$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa File: 49bbbd0f-35ec-3df0-96be-ba897acece3b.roa (raw, json) Hash identifier: V4ttEtOxOLD8oGUgpJOlo8VxRJ0kE6IJO5UwehLEWIs= Subject key identifier: BC:08:B9:62:79:FD:AC:D1:9E:20:F6:D3:41:98:85:DB:C8:99:BF:23 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A435B85484B8B9C0B87B9B40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa Signing time: Fri 25 Apr 2025 08:34:38 +0000 ROA not before: Fri 25 Apr 2025 08:34:38 +0000 ROA not after: Thu 24 Jul 2025 08:34:38 +0000 asID: 12041 IP address blocks: 2001:500:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:b8:54:84:b8:b9:c0:b8:7b:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:34:38 2025 GMT Not After : Jul 24 08:34:38 2025 GMT Subject: CN=52a56510-c056-466a-bd3d-60f0ab52e933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:5b:eb:e9:96:8d:ea:70:98:3b:e2:3e:c9: 1f:cf:0d:23:e1:57:48:13:8a:5f:97:87:62:3e:2e: 5a:1d:cb:48:fe:b8:60:78:9b:e1:fe:9a:ef:4d:81: 99:87:13:4d:44:40:9e:87:c6:a9:9f:d0:f2:5c:7b: de:23:47:fc:41:20:99:1c:c8:12:80:05:76:95:5c: 68:5f:06:f3:a1:5e:71:fd:26:9b:0c:d7:b6:51:6e: 11:59:24:27:ff:28:f2:e3:33:25:65:27:5c:c4:01: 5b:da:04:36:3b:e0:9e:d0:b2:d6:ef:3c:3b:57:e3: 1b:55:1e:b3:08:7b:1e:80:80:75:8f:cc:c5:47:d5: 50:56:d6:40:6e:d9:68:77:94:0c:c5:bf:c3:51:bb: 37:c3:85:ee:b7:82:56:62:16:5a:68:30:f6:85:84: 34:80:77:38:35:b8:db:94:73:b9:1b:df:e7:20:40: b8:37:03:8e:2a:62:66:c6:de:7b:d8:47:06:e2:5a: 78:7c:ec:64:8c:3c:3d:db:38:ef:7f:6b:30:bf:65: a2:d9:cf:97:f8:fd:99:42:81:9f:42:e4:1d:59:f1: 66:5f:b4:9d:a6:43:ea:ec:0a:40:2f:d5:c4:d5:1f: d5:7b:db:8c:7d:88:7a:eb:2a:37:28:c4:30:8f:54: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:08:B9:62:79:FD:AC:D1:9E:20:F6:D3:41:98:85:DB:C8:99:BF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/49bbbd0f-35ec-3df0-96be-ba897acece3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:56:1a:7a:5b:a5:14:9c:aa:e5:63:d2:77:63:60:2b:4c:1c: 26:7c:6b:4e:62:c5:0e:ac:10:b8:90:4a:cd:ea:48:e2:9f:d4: a5:f3:26:d7:b6:ae:33:40:fe:2c:16:18:32:ca:fe:fe:13:81: 03:32:a5:84:7f:71:34:65:e2:84:3d:11:d3:de:56:a9:b4:eb: 90:fd:08:b9:4e:81:7e:92:6a:fe:a8:d5:37:15:0a:14:8a:f3: 69:45:a8:68:7a:b2:e6:4e:3a:17:ca:44:2a:36:9f:8a:9d:e7: 48:65:a8:b8:92:81:d7:4f:b2:a6:f9:3b:06:2f:9e:eb:fe:a1: 6e:6f:b1:ce:97:6c:6a:71:43:07:30:e6:39:f4:f2:7e:ca:03: f8:b4:cd:02:40:13:b6:61:98:a1:2d:cc:b0:b2:00:35:ae:7f: 62:cb:60:ff:d2:ca:14:7c:5f:08:63:cd:a7:c9:f3:c5:cc:e9: d8:ae:6e:d0:f8:52:88:63:94:7b:80:67:56:2e:36:d6:1e:29: 66:c0:a8:ae:61:41:90:22:a2:74:fa:91:03:10:57:54:8f:a3: 2e:74:51:ae:d6:5b:f1:08:3e:7d:c5:73:bd:38:f2:eb:c0:ee: 99:48:85:8b:7c:e3:1e:f5:8a:32:3f:13:af:a3:30:a2:be:c0: 94:a9:8a:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNbhUhLi5wLh7m0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzQzOFoXDTI1MDcyNDA4MzQzOFowLzEtMCsGA1UEAxMk NTJhNTY1MTAtYzA1Ni00NjZhLWJkM2QtNjBmMGFiNTJlOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlghb6+mWjepwmDviPskfzw0j4VdIE4pfl4di Pi5aHctI/rhgeJvh/prvTYGZhxNNRECeh8apn9DyXHveI0f8QSCZHMgSgAV2lVxo XwbzoV5x/SabDNe2UW4RWSQn/yjy4zMlZSdcxAFb2gQ2O+Ce0LLW7zw7V+MbVR6z CHsegIB1j8zFR9VQVtZAbtlod5QMxb/DUbs3w4Xut4JWYhZaaDD2hYQ0gHc4Nbjb lHO5G9/nIEC4NwOOKmJmxt572EcG4lp4fOxkjDw92zjvf2swv2Wi2c+X+P2ZQoGf QuQdWfFmX7SdpkPq7ApAL9XE1R/Ve9uMfYh66yo3KMQwj1TMMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLwIuWJ5/azRniD200GYhdvImb8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDliYmJkMGYtMzVlYy0z ZGYwLTk2YmUtYmE4OTdhY2VjZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABWGnpbpRScquVj0ndjYCtMHCZ8a05ixQ6sELiQSs3qSOKf1KXz Jte2rjNA/iwWGDLK/v4TgQMypYR/cTRl4oQ9EdPeVqm065D9CLlOgX6Sav6o1TcV ChSK82lFqGh6suZOOhfKRCo2n4qd50hlqLiSgddPsqb5OwYvnuv+oW5vsc6XbGpx Qwcw5jn08n7KA/i0zQJAE7ZhmKEtzLCyADWuf2LLYP/SyhR8XwhjzafJ88XM6diu btD4UohjlHuAZ1YuNtYeKWbAqK5hQZAionT6kQMQV1SPoy50Ua7WW/EIPn3Fc704 8uvA7plIhYt84x71ijI/E6+jMKK+wJSpils= -----END CERTIFICATE-----Generated at Tue Apr 29 13:23:22 2025 by rpki-client