$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/383ce94f-9ffa-30e1-83b5-9576304cf143.roa File: 383ce94f-9ffa-30e1-83b5-9576304cf143.roa (raw, json) Hash identifier: q3BP7UzrrD5kvB83Uk89qqhqvwqwJfED859SnSOC1Rw= Subject key identifier: 4C:52:9D:0D:7A:1B:4B:C4:9C:CE:A4:19:DA:E1:13:38:3C:CA:A4:4E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A436DA5F04723420AA5613C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/383ce94f-9ffa-30e1-83b5-9576304cf143.roa Signing time: Fri 25 Apr 2025 08:36:55 +0000 ROA not before: Fri 25 Apr 2025 08:36:55 +0000 ROA not after: Thu 24 Jul 2025 08:36:55 +0000 asID: 12041 IP address blocks: 2001:500:55::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:da:5f:04:72:34:20:aa:56:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:36:55 2025 GMT Not After : Jul 24 08:36:55 2025 GMT Subject: CN=2284bc13-8ac3-47a0-8799-2a98add39bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d7:e3:61:9c:41:76:e6:83:2c:6d:7a:f5:fd: b1:e3:dc:de:22:b1:0d:0f:87:ae:3d:43:68:68:be: e0:c7:69:64:af:0f:b0:4f:dd:4a:d5:73:9f:01:9b: c0:6b:55:e5:2f:4e:96:02:ce:81:66:50:06:e0:ec: 9f:bb:46:63:e3:ea:f0:7d:1c:a9:70:28:74:60:e8: 18:0b:0e:9c:3a:fb:22:5c:89:60:42:49:fe:46:3f: d9:57:b2:09:09:e4:47:f1:31:c6:e4:1c:3e:6b:9c: d4:67:41:c0:1b:de:56:b6:0a:54:b7:2f:02:aa:e0: 92:8f:14:42:58:03:bd:d8:a6:c6:b4:22:42:db:d0: 66:cf:2b:96:0f:a9:4d:c8:1e:c3:a3:27:c1:d5:9b: bf:7e:2f:45:42:30:f1:53:01:0a:5b:51:19:56:47: 54:10:45:d7:4c:ee:16:9f:5d:17:5a:4d:dd:03:e6: 92:f3:17:1e:9b:f4:22:12:80:c3:ee:db:88:f7:2e: e7:6c:cf:0c:7a:03:e7:c6:53:e8:88:c6:3a:9d:62: c0:13:05:34:ae:68:3c:cc:47:b6:1d:6d:53:51:a4: 0e:52:71:29:7b:7f:59:e6:aa:19:8e:a3:4c:50:62: d1:46:0e:93:0d:50:13:e3:2d:c6:c5:a8:ed:ba:59: d3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:52:9D:0D:7A:1B:4B:C4:9C:CE:A4:19:DA:E1:13:38:3C:CA:A4:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/383ce94f-9ffa-30e1-83b5-9576304cf143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:55::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5a:26:a6:ba:94:fb:5c:19:48:19:11:09:66:c8:55:fc:3a: 92:23:75:01:3b:38:ec:4e:9d:84:af:01:fd:95:30:63:7a:28: 13:5b:1b:16:13:5d:4b:7b:77:6d:aa:6c:19:63:2d:e3:09:25: b5:51:21:64:f0:1d:43:01:28:5f:65:3b:cc:1b:f8:26:40:31: 61:94:2b:75:e0:e8:cf:48:05:f7:17:99:4c:dc:5a:e7:30:96: c7:bc:24:53:5a:3d:fb:6e:b6:90:93:28:47:e5:6a:7e:43:5d: e8:1e:26:17:21:4f:77:6d:88:de:9a:bf:98:44:60:40:5d:74: 71:db:58:16:61:c2:fa:5f:6f:4f:bc:67:d1:70:ad:a3:48:85: 63:b6:6c:d3:72:92:b7:8a:f1:b7:b8:05:86:7c:6c:2e:b8:26: 04:29:e6:91:8d:1a:f8:77:70:5c:31:52:5b:93:39:c4:88:9e: 2e:b7:77:f5:be:ec:48:2d:e9:d7:90:4d:cb:43:fd:4b:2a:dc: 29:6c:f3:a4:d2:4d:89:a2:e6:45:69:1e:7e:b6:4a:9e:e9:b7: cf:7c:59:95:5f:72:40:ec:2f:3c:0e:53:38:7d:a2:ec:b8:a2: 9c:e9:6c:c4:85:9d:10:d9:19:18:f9:67:78:ab:45:cc:d6:80: 31:8d:d1:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNtpfBHI0IKpWE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzY1NVoXDTI1MDcyNDA4MzY1NVowLzEtMCsGA1UEAxMk MjI4NGJjMTMtOGFjMy00N2EwLTg3OTktMmE5OGFkZDM5YmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNfjYZxBduaDLG169f2x49zeIrEND4euPUNo aL7gx2lkrw+wT91K1XOfAZvAa1XlL06WAs6BZlAG4Oyfu0Zj4+rwfRypcCh0YOgY Cw6cOvsiXIlgQkn+Rj/ZV7IJCeRH8THG5Bw+a5zUZ0HAG95WtgpUty8CquCSjxRC WAO92KbGtCJC29BmzyuWD6lNyB7DoyfB1Zu/fi9FQjDxUwEKW1EZVkdUEEXXTO4W n10XWk3dA+aS8xcem/QiEoDD7tuI9y7nbM8MegPnxlPoiMY6nWLAEwU0rmg8zEe2 HW1TUaQOUnEpe39Z5qoZjqNMUGLRRg6TDVAT4y3GxajtulnT6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFExSnQ16G0vEnM6kGdrhEzg8yqROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzgzY2U5NGYtOWZmYS0z MGUxLTgzYjUtOTU3NjMwNGNmMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhaJqa6lPtcGUgZEQlmyFX8OpIjdQE7OOxOnYSvAf2VMGN6KBNb GxYTXUt7d22qbBljLeMJJbVRIWTwHUMBKF9lO8wb+CZAMWGUK3Xg6M9IBfcXmUzc Wucwlse8JFNaPftutpCTKEflan5DXegeJhchT3dtiN6av5hEYEBddHHbWBZhwvpf b0+8Z9FwraNIhWO2bNNykreK8be4BYZ8bC64JgQp5pGNGvh3cFwxUluTOcSIni63 d/W+7Egt6deQTctD/Usq3Cls86TSTYmi5kVpHn62Sp7pt898WZVfckDsLzwOUzh9 ouy4opzpbMSFnRDZGRj5Z3irRczWgDGN0cU= -----END CERTIFICATE-----Generated at Tue Apr 29 12:06:53 2025 by rpki-client