$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa File: 3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa (raw, json) Hash identifier: iuvgU4PUBnAXTXOK091X8JlzesKFtZ1EVRRP2vqz4Bc= Subject key identifier: 3B:A9:FD:E4:F7:63:A2:D8:1A:50:1C:C7:82:76:66:DA:43:18:D1:87 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A43587CFED9D16C182E11280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa Signing time: Fri 25 Apr 2025 08:34:15 +0000 ROA not before: Fri 25 Apr 2025 08:34:15 +0000 ROA not after: Thu 24 Jul 2025 08:34:15 +0000 asID: 12041 IP address blocks: 2001:500:ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:87:cf:ed:9d:16:c1:82:e1:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:34:15 2025 GMT Not After : Jul 24 08:34:15 2025 GMT Subject: CN=86ffa2d0-5754-4e92-9a9d-18d2547c76e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1a:64:51:d5:0f:f6:09:8a:41:09:7d:0f:85: 88:31:a6:19:ac:b5:a5:82:38:89:d2:c2:97:6b:4e: 07:08:b2:0b:62:a1:66:e1:0d:a6:2a:b4:1d:b8:1c: ac:69:22:be:e5:7a:d2:44:b0:d9:bf:6a:b2:42:49: 39:54:36:df:b1:81:5d:3d:41:c2:98:5d:cb:f4:d3: 45:fb:98:b3:1c:57:17:c8:9c:ff:d7:61:8e:a2:3e: c7:47:42:3f:3d:35:0e:05:56:d6:d1:6e:53:a1:54: fa:b4:6e:c9:7c:ab:cb:fe:ef:56:f1:2b:0b:37:3c: fe:e9:18:04:6d:eb:71:ac:00:15:05:ac:4a:18:9b: 45:8f:e0:91:22:42:91:70:45:e7:9a:6e:ab:b1:d0: c8:68:69:c9:30:39:68:23:14:56:2b:a3:fc:2b:53: 88:db:57:d5:1d:f5:59:83:7f:84:b0:65:eb:fa:b3: 1b:88:cc:f6:e1:5c:fa:88:b2:1f:1d:cd:2a:f2:b1: 1c:aa:bb:ea:dd:bc:21:0b:1a:89:83:a3:be:2c:3b: 6a:0f:90:f6:11:0f:b8:2c:29:34:88:b6:76:da:ea: ab:f3:bb:7b:38:b0:da:4a:c9:44:4c:d0:d5:b5:c0: a0:11:37:ff:18:62:31:5f:47:23:f7:ea:84:23:d8: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A9:FD:E4:F7:63:A2:D8:1A:50:1C:C7:82:76:66:DA:43:18:D1:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3d9f926b-43e6-3bda-86a3-b0c4e17c0a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:50:28:c4:65:d3:6c:05:11:0f:ea:87:3b:e0:eb:4d:2a:fe: 67:2a:33:c7:b1:b7:84:2f:22:b0:af:8c:6b:d1:61:6e:89:5a: 9c:af:0f:4b:4a:0d:2a:af:dd:dc:56:63:df:1b:0a:ef:45:e5: 9f:20:3c:4d:d8:56:9c:86:c4:26:3d:8b:99:9b:6c:6d:23:f2: 37:31:d0:5c:85:0f:8c:83:c8:46:c3:2d:a8:2a:76:0e:46:63: ba:9c:4d:62:67:7f:26:21:25:6c:03:a0:6b:c9:85:b5:d2:3f: b5:b9:df:3f:b2:e2:93:db:7e:cc:35:fe:62:54:c6:72:2a:f3: 43:47:30:ec:d7:45:20:a1:ee:ce:97:da:70:d2:79:64:26:79: 63:d3:dd:72:c3:90:2b:16:8c:d7:1c:a6:cc:e8:51:18:5c:77: d5:6c:e1:a7:db:49:d2:6d:ca:f8:55:d6:80:52:44:ac:4c:c8: 7c:b7:f6:90:33:16:cc:cb:0e:ff:57:36:bf:22:4e:22:c0:91: b9:79:88:cd:e1:79:ea:1a:bd:9a:a2:5e:48:6c:b7:28:55:ec: fa:e4:c7:b2:26:48:00:a8:35:9c:ec:da:f7:81:73:a1:6b:30: 53:1e:40:fa:62:b5:ae:e1:23:2e:9c:0b:0c:4a:42:6a:0a:ba: ce:16:58:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNYfP7Z0WwYLhEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzQxNVoXDTI1MDcyNDA4MzQxNVowLzEtMCsGA1UEAxMk ODZmZmEyZDAtNTc1NC00ZTkyLTlhOWQtMThkMjU0N2M3NmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BpkUdUP9gmKQQl9D4WIMaYZrLWlgjiJ0sKX a04HCLILYqFm4Q2mKrQduBysaSK+5XrSRLDZv2qyQkk5VDbfsYFdPUHCmF3L9NNF +5izHFcXyJz/12GOoj7HR0I/PTUOBVbW0W5ToVT6tG7JfKvL/u9W8SsLNzz+6RgE betxrAAVBaxKGJtFj+CRIkKRcEXnmm6rsdDIaGnJMDloIxRWK6P8K1OI21fVHfVZ g3+EsGXr+rMbiMz24Vz6iLIfHc0q8rEcqrvq3bwhCxqJg6O+LDtqD5D2EQ+4LCk0 iLZ22uqr87t7OLDaSslETNDVtcCgETf/GGIxX0cj9+qEI9hRRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDup/eT3Y6LYGlAcx4J2ZtpDGNGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2Q5ZjkyNmItNDNlNi0z YmRhLTg2YTMtYjBjNGUxN2MwYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZQKMRl02wFEQ/qhzvg600q/mcqM8ext4QvIrCvjGvRYW6JWpyv D0tKDSqv3dxWY98bCu9F5Z8gPE3YVpyGxCY9i5mbbG0j8jcx0FyFD4yDyEbDLagq dg5GY7qcTWJnfyYhJWwDoGvJhbXSP7W53z+y4pPbfsw1/mJUxnIq80NHMOzXRSCh 7s6X2nDSeWQmeWPT3XLDkCsWjNccpszoURhcd9Vs4afbSdJtyvhV1oBSRKxMyHy3 9pAzFszLDv9XNr8iTiLAkbl5iM3heeoavZqiXkhstyhV7Prkx7ImSACoNZzs2veB c6FrMFMeQPpita7hIy6cCwxKQmoKus4WWAI= -----END CERTIFICATE-----Generated at Tue Apr 29 12:48:50 2025 by rpki-client