$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa File: 7143821d-b959-370f-bcec-f9e5be34ed99.roa (raw, json) Hash identifier: MmIJ2rjgwDvMMHOUv7bojh+BMWKDQz0++SFOqJO5R9g= Subject key identifier: 9A:E0:D5:DB:45:ED:8F:A8:9F:53:D8:F9:E3:4F:99:77:06:01:05:BF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A434C365E39F3A200329A980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa Signing time: Fri 25 Apr 2025 08:32:42 +0000 ROA not before: Fri 25 Apr 2025 08:32:42 +0000 ROA not after: Thu 24 Jul 2025 08:32:42 +0000 asID: 12041 IP address blocks: 2001:500:cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:34:c3:65:e3:9f:3a:20:03:29:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:32:42 2025 GMT Not After : Jul 24 08:32:42 2025 GMT Subject: CN=fc590e94-01fb-47c6-82e0-61cb5bcf79ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:a3:de:6d:1c:5a:13:0c:43:99:a2:2c:cc: 2a:f6:01:b6:01:07:a9:ca:26:63:5b:bb:c3:0e:58: 86:1a:c2:da:aa:92:b7:1b:8f:97:64:86:cd:4a:d3: 73:35:bf:4e:79:43:f6:03:55:ec:69:66:ff:0f:ef: fa:0e:c4:db:2d:fc:82:1f:df:2b:05:e4:46:72:c6: 33:5b:8f:dd:24:20:62:94:66:2d:23:d9:dd:54:6d: 75:54:e5:7b:4a:a4:60:d2:2b:1f:6e:e3:63:91:86: 97:bb:b0:3c:e1:8b:82:23:21:ea:44:c5:d3:f3:ac: 03:54:84:29:41:b7:a6:e7:b6:01:cf:65:30:f1:65: 38:df:73:fb:9f:aa:0a:61:6a:ff:b8:cc:e1:78:64: c4:c5:38:74:b2:03:43:3e:50:48:1d:e8:a7:ea:40: f3:66:28:33:f8:db:fb:88:88:f4:08:a2:2e:81:73: ad:0c:43:ef:22:9e:54:ac:18:58:5d:c5:82:7b:49: 60:a0:17:31:37:30:97:8f:5f:e1:4b:83:bd:f2:1e: 56:2f:b1:17:6a:2f:00:bc:41:01:0d:67:c8:a8:10: c2:e6:6d:6d:13:7e:e6:db:b7:22:4d:af:19:63:0c: 3b:06:d6:ce:83:b7:be:cd:e8:6d:c0:d7:b6:03:01: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E0:D5:DB:45:ED:8F:A8:9F:53:D8:F9:E3:4F:99:77:06:01:05:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7143821d-b959-370f-bcec-f9e5be34ed99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:fa:6d:27:2e:e0:57:10:67:08:a8:ed:71:25:52:c2:ca:b0: e1:91:64:53:ec:6d:3e:c2:1c:d6:ce:b8:02:5f:66:b0:4d:b8: 25:eb:70:64:45:41:df:df:4d:b2:a0:3e:d1:02:b5:2b:c4:17: a2:e3:11:d6:f8:42:78:ea:7a:18:a7:49:1c:f1:82:16:8d:46: 8a:ac:ec:99:03:10:b2:23:78:76:dc:89:28:33:d6:47:7a:0c: 4e:3f:1e:37:22:2c:68:5d:26:9c:f5:4e:6d:ab:25:d6:f9:41: 72:9b:cd:3d:4c:de:78:dd:4f:ea:af:9f:31:b8:43:f7:9b:1e: 00:d6:9c:43:31:a4:57:d8:fc:56:75:30:10:53:46:48:32:a3: 1d:bd:a2:25:bb:03:9b:5f:15:b0:e6:6a:c9:0a:61:0e:ab:78: f2:a0:7a:27:12:31:67:2d:67:34:c4:a4:13:fa:8b:45:21:ab: e8:06:64:1e:03:72:c3:47:49:1d:5b:b3:b1:40:42:30:fc:81: 64:db:e5:35:8d:dd:ed:3b:80:51:af:37:59:02:15:cb:df:5a: 6c:c2:31:fa:c2:9b:c1:ce:97:94:3c:ea:0d:4a:97:4b:4a:2b: 0a:57:bf:61:a4:e5:82:ec:80:b8:0d:70:51:08:9f:ce:57:2c: 74:d4:70:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNMNl4586IAMpqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzI0MloXDTI1MDcyNDA4MzI0MlowLzEtMCsGA1UEAxMk ZmM1OTBlOTQtMDFmYi00N2M2LTgyZTAtNjFjYjViY2Y3OWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Sj3m0cWhMMQ5miLMwq9gG2AQepyiZjW7vD DliGGsLaqpK3G4+XZIbNStNzNb9OeUP2A1XsaWb/D+/6DsTbLfyCH98rBeRGcsYz W4/dJCBilGYtI9ndVG11VOV7SqRg0isfbuNjkYaXu7A84YuCIyHqRMXT86wDVIQp Qbem57YBz2Uw8WU433P7n6oKYWr/uMzheGTExTh0sgNDPlBIHein6kDzZigz+Nv7 iIj0CKIugXOtDEPvIp5UrBhYXcWCe0lgoBcxNzCXj1/hS4O98h5WL7EXai8AvEEB DWfIqBDC5m1tE37m27ciTa8ZYww7BtbOg7e+zehtwNe2AwFT/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJrg1dtF7Y+on1PY+eNPmXcGAQW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzE0MzgyMWQtYjk1OS0z NzBmLWJjZWMtZjllNWJlMzRlZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKn6bScu4FcQZwio7XElUsLKsOGRZFPsbT7CHNbOuAJfZrBNuCXr cGRFQd/fTbKgPtECtSvEF6LjEdb4QnjqehinSRzxghaNRoqs7JkDELIjeHbciSgz 1kd6DE4/HjciLGhdJpz1Tm2rJdb5QXKbzT1M3njdT+qvnzG4Q/ebHgDWnEMxpFfY /FZ1MBBTRkgyox29oiW7A5tfFbDmaskKYQ6rePKgeicSMWctZzTEpBP6i0Uhq+gG ZB4DcsNHSR1bs7FAQjD8gWTb5TWN3e07gFGvN1kCFcvfWmzCMfrCm8HOl5Q86g1K l0tKKwpXv2Gk5YLsgLgNcFEIn85XLHTUcOE= -----END CERTIFICATE-----Generated at Wed Apr 30 03:48:33 2025 by rpki-client