$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa File: 501986f1-6af8-32f5-b7de-589152f724d2.roa (raw, json) Hash identifier: QuSNln3Tg4pzKhUCmWxHvCxC383H6hdWmQc2X67OwP8= Subject key identifier: EE:8F:82:8A:56:B6:81:D6:8D:C8:BE:65:53:F3:74:8F:4B:3F:F3:4F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A42EB85C245DAE0702B7CA20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa Signing time: Fri 25 Apr 2025 08:20:32 +0000 ROA not before: Fri 25 Apr 2025 08:20:32 +0000 ROA not after: Thu 24 Jul 2025 08:20:32 +0000 asID: 12041 IP address blocks: 2001:500:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:2e:b8:5c:24:5d:ae:07:02:b7:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:20:32 2025 GMT Not After : Jul 24 08:20:32 2025 GMT Subject: CN=a2e99559-c34f-4f59-84dd-46b5b220c8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:61:b6:89:4b:9c:7d:7f:85:99:18:60:87: f1:3c:77:be:32:93:e5:9d:67:4c:7b:51:a4:30:c6: 85:5c:39:98:c4:42:55:47:2d:46:3c:a1:12:e6:7b: 7f:6c:6d:2c:41:a2:7b:6d:e0:cf:09:68:81:c7:4b: 16:b7:6a:c3:09:12:19:bf:81:1a:f1:c2:56:32:b3: ce:b8:fc:34:ea:8f:62:f1:62:8e:ea:c7:4b:1a:ee: 7d:1e:58:34:6a:ab:81:c8:b6:8e:fd:ab:50:41:b2: 47:90:e7:6c:53:9a:7a:3b:4b:71:2a:ce:59:c5:d5: df:25:92:5f:0a:54:7a:63:9e:41:23:f2:9d:78:6c: 8c:70:e3:81:b7:0d:ba:7c:fb:2d:cf:ac:de:14:d8: 7e:9d:fa:8f:9a:f2:6c:35:45:e7:49:39:6a:01:98: 2f:70:48:6a:6f:1f:74:0b:f5:9d:ff:ba:b3:fe:bf: 39:f0:d6:e4:bf:04:38:16:52:12:3d:f0:f5:65:e2: 99:5f:cd:16:d9:1e:c7:72:b7:11:e9:ae:95:3a:b2: b5:c3:f2:f3:12:b5:37:57:7e:18:9a:47:dd:90:34: bf:c7:f3:62:f5:ba:46:c6:bd:ef:f2:8a:d4:09:58: 5f:2f:5f:c1:23:51:bc:28:14:56:b4:b9:83:81:6d: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8F:82:8A:56:B6:81:D6:8D:C8:BE:65:53:F3:74:8F:4B:3F:F3:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/501986f1-6af8-32f5-b7de-589152f724d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:37:2c:89:5d:c2:e8:67:83:75:7b:0a:03:4c:1c:fd:fa:6e: c2:23:fd:29:f3:0d:ad:2c:01:19:b6:2f:bc:f6:6d:eb:e2:23: 09:c4:d7:59:99:2e:56:45:f6:c9:dc:57:fc:93:5e:56:9c:16: bb:56:7c:2b:69:db:01:ef:63:0d:a8:f5:00:a2:15:a8:b3:98: 30:2f:2b:fb:87:b1:27:a9:1e:c7:8b:d9:c5:09:ed:54:da:64: 04:f6:63:a1:3f:a8:96:00:27:ff:8e:20:08:5f:8c:e1:09:26: 0d:5a:4c:47:7c:7f:c6:d1:36:f1:1e:ee:17:2c:e3:ef:ba:f2: 48:9d:81:d4:e4:bf:1b:43:1d:9c:09:e6:51:60:27:4d:87:0e: 64:21:c3:67:c7:b0:93:16:66:5e:83:0e:79:ed:04:e9:00:9d: fb:ce:8a:a7:ec:a2:45:86:33:b3:8f:ed:10:4c:04:96:1a:37: 07:db:ea:00:26:ab:42:8b:6a:23:b2:57:fd:01:01:f3:6d:b2: 79:e1:42:13:69:52:f8:a6:77:aa:df:4f:55:0c:4f:5f:13:c8: f7:b5:f0:29:0d:82:d6:6f:89:c6:45:56:bc:2b:63:b1:71:42: bf:bf:b6:61:86:82:83:fa:40:a0:c9:6e:b5:23:02:fd:3b:d5: 75:70:36:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkLrhcJF2uBwK3yiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MjAzMloXDTI1MDcyNDA4MjAzMlowLzEtMCsGA1UEAxMk YTJlOTk1NTktYzM0Zi00ZjU5LTg0ZGQtNDZiNWIyMjBjOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrdhtolLnH1/hZkYYIfxPHe+MpPlnWdMe1Gk MMaFXDmYxEJVRy1GPKES5nt/bG0sQaJ7beDPCWiBx0sWt2rDCRIZv4Ea8cJWMrPO uPw06o9i8WKO6sdLGu59Hlg0aquByLaO/atQQbJHkOdsU5p6O0txKs5ZxdXfJZJf ClR6Y55BI/KdeGyMcOOBtw26fPstz6zeFNh+nfqPmvJsNUXnSTlqAZgvcEhqbx90 C/Wd/7qz/r858NbkvwQ4FlISPfD1ZeKZX80W2R7HcrcR6a6VOrK1w/LzErU3V34Y mkfdkDS/x/Ni9bpGxr3v8orUCVhfL1/BI1G8KBRWtLmDgW0qPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO6PgopWtoHWjci+ZVPzdI9LP/NPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTAxOTg2ZjEtNmFmOC0z MmY1LWI3ZGUtNTg5MTUyZjcyNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJk3LIldwuhng3V7CgNMHP36bsIj/SnzDa0sARm2L7z2beviIwnE 11mZLlZF9sncV/yTXlacFrtWfCtp2wHvYw2o9QCiFaizmDAvK/uHsSepHseL2cUJ 7VTaZAT2Y6E/qJYAJ/+OIAhfjOEJJg1aTEd8f8bRNvEe7hcs4++68kidgdTkvxtD HZwJ5lFgJ02HDmQhw2fHsJMWZl6DDnntBOkAnfvOiqfsokWGM7OP7RBMBJYaNwfb 6gAmq0KLaiOyV/0BAfNtsnnhQhNpUvimd6rfT1UMT18TyPe18CkNgtZvicZFVrwr Y7FxQr+/tmGGgoP6QKDJbrUjAv071XVwNu8= -----END CERTIFICATE-----Generated at Wed Apr 30 01:36:16 2025 by rpki-client