$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7cac83ee-6194-31cf-8e5c-597015df78fe.roa File: 7cac83ee-6194-31cf-8e5c-597015df78fe.roa (raw, json) Hash identifier: O7Iws3s0oH6DcaTrZRbVYHzv/7sA710ASRcE1jy555s= Subject key identifier: 1E:9B:D7:90:08:1E:B3:C8:FB:A3:D0:23:3D:F5:72:FC:13:0B:04:D7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A435077DA84C854E5ACFBC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7cac83ee-6194-31cf-8e5c-597015df78fe.roa Signing time: Fri 25 Apr 2025 08:33:14 +0000 ROA not before: Fri 25 Apr 2025 08:33:14 +0000 ROA not after: Thu 24 Jul 2025 08:33:14 +0000 asID: 12041 IP address blocks: 2001:500:d7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:07:7d:a8:4c:85:4e:5a:cf:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:14 2025 GMT Not After : Jul 24 08:33:14 2025 GMT Subject: CN=ec74bc5c-8adc-4d55-8451-971d324594e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:6d:10:a2:e5:8b:25:14:6f:d1:c4:ad:e2: 90:6a:84:d8:fb:14:ce:53:b1:d0:b3:83:32:4f:68: 31:c9:04:b6:54:d5:34:9e:58:a4:31:33:56:bc:f9: 8d:0b:30:b8:39:1a:bf:7e:d0:f8:2b:8a:70:de:18: 03:6e:f2:b4:e9:35:17:5a:4a:40:e4:39:20:1c:f4: 06:55:fa:e7:e6:a8:10:08:56:40:c8:a6:07:c9:c4: ff:65:92:e5:6c:43:f5:db:af:d2:c7:9c:cb:46:a1: ca:33:24:50:ee:5b:6d:35:dd:4a:dd:14:96:ac:e3: 53:86:e0:dd:d1:49:3f:91:06:d8:3c:3a:70:2f:93: 44:9c:4c:d5:52:23:94:75:0b:a0:d4:ba:a8:22:64: 1f:c9:6f:e7:78:1d:95:8a:91:19:ed:ed:d5:c6:35: 3e:ba:ac:3b:bf:6e:e3:17:5c:42:5d:37:ae:4c:b9: 99:42:70:c7:f2:5f:fc:0b:56:61:a0:c6:3b:cd:08: c7:78:0b:cb:5e:e8:88:62:15:e0:1d:bf:e3:b0:b2: 58:83:12:a0:e9:73:1d:bb:4e:ea:7c:f0:bb:a0:24: 7c:55:ce:6d:83:a8:1c:e8:99:27:78:28:8d:8f:94: ac:e9:99:70:89:c6:c8:00:69:50:ff:b2:f0:90:20: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9B:D7:90:08:1E:B3:C8:FB:A3:D0:23:3D:F5:72:FC:13:0B:04:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7cac83ee-6194-31cf-8e5c-597015df78fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c3:de:86:47:f7:fc:a4:10:91:f2:fb:0f:a5:63:34:82:a4: 86:35:ef:37:38:20:e5:9c:7e:7e:9d:a2:a4:0b:78:29:cd:5e: 8d:b4:ff:7c:7b:f2:81:9b:03:19:b6:a6:3c:bd:6e:81:d3:7d: b8:18:61:8c:a4:c3:af:c3:4c:be:62:ec:e3:2f:f9:7e:37:22: e1:bb:68:ee:aa:f6:0f:4d:d4:e3:2c:14:87:2c:1c:60:df:0d: 83:1b:52:21:ce:2c:84:d9:4a:de:32:e0:ad:c4:b7:93:09:91: 98:a0:eb:9c:76:a9:8a:ca:84:68:cf:35:bb:36:e9:0d:65:d2: 16:9f:98:19:ff:b3:63:41:a1:97:e7:77:52:0d:4e:b2:73:39: 7a:54:59:58:c5:0b:08:6d:7a:a7:83:47:43:92:1d:15:87:4f: d6:b2:fb:61:9b:b2:b1:5d:ef:4d:c4:19:6e:de:1c:5c:b6:cd: 77:98:36:42:e3:82:71:30:e6:7b:1e:47:0e:14:6f:ea:e3:0b: 57:7a:1f:47:3c:9a:4b:dc:cc:6b:7c:02:2f:d9:0e:40:d4:4a: 5a:c7:b4:10:84:3d:ef:31:c1:1d:92:2b:d8:f0:1a:f8:70:b8: 21:ff:c8:22:96:56:bc:a3:ed:d4:ba:77:5f:dd:6a:69:b5:4b: df:cd:69:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNQd9qEyFTlrPvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzMxNFoXDTI1MDcyNDA4MzMxNFowLzEtMCsGA1UEAxMk ZWM3NGJjNWMtOGFkYy00ZDU1LTg0NTEtOTcxZDMyNDU5NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjBtEKLliyUUb9HEreKQaoTY+xTOU7HQs4My T2gxyQS2VNU0nlikMTNWvPmNCzC4ORq/ftD4K4pw3hgDbvK06TUXWkpA5DkgHPQG Vfrn5qgQCFZAyKYHycT/ZZLlbEP126/Sx5zLRqHKMyRQ7lttNd1K3RSWrONThuDd 0Uk/kQbYPDpwL5NEnEzVUiOUdQug1LqoImQfyW/neB2VipEZ7e3VxjU+uqw7v27j F1xCXTeuTLmZQnDH8l/8C1ZhoMY7zQjHeAvLXuiIYhXgHb/jsLJYgxKg6XMdu07q fPC7oCR8Vc5tg6gc6JkneCiNj5Ss6ZlwicbIAGlQ/7LwkCD+jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB6b15AIHrPI+6PQIz31cvwTCwTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2NhYzgzZWUtNjE5NC0z MWNmLThlNWMtNTk3MDE1ZGY3OGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABTD3oZH9/ykEJHy+w+lYzSCpIY17zc4IOWcfn6doqQLeCnNXo20 /3x78oGbAxm2pjy9boHTfbgYYYykw6/DTL5i7OMv+X43IuG7aO6q9g9N1OMsFIcs HGDfDYMbUiHOLITZSt4y4K3Et5MJkZig65x2qYrKhGjPNbs26Q1l0hafmBn/s2NB oZfnd1INTrJzOXpUWVjFCwhteqeDR0OSHRWHT9ay+2GbsrFd703EGW7eHFy2zXeY NkLjgnEw5nseRw4Ub+rjC1d6H0c8mkvczGt8Ai/ZDkDUSlrHtBCEPe8xwR2SK9jw GvhwuCH/yCKWVryj7dS6d1/damm1S9/Naa8= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:32 2025 by rpki-client