$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/649c4ce9-6864-3d0d-a382-012bb0ccb7fd.roa File: 649c4ce9-6864-3d0d-a382-012bb0ccb7fd.roa (raw, json) Hash identifier: DndBXdmM7eFsK8A1p2HTtTlRQZ63EshVA1njj33V5NY= Subject key identifier: 4A:91:A8:F4:3E:2B:9D:1D:6E:74:56:52:EF:AF:58:2F:3C:87:18:64 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A436B9F5A6B5F686F4141700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/649c4ce9-6864-3d0d-a382-012bb0ccb7fd.roa Signing time: Fri 25 Apr 2025 08:36:40 +0000 ROA not before: Fri 25 Apr 2025 08:36:40 +0000 ROA not after: Thu 24 Jul 2025 08:36:40 +0000 asID: 12041 IP address blocks: 2001:500:50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:b9:f5:a6:b5:f6:86:f4:14:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:36:40 2025 GMT Not After : Jul 24 08:36:40 2025 GMT Subject: CN=6a5b812e-f22a-4dee-9fab-a56111b5a543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:da:72:25:bf:3d:ed:bb:07:d7:06:28:32: a4:9c:55:97:3b:db:1b:0c:c1:8e:2c:95:c4:11:e4: 70:d4:9d:e8:a8:c6:1d:a6:1f:7f:89:9d:3f:31:93: 4a:f4:20:1e:9b:03:90:25:27:fe:61:a9:14:8b:21: 5c:c9:58:09:f2:51:1e:3d:b5:ec:9c:b7:d8:c7:84: 61:4c:25:4a:4f:91:73:81:b6:96:79:f6:f2:3e:16: 99:09:b0:44:2b:8c:d7:21:76:e3:c9:e7:6c:29:96: bd:22:68:4e:8d:99:a9:51:08:cb:0d:09:81:b9:72: 85:92:83:3a:18:d9:84:a6:eb:fc:4d:93:71:be:5c: ca:77:45:d5:65:cb:79:ec:29:3a:4b:3d:da:09:c0: b9:39:2d:d4:66:5e:75:4d:02:ed:62:c7:a4:48:00: 75:19:59:a0:84:01:c3:71:79:4d:70:a3:a1:ec:7c: 0f:5d:49:22:e2:f9:da:08:9c:b8:cf:da:93:9c:30: 18:e1:ba:20:64:07:a9:17:cd:e7:c2:1c:da:1f:10: cf:d8:2c:d0:c3:ec:4c:10:51:00:a9:33:aa:8a:d1: b8:30:af:3b:14:90:e5:77:9f:72:f8:e9:a3:0f:b7: d7:60:8c:2e:c5:8e:c8:22:f6:09:f2:24:94:15:17: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:91:A8:F4:3E:2B:9D:1D:6E:74:56:52:EF:AF:58:2F:3C:87:18:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/649c4ce9-6864-3d0d-a382-012bb0ccb7fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:50::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2d:42:2f:10:bd:8b:c8:bf:e4:96:1f:30:6a:15:b6:5a:42: af:86:7e:e8:75:37:67:49:a9:de:5c:b8:59:0d:71:d8:9e:ad: 1c:8c:e0:4a:ee:94:4e:00:8a:15:ba:67:6e:28:a8:9b:73:86: 96:90:c8:de:e1:cf:e2:ef:d2:6e:df:4c:20:01:b0:2a:8c:3d: 09:0d:a8:a8:88:cc:a7:bc:ff:8a:29:fb:00:2b:20:4a:d2:62: 5a:b4:0b:06:0e:2f:dc:de:46:16:81:2d:a5:80:cb:6f:67:dd: 9b:3e:7d:a2:8f:73:c3:bf:b4:34:2a:37:2f:9f:b8:fb:50:25: 49:b5:6e:f3:c7:39:2c:bf:85:13:f2:f1:c8:42:e7:d3:dc:5f: dd:40:7c:aa:97:eb:ba:20:e2:02:89:24:a9:88:45:3f:48:0d: 55:fd:32:f1:22:b7:a9:21:6d:f0:1a:10:50:53:01:5a:62:12: c0:f1:35:a1:86:d1:68:60:fc:b5:df:b5:b9:98:44:b3:25:f9: 77:e4:66:a0:c9:3f:60:35:d7:5b:f9:7f:c8:50:ec:68:89:87: 4e:c0:f9:42:5a:30:f6:f9:8f:c1:4c:20:aa:eb:94:24:58:38: dd:e6:de:1c:f0:94:d1:ff:c6:b1:2c:68:e3:56:bc:0f:8d:e4: f6:19:59:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNrn1prX2hvQUFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzY0MFoXDTI1MDcyNDA4MzY0MFowLzEtMCsGA1UEAxMk NmE1YjgxMmUtZjIyYS00ZGVlLTlmYWItYTU2MTExYjVhNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZvaciW/Pe27B9cGKDKknFWXO9sbDMGOLJXE EeRw1J3oqMYdph9/iZ0/MZNK9CAemwOQJSf+YakUiyFcyVgJ8lEePbXsnLfYx4Rh TCVKT5FzgbaWefbyPhaZCbBEK4zXIXbjyedsKZa9ImhOjZmpUQjLDQmBuXKFkoM6 GNmEpuv8TZNxvlzKd0XVZct57Ck6Sz3aCcC5OS3UZl51TQLtYsekSAB1GVmghAHD cXlNcKOh7HwPXUki4vnaCJy4z9qTnDAY4bogZAepF83nwhzaHxDP2CzQw+xMEFEA qTOqitG4MK87FJDld59y+OmjD7fXYIwuxY7IIvYJ8iSUFRcchQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqRqPQ+K50dbnRWUu+vWC88hxhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjQ5YzRjZTktNjg2NC0z ZDBkLWEzODItMDEyYmIwY2NiN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0tQi8QvYvIv+SWHzBqFbZaQq+Gfuh1N2dJqd5cuFkNcdierRyM 4ErulE4AihW6Z24oqJtzhpaQyN7hz+Lv0m7fTCABsCqMPQkNqKiIzKe8/4op+wAr IErSYlq0CwYOL9zeRhaBLaWAy29n3Zs+faKPc8O/tDQqNy+fuPtQJUm1bvPHOSy/ hRPy8chC59PcX91AfKqX67og4gKJJKmIRT9IDVX9MvEit6khbfAaEFBTAVpiEsDx NaGG0Whg/LXftbmYRLMl+XfkZqDJP2A111v5f8hQ7GiJh07A+UJaMPb5j8FMIKrr lCRYON3m3hzwlNH/xrEsaONWvA+N5PYZWTY= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:50 2025 by rpki-client