$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa File: 69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa (raw, json) Hash identifier: jsrhKOxvHmEoSQKrn9Z2hw8KBQcu9tMQjSgUhxMCKaY= Subject key identifier: 9C:1B:A0:02:7C:4A:02:23:56:EA:09:36:E5:E0:EA:BB:0D:5B:62:6E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A43551AA6118C495BAC4E340 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa Signing time: Fri 25 Apr 2025 08:33:50 +0000 ROA not before: Fri 25 Apr 2025 08:33:50 +0000 ROA not after: Thu 24 Jul 2025 08:33:50 +0000 asID: 12041 IP address blocks: 2001:500:e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:51:aa:61:18:c4:95:ba:c4:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:50 2025 GMT Not After : Jul 24 08:33:50 2025 GMT Subject: CN=ba7f00e3-5763-4716-ab25-50eb40115574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:61:3c:b9:a6:8b:75:71:ea:a7:a3:57:70:a3: f2:a1:21:72:f4:78:0f:38:58:bc:14:36:35:90:51: d9:be:32:8d:08:34:3c:84:75:00:4e:d3:a8:73:82: 85:c6:b6:92:c3:96:01:ee:42:14:30:ff:63:79:e2: e6:b2:72:63:cd:81:5a:f0:66:c3:72:8b:58:22:0c: 27:1d:4b:57:dc:44:4d:a3:56:00:9a:ae:27:9c:7b: 2f:f5:4f:26:77:ee:f2:0c:3a:c0:15:33:50:11:00: 29:47:f0:e2:9d:61:a0:85:9d:c9:65:b8:08:6e:94: 1f:4d:38:d5:a5:63:0c:cb:27:b3:c0:a3:a2:86:02: 88:e7:db:35:92:3c:1a:a5:23:17:56:60:73:e3:75: d8:ef:8e:36:10:71:87:1a:94:b9:51:5c:7d:20:91: f8:3f:30:3c:de:83:da:f5:3a:57:4b:d5:0f:fe:53: 22:1a:a0:67:c8:00:19:bf:b0:4f:d0:db:8d:fe:a0: 70:41:74:d1:29:de:a4:d7:20:b6:42:fe:af:db:6e: 0b:eb:4c:86:74:a7:f4:28:f6:c1:33:7d:03:f3:69: e9:d6:e1:8b:ed:9e:de:89:81:6f:4d:8c:4f:b6:e8: 14:ac:dc:94:e5:83:05:4b:61:ae:19:e4:f0:aa:35: f1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1B:A0:02:7C:4A:02:23:56:EA:09:36:E5:E0:EA:BB:0D:5B:62:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/69f96c8c-a27a-3716-a4c3-dfc8d8a2afa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:c4:89:f4:e7:a7:2c:84:7e:53:7f:07:69:29:de:e5:42:0e: c1:a7:dc:4a:49:c3:0c:b6:cb:1b:04:71:13:e2:1b:70:23:03: 6d:4c:25:e4:d0:8d:a0:68:42:1f:9a:c2:59:e5:cd:09:d3:ad: f3:7a:4f:6f:8c:c5:e1:a1:6a:34:73:0d:62:f0:e9:df:e6:63: e8:a5:a5:ca:c4:cc:8f:86:da:e1:a9:8e:2e:7e:c7:b2:a3:fe: 6b:55:60:e1:cd:3d:c9:5e:4f:df:a1:5e:33:fe:71:f1:98:d6: 34:ef:b5:a1:b2:ba:cb:79:a8:69:fa:cc:c9:a0:76:41:b7:a0: 1e:c0:4c:2c:f9:47:5a:a2:19:7b:96:6a:ed:ab:c2:c4:01:cf: d1:3e:78:0d:d4:91:c3:17:dd:a1:1e:e7:3a:6c:6c:9a:e7:32: 76:ee:4b:0d:1f:49:f3:a4:00:c6:50:73:c0:53:c6:74:36:ae: 14:10:12:0e:f1:e3:7e:06:9c:0e:57:22:36:e4:c5:8c:de:f1: ca:92:19:54:ea:44:30:0f:55:fe:85:23:cc:18:6f:d3:24:b5: 0d:c1:b5:e1:c2:3d:d4:42:e2:09:ab:be:29:c0:05:db:58:14: 71:ff:b4:b1:9a:3d:64:4c:0c:e7:3d:5c:85:15:a4:96:6f:1a: 4c:26:4e:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNVGqYRjElbrE40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzM1MFoXDTI1MDcyNDA4MzM1MFowLzEtMCsGA1UEAxMk YmE3ZjAwZTMtNTc2My00NzE2LWFiMjUtNTBlYjQwMTE1NTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWE8uaaLdXHqp6NXcKPyoSFy9HgPOFi8FDY1 kFHZvjKNCDQ8hHUATtOoc4KFxraSw5YB7kIUMP9jeeLmsnJjzYFa8GbDcotYIgwn HUtX3ERNo1YAmq4nnHsv9U8md+7yDDrAFTNQEQApR/DinWGghZ3JZbgIbpQfTTjV pWMMyyezwKOihgKI59s1kjwapSMXVmBz43XY7442EHGHGpS5UVx9IJH4PzA83oPa 9TpXS9UP/lMiGqBnyAAZv7BP0NuN/qBwQXTRKd6k1yC2Qv6v224L60yGdKf0KPbB M30D82np1uGL7Z7eiYFvTYxPtugUrNyU5YMFS2GuGeTwqjXxpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJwboAJ8SgIjVuoJNuXg6rsNW2JuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjlmOTZjOGMtYTI3YS0z NzE2LWE0YzMtZGZjOGQ4YTJhZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALPEifTnpyyEflN/B2kp3uVCDsGn3EpJwwy2yxsEcRPiG3AjA21M JeTQjaBoQh+awlnlzQnTrfN6T2+MxeGhajRzDWLw6d/mY+ilpcrEzI+G2uGpji5+ x7Kj/mtVYOHNPcleT9+hXjP+cfGY1jTvtaGyust5qGn6zMmgdkG3oB7ATCz5R1qi GXuWau2rwsQBz9E+eA3UkcMX3aEe5zpsbJrnMnbuSw0fSfOkAMZQc8BTxnQ2rhQQ Eg7x434GnA5XIjbkxYze8cqSGVTqRDAPVf6FI8wYb9MktQ3BteHCPdRC4gmrvinA BdtYFHH/tLGaPWRMDOc9XIUVpJZvGkwmThg= -----END CERTIFICATE-----Generated at Wed Apr 30 19:58:01 2025 by rpki-client