$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/77e9cbac-603d-3847-94df-39c36ad758a0.roa File: 77e9cbac-603d-3847-94df-39c36ad758a0.roa (raw, json) Hash identifier: tlREhyjimrIAWhm8GhQJSI0THuSPPmI3HjUoqTwUe8s= Subject key identifier: 88:D6:5F:39:D8:9E:DB:87:FC:18:9D:D2:AE:97:4A:01:9C:71:16:EE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A43692B5C620E563F5CADD00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/77e9cbac-603d-3847-94df-39c36ad758a0.roa Signing time: Fri 25 Apr 2025 08:36:21 +0000 ROA not before: Fri 25 Apr 2025 08:36:21 +0000 ROA not after: Thu 24 Jul 2025 08:36:21 +0000 asID: 12041 IP address blocks: 2001:500:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:92:b5:c6:20:e5:63:f5:ca:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:36:21 2025 GMT Not After : Jul 24 08:36:21 2025 GMT Subject: CN=5d8d0bce-29b0-4acd-9dda-d016e0dcf106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:9a:19:7f:83:5f:86:56:d4:0f:6e:b6:0c: 20:af:4c:3f:0a:d1:19:9c:fd:5b:36:a5:1a:95:be: c3:f6:5f:da:71:63:0a:56:a3:dc:e7:ff:87:24:27: a8:c6:61:63:0f:08:21:c9:2f:e7:12:dd:3e:ba:da: 34:15:cd:1b:7e:58:40:90:7c:e3:a0:b3:ba:46:2b: 01:5f:1d:f6:9e:6c:c1:ef:85:13:b4:b4:4e:52:33: 72:d3:27:1a:59:62:64:14:d0:0c:b7:36:c0:bf:55: 9c:89:84:04:ad:60:ff:a3:19:22:1d:d8:aa:1e:05: 1c:08:4a:04:16:ca:a8:0a:f3:cc:d4:7d:89:66:e5: 4f:e1:6e:35:87:d7:b0:cd:ab:7e:ab:ac:27:89:79: 14:0e:73:5c:f5:b6:a5:78:08:c9:d6:31:10:d0:dc: a6:f3:ea:2d:85:c4:85:96:23:54:f1:09:3c:ea:3f: e1:5d:e0:84:ec:fd:04:ee:66:e5:32:e2:48:0b:2c: f9:14:91:de:e9:ac:02:b8:96:56:2a:48:b5:67:1c: 3e:d4:1f:07:88:20:8e:5b:61:f1:c8:b5:dc:6a:c4: 8c:94:71:80:4d:f3:85:d2:d2:d9:7e:f4:a3:92:c6: 98:06:4b:82:6a:35:aa:a4:d4:53:f6:b2:0a:a4:ab: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D6:5F:39:D8:9E:DB:87:FC:18:9D:D2:AE:97:4A:01:9C:71:16:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/77e9cbac-603d-3847-94df-39c36ad758a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:44::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0b:81:18:8e:c8:47:c7:b9:0b:c2:7c:46:eb:43:2b:e0:a0: e0:83:4c:47:c5:dd:89:b6:20:95:85:78:58:93:65:a5:73:f6: 49:ab:e4:99:b1:be:38:86:da:47:dd:b5:ee:dd:07:54:1c:01: 0a:b9:8b:ad:ee:a3:7f:33:7d:be:e0:2c:8a:13:3f:ef:e3:f8: af:05:0c:af:ad:14:19:6e:01:9e:c7:83:75:70:f1:d1:5a:ed: 22:c7:7e:2b:c9:05:67:68:e5:5f:c0:59:c0:d7:f0:9e:ce:e4: d3:d7:f0:1f:18:4d:48:6c:99:8a:4a:fc:bb:f1:af:3e:b3:44: 88:75:fc:eb:ac:ca:e0:70:d8:7f:a2:5c:ae:99:18:57:72:13: 2b:04:79:f6:f9:b7:64:55:78:31:b0:a8:e3:b0:72:dc:42:41: 8e:24:f6:7b:2b:5b:1e:43:a6:17:e2:6d:14:e0:aa:28:5e:14: 59:d5:72:5b:10:ed:17:39:56:a3:17:e7:fb:5b:87:fc:00:1c: 88:6b:3d:2f:c0:85:ea:ce:b3:44:6e:c1:9c:5c:05:24:e7:4c: 91:b3:d7:2a:82:09:2d:1e:9c:fa:66:c5:a5:7c:55:8c:87:f9: 09:7b:44:f2:cb:cb:bf:37:ab:5b:66:cb:57:58:77:f4:8b:f5: dd:14:5e:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNpK1xiDlY/XK3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzYyMVoXDTI1MDcyNDA4MzYyMVowLzEtMCsGA1UEAxMk NWQ4ZDBiY2UtMjliMC00YWNkLTlkZGEtZDAxNmUwZGNmMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkeaGX+DX4ZW1A9utgwgr0w/CtEZnP1bNqUa lb7D9l/acWMKVqPc5/+HJCeoxmFjDwghyS/nEt0+uto0Fc0bflhAkHzjoLO6RisB Xx32nmzB74UTtLROUjNy0ycaWWJkFNAMtzbAv1WciYQErWD/oxkiHdiqHgUcCEoE FsqoCvPM1H2JZuVP4W41h9ewzat+q6wniXkUDnNc9baleAjJ1jEQ0Nym8+othcSF liNU8Qk86j/hXeCE7P0E7mblMuJICyz5FJHe6awCuJZWKki1Zxw+1B8HiCCOW2Hx yLXcasSMlHGATfOF0tLZfvSjksaYBkuCajWqpNRT9rIKpKsniQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIjWXznYntuH/Bid0q6XSgGccRbuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzdlOWNiYWMtNjAzZC0z ODQ3LTk0ZGYtMzljMzZhZDc1OGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQLgRiOyEfHuQvCfEbrQyvgoOCDTEfF3Ym2IJWFeFiTZaVz9kmr 5JmxvjiG2kfdte7dB1QcAQq5i63uo38zfb7gLIoTP+/j+K8FDK+tFBluAZ7Hg3Vw 8dFa7SLHfivJBWdo5V/AWcDX8J7O5NPX8B8YTUhsmYpK/Lvxrz6zRIh1/OusyuBw 2H+iXK6ZGFdyEysEefb5t2RVeDGwqOOwctxCQY4k9nsrWx5DphfibRTgqiheFFnV clsQ7Rc5VqMX5/tbh/wAHIhrPS/AherOs0RuwZxcBSTnTJGz1yqCCS0enPpmxaV8 VYyH+Ql7RPLLy783q1tmy1dYd/SL9d0UXgc= -----END CERTIFICATE-----Generated at Tue Apr 29 20:32:28 2025 by rpki-client