$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5826633e-7477-3c8f-862a-27c0114d2d7c.roa File: 5826633e-7477-3c8f-862a-27c0114d2d7c.roa (raw, json) Hash identifier: n8oUO9ifR0HZ/CcpnYExdkwZUP3ezdSbVFDeGoXHuMQ= Subject key identifier: F6:11:04:3A:B3:69:C6:F9:8B:02:70:D1:BB:42:3E:93:C3:E8:65:A3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4355676C6759DBB6241FE80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5826633e-7477-3c8f-862a-27c0114d2d7c.roa Signing time: Fri 25 Apr 2025 08:33:52 +0000 ROA not before: Fri 25 Apr 2025 08:33:52 +0000 ROA not after: Thu 24 Jul 2025 08:33:52 +0000 asID: 12041 IP address blocks: 2001:500:e5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:56:76:c6:75:9d:bb:62:41:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:52 2025 GMT Not After : Jul 24 08:33:52 2025 GMT Subject: CN=b3f5e1a6-2c46-40c4-b564-ddaf606c126f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:44:f4:fd:62:e6:24:c0:0c:2d:0e:a8:25: c1:6d:cb:7a:a3:02:25:75:0b:c8:13:71:60:11:cc: d1:e5:e4:d6:2c:8c:20:31:e2:7b:8f:c5:6f:e9:c1: 00:8b:bf:7a:47:ce:93:a1:70:6e:6e:93:28:7b:5a: 0d:4e:63:ec:73:42:ef:89:a5:99:48:5a:8d:12:1d: c5:bd:df:98:d7:45:9e:40:73:af:5b:9a:6b:b2:d2: 01:ee:03:42:77:af:31:f1:77:a9:02:44:ab:31:2f: 36:fa:90:d3:6a:9e:76:4c:5d:52:54:10:f7:08:b4: c7:98:56:86:67:87:2b:a6:da:dc:80:cd:28:d3:7a: 29:64:ee:6f:a5:aa:b1:d1:13:7c:8e:82:86:8a:01: 25:83:98:19:f2:a4:40:b1:43:ed:c1:cc:13:cc:37: db:60:03:92:3e:0c:2d:4b:8a:57:d1:a4:98:5e:1c: 86:fc:f5:a8:0e:1f:17:90:42:c6:d0:2c:e4:ae:97: 85:e0:db:b5:fc:f9:e5:5c:a1:23:5f:68:03:0d:40: d8:06:d6:9d:32:55:34:22:95:f5:95:4e:d1:cc:42: 1e:00:60:74:6b:4e:d2:c7:d7:d5:47:95:f9:e2:fe: f0:6a:f9:71:5d:db:35:94:cb:23:10:32:55:8e:5e: e6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:11:04:3A:B3:69:C6:F9:8B:02:70:D1:BB:42:3E:93:C3:E8:65:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5826633e-7477-3c8f-862a-27c0114d2d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:2b:fc:74:c5:d7:5a:f9:88:8f:1e:45:09:cc:3a:51:84:c5: a5:85:df:17:68:8e:bf:8e:2e:c5:c4:d3:8a:ef:f9:2e:9e:d9: d0:90:7e:1d:53:45:76:9b:4f:f4:fc:b0:a1:ab:6a:9a:c5:14: cc:dc:93:6f:f0:a8:8b:77:58:a6:d3:85:cd:98:47:6b:b8:85: 49:27:29:13:bd:68:a1:89:36:41:96:d2:4b:c0:08:3b:4c:9f: 99:6d:82:b0:7f:94:fd:ae:31:ad:63:77:9d:3a:17:94:11:50: c7:69:a3:03:65:b2:c9:d5:86:40:d4:28:f6:c1:1f:4b:f1:5c: d6:ce:a3:26:0d:50:b7:93:b5:78:e4:61:29:3c:7c:e0:c3:e1: 25:65:d1:d8:72:f2:60:b5:6b:7e:65:99:ac:e2:d9:b7:6f:82: 56:07:a6:89:de:ea:c3:e4:3c:9d:22:ee:81:03:73:96:ef:7a: 2e:4a:0a:24:b6:66:6c:30:ee:ec:5a:35:14:ca:5c:0a:49:2e: 56:1c:df:85:7d:11:ce:03:1e:2c:6a:a8:3a:93:0a:ef:d4:ec: 21:e9:bd:a9:66:e5:92:d8:8c:e0:a3:bc:c1:a0:de:46:3d:92: 9e:a3:ca:0a:97:28:d5:5e:74:52:c1:ea:a8:a9:b9:60:1b:f8: 53:c1:c6:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNVZ2xnWdu2JB/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzM1MloXDTI1MDcyNDA4MzM1MlowLzEtMCsGA1UEAxMk YjNmNWUxYTYtMmM0Ni00MGM0LWI1NjQtZGRhZjYwNmMxMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsRE9P1i5iTADC0OqCXBbct6owIldQvIE3Fg EczR5eTWLIwgMeJ7j8Vv6cEAi796R86ToXBubpMoe1oNTmPsc0LviaWZSFqNEh3F vd+Y10WeQHOvW5prstIB7gNCd68x8XepAkSrMS82+pDTap52TF1SVBD3CLTHmFaG Z4crptrcgM0o03opZO5vpaqx0RN8joKGigElg5gZ8qRAsUPtwcwTzDfbYAOSPgwt S4pX0aSYXhyG/PWoDh8XkELG0CzkrpeF4Nu1/PnlXKEjX2gDDUDYBtadMlU0IpX1 lU7RzEIeAGB0a07Sx9fVR5X54v7wavlxXds1lMsjEDJVjl7m9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPYRBDqzacb5iwJw0btCPpPD6GWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTgyNjYzM2UtNzQ3Ny0z YzhmLTg2MmEtMjdjMDExNGQyZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKUr/HTF11r5iI8eRQnMOlGExaWF3xdojr+OLsXE04rv+S6e2dCQ fh1TRXabT/T8sKGraprFFMzck2/wqIt3WKbThc2YR2u4hUknKRO9aKGJNkGW0kvA CDtMn5ltgrB/lP2uMa1jd506F5QRUMdpowNlssnVhkDUKPbBH0vxXNbOoyYNULeT tXjkYSk8fODD4SVl0dhy8mC1a35lmazi2bdvglYHpone6sPkPJ0i7oEDc5bvei5K CiS2Zmww7uxaNRTKXApJLlYc34V9Ec4DHixqqDqTCu/U7CHpvalm5ZLYjOCjvMGg 3kY9kp6jygqXKNVedFLB6qipuWAb+FPBxvk= -----END CERTIFICATE-----Generated at Tue Apr 29 16:21:44 2025 by rpki-client