$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa File: 5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa (raw, json) Hash identifier: e7rTCgWs0UdVnVhuZldA2dCZqenlbE7A6NSzR8MSRN8= Subject key identifier: E8:45:B5:B5:53:8F:0E:FF:58:A2:4E:2A:D5:FB:FA:46:C8:53:9A:63 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A435ABE80AC197F12D6D6500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa Signing time: Fri 25 Apr 2025 08:34:32 +0000 ROA not before: Fri 25 Apr 2025 08:34:32 +0000 ROA not after: Thu 24 Jul 2025 08:34:32 +0000 asID: 12041 IP address blocks: 2001:500:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:ab:e8:0a:c1:97:f1:2d:6d:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:34:32 2025 GMT Not After : Jul 24 08:34:32 2025 GMT Subject: CN=71526a1e-8384-4c40-b577-e255e4355879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:5f:8c:b2:39:8f:4f:ee:5a:1e:f5:a3:33: 15:4c:d3:2b:2d:9c:70:56:04:76:fa:f0:2e:84:a3: 48:96:85:19:69:48:25:5f:eb:b9:1a:87:b0:f8:a3: fc:d9:dd:f4:f3:3b:44:ed:31:21:1f:d3:02:82:0c: eb:2f:b2:88:e0:69:99:23:18:0d:ef:c8:0c:9e:5f: d9:76:e7:c9:4f:5b:1f:78:a7:46:e2:af:e7:5d:45: cd:11:f6:c1:07:14:35:3b:e2:a2:79:20:90:68:7e: c3:b4:90:d0:34:a7:ee:2f:5c:6e:5d:06:17:70:80: 52:26:fb:91:84:50:57:43:cb:37:df:be:d9:e9:4e: 86:ce:27:32:2c:12:ae:7c:da:13:e7:af:5a:31:a7: 5b:67:5b:cc:f8:bc:2e:8d:a1:30:c0:c7:b5:a4:c7: 25:36:5e:c5:6d:2f:06:3c:cf:b1:24:c1:09:a5:f4: 3f:83:fd:2f:99:41:a3:56:d3:f9:7e:5e:69:af:ae: 51:c8:1a:70:d6:f2:da:ef:df:a7:71:bd:d1:88:87: d0:27:7d:c4:be:b1:13:87:e6:51:82:52:54:0b:bf: 21:eb:11:e3:e8:9a:bb:73:c8:e9:fe:e0:74:df:5d: da:36:9f:60:0f:6a:a5:29:c2:33:34:3b:f8:84:bc: d0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:45:B5:B5:53:8F:0E:FF:58:A2:4E:2A:D5:FB:FA:46:C8:53:9A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5bffae5f-5cf6-3ad9-8d04-67bef813d113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a7:70:9f:5b:f8:66:ea:97:8d:6a:ce:5a:13:69:99:91:e2: e4:50:c7:54:3c:98:66:f4:bf:f3:47:94:00:77:84:d8:e8:57: 3a:17:0a:d4:6c:ab:fd:da:87:c0:40:0d:9f:36:83:04:68:ac: 28:be:72:ec:ad:bc:04:62:fb:5d:cf:d1:4a:e9:cc:18:01:26: d0:69:bd:b0:e0:d3:ae:d7:db:f8:65:d3:c7:f5:40:b3:04:53: 43:cc:ff:c4:36:07:38:a1:14:e6:18:78:b9:f7:03:63:92:88: 67:28:c6:3b:bf:26:09:cd:6f:b2:ad:ce:56:80:bc:17:09:17: 38:67:bb:b4:c4:96:85:78:e7:f4:6c:69:08:49:e3:af:bf:0b: 07:d9:55:d4:30:5c:08:7a:dd:02:ff:3c:a6:2b:6f:04:37:3c: d4:0f:c1:6f:e9:f4:57:ac:c4:b2:6c:74:2f:a7:be:ff:ae:a4: c7:91:a4:5c:b5:ef:f5:44:fc:3d:8a:8c:52:30:f6:87:37:e1: e9:16:5d:f0:7b:e6:b0:34:01:31:1c:de:8e:f4:c6:d8:5f:82: 57:b6:fc:6f:0a:80:27:aa:e5:10:f3:fc:4b:a3:9b:f0:90:b0: 91:8f:47:b6:a8:d8:21:63:06:65:27:ee:0c:8b:60:cb:5c:3a: 66:36:59:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNavoCsGX8S1tZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzQzMloXDTI1MDcyNDA4MzQzMlowLzEtMCsGA1UEAxMk NzE1MjZhMWUtODM4NC00YzQwLWI1NzctZTI1NWU0MzU1ODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1lfjLI5j0/uWh71ozMVTNMrLZxwVgR2+vAu hKNIloUZaUglX+u5Goew+KP82d308ztE7TEhH9MCggzrL7KI4GmZIxgN78gMnl/Z dufJT1sfeKdG4q/nXUXNEfbBBxQ1O+KieSCQaH7DtJDQNKfuL1xuXQYXcIBSJvuR hFBXQ8s3377Z6U6GzicyLBKufNoT569aMadbZ1vM+LwujaEwwMe1pMclNl7FbS8G PM+xJMEJpfQ/g/0vmUGjVtP5fl5pr65RyBpw1vLa79+ncb3RiIfQJ33EvrETh+ZR glJUC78h6xHj6Jq7c8jp/uB0313aNp9gD2qlKcIzNDv4hLzQAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOhFtbVTjw7/WKJOKtX7+kbIU5pjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWJmZmFlNWYtNWNmNi0z YWQ5LThkMDQtNjdiZWY4MTNkMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAByncJ9b+Gbql41qzloTaZmR4uRQx1Q8mGb0v/NHlAB3hNjoVzoX CtRsq/3ah8BADZ82gwRorCi+cuytvARi+13P0UrpzBgBJtBpvbDg067X2/hl08f1 QLMEU0PM/8Q2BzihFOYYeLn3A2OSiGcoxju/JgnNb7KtzlaAvBcJFzhnu7TEloV4 5/RsaQhJ46+/CwfZVdQwXAh63QL/PKYrbwQ3PNQPwW/p9FesxLJsdC+nvv+upMeR pFy17/VE/D2KjFIw9oc34ekWXfB75rA0ATEc3o70xthfgle2/G8KgCeq5RDz/Euj m/CQsJGPR7ao2CFjBmUn7gyLYMtcOmY2WSM= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:58 2025 by rpki-client