$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7bab1756-00e2-3740-b396-a45136227786.roa File: 7bab1756-00e2-3740-b396-a45136227786.roa (raw, json) Hash identifier: EvWBdZD8nDlqvXVrWJT3jjjI4iuyHvy9hyU8p//G5CQ= Subject key identifier: E3:D4:33:7B:37:DB:72:9C:B7:C5:0D:9B:8D:58:F5:EB:C2:8D:1C:C8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A434F597D869EEF65844A580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7bab1756-00e2-3740-b396-a45136227786.roa Signing time: Fri 25 Apr 2025 08:33:06 +0000 ROA not before: Fri 25 Apr 2025 08:33:06 +0000 ROA not after: Thu 24 Jul 2025 08:33:06 +0000 asID: 12041 IP address blocks: 2001:500:d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:34:f5:97:d8:69:ee:f6:58:44:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:06 2025 GMT Not After : Jul 24 08:33:06 2025 GMT Subject: CN=4c2c3bb7-e20e-4210-af24-f941df1f5ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:f1:1c:e8:73:9a:d3:23:0b:29:10:25:c9: 46:77:e6:09:8b:22:27:ab:a7:41:1b:ab:51:47:c5: e2:36:ba:2f:b4:f6:1c:de:b9:07:13:e7:10:af:4d: 03:c3:ad:7f:e8:71:38:82:3a:69:ff:5f:70:e0:65: 90:d8:5f:9d:40:cd:48:59:71:98:35:10:d5:83:05: f1:82:91:02:b8:0b:ee:25:fe:c6:88:41:e4:34:a4: fc:63:2f:69:7a:40:73:2e:4a:ec:69:8d:eb:36:15: e8:53:cd:c5:dd:9c:41:45:0a:f8:b2:0e:9f:4b:c7: db:37:fc:f3:2d:d0:58:0a:8a:d7:cf:22:9f:6b:5a: f1:7a:4a:c0:23:8e:96:19:5a:92:9d:73:f4:a6:db: 5c:42:75:ef:69:a3:25:63:fd:7d:74:3c:02:eb:46: 19:9a:f4:a4:2d:06:a2:a5:7a:5f:31:d7:c4:a1:07: 33:1d:f2:5c:07:26:63:3b:62:f9:b4:28:f6:d9:1e: d8:23:c6:d4:f0:8b:3b:76:0b:48:ef:22:6c:79:2f: a3:2e:d3:ad:38:01:c2:01:0d:20:ef:b6:3c:2a:a3: 44:1c:a8:72:2a:8a:e2:f8:a7:ed:30:49:50:b2:d0: 3e:ca:98:ab:7e:b5:d2:16:8e:06:f2:6e:6e:5f:47: 9b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D4:33:7B:37:DB:72:9C:B7:C5:0D:9B:8D:58:F5:EB:C2:8D:1C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7bab1756-00e2-3740-b396-a45136227786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2c:2a:92:56:29:e3:1f:65:96:47:f4:ac:81:ca:86:d2:ee: 01:58:49:21:2d:07:ed:54:c2:a8:00:1e:00:c7:63:01:e3:ae: c0:e9:cd:f6:e1:48:10:b9:d9:1a:a6:08:60:a3:33:d2:9d:f3: 01:8f:da:20:78:60:b6:63:83:79:9b:92:0f:9b:d9:3c:81:4f: 1f:72:24:35:4f:2f:b6:68:e9:ca:89:1d:0f:3e:59:49:5d:d0: 46:54:f4:df:93:01:65:20:8e:c8:98:56:1d:8f:76:f0:22:e7: 5a:8f:76:81:f5:a3:b9:60:5f:43:9c:0c:96:3c:0c:94:2e:2f: 60:9e:c2:d0:02:18:f3:6e:cb:04:a4:aa:05:c5:55:a8:79:50: f8:8a:fe:c8:74:bb:8f:17:c0:b1:e9:20:58:31:92:ef:82:ef: 2e:50:45:54:11:db:3f:3f:01:4f:3e:be:82:1f:ed:61:a6:78: dc:1d:e6:5a:4c:51:7f:ca:f3:24:03:72:77:ea:d0:ac:4c:08: fd:40:a5:f2:de:f4:d5:11:a8:9c:d8:90:bd:87:7b:00:cc:70: 0e:a9:8f:0f:a8:9f:dc:cc:35:a1:3f:43:78:7f:fb:8c:0b:99: a6:c3:db:cf:d3:e4:eb:4b:88:28:7f:6c:91:df:c0:d7:cc:96: c8:ba:bb:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNPWX2Gnu9lhEpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzMwNloXDTI1MDcyNDA4MzMwNlowLzEtMCsGA1UEAxMk NGMyYzNiYjctZTIwZS00MjEwLWFmMjQtZjk0MWRmMWY1YmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW/xHOhzmtMjCykQJclGd+YJiyInq6dBG6tR R8XiNrovtPYc3rkHE+cQr00Dw61/6HE4gjpp/19w4GWQ2F+dQM1IWXGYNRDVgwXx gpECuAvuJf7GiEHkNKT8Yy9pekBzLkrsaY3rNhXoU83F3ZxBRQr4sg6fS8fbN/zz LdBYCorXzyKfa1rxekrAI46WGVqSnXP0pttcQnXvaaMlY/19dDwC60YZmvSkLQai pXpfMdfEoQczHfJcByZjO2L5tCj22R7YI8bU8Is7dgtI7yJseS+jLtOtOAHCAQ0g 77Y8KqNEHKhyKori+KftMElQstA+ypirfrXSFo4G8m5uX0ebSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOPUM3s323Kct8UNm41Y9evCjRzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2JhYjE3NTYtMDBlMi0z NzQwLWIzOTYtYTQ1MTM2MjI3Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEosKpJWKeMfZZZH9KyByobS7gFYSSEtB+1UwqgAHgDHYwHjrsDp zfbhSBC52RqmCGCjM9Kd8wGP2iB4YLZjg3mbkg+b2TyBTx9yJDVPL7Zo6cqJHQ8+ WUld0EZU9N+TAWUgjsiYVh2PdvAi51qPdoH1o7lgX0OcDJY8DJQuL2CewtACGPNu ywSkqgXFVah5UPiK/sh0u48XwLHpIFgxku+C7y5QRVQR2z8/AU8+voIf7WGmeNwd 5lpMUX/K8yQDcnfq0KxMCP1ApfLe9NURqJzYkL2HewDMcA6pjw+on9zMNaE/Q3h/ +4wLmabD28/T5OtLiCh/bJHfwNfMlsi6u4I= -----END CERTIFICATE-----Generated at Thu May 1 10:04:51 2025 by rpki-client