX6Ra4WEgbsfFh0efwIkHDU+lsVS3yI5B FB1zFps5gC+s6SX1htQBUqsbGlB9bofNV1KoRN4X7m0ewfUkguIyQpTI4N3wCeSS 37K8lO6TvmlO56K9wc9ZlrHfXYkECMFoKSzO8HZyU+LFwCd5pBEiQyBgllS18sAe rEnQucV7NVt/EWP8GMzAEkpgL5n3/DcZ2WW4WKANg7Ibk7lPdaTn9YXHet39YJZb u54g2QxK8EMOvUKvYZK5CiGYrXie3eQeZkE= -----END CERTIFICATE-----Generated at Wed Apr 30 01:35:20 2025 by rpki-client