$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa File: 6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa (raw, json) Hash identifier: 0R9bNfXBXtWh2xkgMlw6+bkxJwPnauOnZtKNMoSTgnU= Subject key identifier: 5A:FE:02:2B:D6:FB:B5:62:A1:B6:32:DF:CD:72:35:44:37:F5:F4:3C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A436C6F9E8BFB145A981DB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa Signing time: Fri 25 Apr 2025 08:36:46 +0000 ROA not before: Fri 25 Apr 2025 08:36:46 +0000 ROA not after: Thu 24 Jul 2025 08:36:46 +0000 asID: 12041 IP address blocks: 2001:500:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:c6:f9:e8:bf:b1:45:a9:81:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:36:46 2025 GMT Not After : Jul 24 08:36:46 2025 GMT Subject: CN=cc0b30e7-e02d-4a8d-af1d-ad431be91c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:37:01:61:88:64:30:e0:64:92:c7:41:51: 1e:ac:04:4b:96:82:03:1d:8a:cd:9f:08:1b:70:b6: ea:74:07:13:d5:35:6e:82:c2:ce:63:4c:5e:bb:4a: ba:d5:72:99:ea:87:83:6b:d4:ee:a5:61:c2:97:a5: 59:28:6a:d0:07:bc:9f:fa:2c:df:1f:22:26:58:aa: 54:97:c8:e7:ca:90:6b:21:cd:78:b5:87:2d:68:32: c2:0d:89:ef:b9:de:5d:1e:2f:75:62:01:92:ca:af: 48:6c:06:67:3e:8d:d4:69:ad:d8:ba:b1:ee:7b:a9: 51:ac:c9:a0:b2:11:19:ef:43:09:90:c9:ff:b7:ef: 59:85:76:c0:1e:ed:23:a5:bd:9a:f3:f1:c9:b3:cd: c9:39:79:0f:cd:0f:e4:06:bf:4d:b7:59:95:e4:d4: 4c:f9:ca:ef:5b:a9:88:42:ce:1a:8a:b3:66:35:16: 6f:ee:4d:2f:96:da:31:69:a3:83:28:b2:be:2e:be: 30:ab:73:c6:96:80:eb:86:67:97:66:d8:91:34:08: 99:e0:bd:6e:b0:0a:0b:59:04:ee:ec:bb:4d:12:5d: 4c:04:ce:1d:34:53:cb:93:2d:b8:6a:45:a5:00:6a: 8d:fe:af:10:a0:cb:1f:ce:1b:df:97:d2:d4:54:03: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FE:02:2B:D6:FB:B5:62:A1:B6:32:DF:CD:72:35:44:37:F5:F4:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6e5e5ff8-7b1f-3f05-860a-ee03e42c3ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d2:91:78:61:c5:e0:ed:4a:25:aa:fe:ca:e2:a6:4c:55:48: 1e:1f:2e:1f:a5:1f:ea:74:9b:57:c9:b8:f0:f3:03:e7:41:a4: 8e:8d:0f:9a:0a:76:c1:b4:c8:c7:45:a2:22:42:1b:07:33:73: 88:3e:9c:7d:82:32:2c:5d:9b:ac:0a:fa:9f:37:e1:44:18:dc: 2b:87:3e:fe:f2:e6:eb:33:c8:59:7f:10:e2:45:b7:5c:a2:3c: ed:63:73:24:38:2b:e2:47:92:76:04:06:e5:98:18:52:2e:c0: fe:46:1a:77:c9:98:ca:ec:99:46:8f:8c:76:7f:72:cb:56:ac: 1c:3d:85:8f:29:ff:99:57:6d:7a:92:56:98:0a:e5:cc:c2:f2: c1:c7:b6:b4:22:6d:30:33:f3:14:82:e1:82:aa:4b:b7:08:10: 63:fc:68:ba:fd:c7:26:f9:49:83:74:98:d3:92:45:39:79:2c: 6b:97:e9:34:ea:5d:7e:fb:7a:c4:65:14:8d:d5:51:00:bb:23: 45:78:17:e4:8e:92:07:06:62:24:be:0e:b6:28:76:fa:80:5b: e0:72:6a:e1:5d:d0:76:01:e7:53:27:2e:5e:1c:45:a1:33:e8: a2:e3:ce:63:2b:e3:b7:95:39:7e:5c:77:73:69:3f:d9:73:7f: 55:20:a3:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNsb56L+xRamB24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzY0NloXDTI1MDcyNDA4MzY0NlowLzEtMCsGA1UEAxMk Y2MwYjMwZTctZTAyZC00YThkLWFmMWQtYWQ0MzFiZTkxYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF03AWGIZDDgZJLHQVEerARLloIDHYrNnwgb cLbqdAcT1TVugsLOY0xeu0q61XKZ6oeDa9TupWHCl6VZKGrQB7yf+izfHyImWKpU l8jnypBrIc14tYctaDLCDYnvud5dHi91YgGSyq9IbAZnPo3Uaa3YurHue6lRrMmg shEZ70MJkMn/t+9ZhXbAHu0jpb2a8/HJs83JOXkPzQ/kBr9Nt1mV5NRM+crvW6mI Qs4airNmNRZv7k0vltoxaaODKLK+Lr4wq3PGloDrhmeXZtiRNAiZ4L1usAoLWQTu 7LtNEl1MBM4dNFPLky24akWlAGqN/q8QoMsfzhvfl9LUVAPiQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFr+AivW+7ViobYy381yNUQ39fQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmU1ZTVmZjgtN2IxZi0z ZjA1LTg2MGEtZWUwM2U0MmMzYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFvSkXhhxeDtSiWq/sripkxVSB4fLh+lH+p0m1fJuPDzA+dBpI6N D5oKdsG0yMdFoiJCGwczc4g+nH2CMixdm6wK+p834UQY3CuHPv7y5uszyFl/EOJF t1yiPO1jcyQ4K+JHknYEBuWYGFIuwP5GGnfJmMrsmUaPjHZ/cstWrBw9hY8p/5lX bXqSVpgK5czC8sHHtrQibTAz8xSC4YKqS7cIEGP8aLr9xyb5SYN0mNOSRTl5LGuX 6TTqXX77esRlFI3VUQC7I0V4F+SOkgcGYiS+DrYodvqAW+ByauFd0HYB51MnLl4c RaEz6KLjzmMr47eVOX5cd3NpP9lzf1Ugo+U= -----END CERTIFICATE-----Generated at Tue Apr 29 12:49:36 2025 by rpki-client