$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d398d98-047f-372e-b6b6-421a60b9bc4a.roa File: 7d398d98-047f-372e-b6b6-421a60b9bc4a.roa (raw, json) Hash identifier: j4tHy4BdF7ZTFANFC0+EkKMYX193lJFcp2C1E/0R+sg= Subject key identifier: E0:5D:F9:0D:17:9E:84:83:D3:A3:37:00:DC:84:CF:B9:8A:D2:3E:75 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A42EE6AC6DAF276916277950 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d398d98-047f-372e-b6b6-421a60b9bc4a.roa Signing time: Fri 25 Apr 2025 08:20:54 +0000 ROA not before: Fri 25 Apr 2025 08:20:54 +0000 ROA not after: Thu 24 Jul 2025 08:20:54 +0000 asID: 12041 IP address blocks: 2001:500:c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:2e:e6:ac:6d:af:27:69:16:27:79:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:20:54 2025 GMT Not After : Jul 24 08:20:54 2025 GMT Subject: CN=2b3a5935-25ae-4807-9fbe-50d86c1164f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:44:ff:d3:91:54:10:6f:46:f6:3b:63:77: c1:30:d7:6d:a6:bd:f5:95:fd:24:23:c1:54:92:e3: 9e:81:4f:62:94:41:36:d4:17:ed:ea:3a:51:db:40: 7c:09:47:b6:9f:91:d9:28:59:00:4f:c1:ff:91:b0: c1:4d:8c:f4:47:59:20:cf:49:81:fa:54:7a:68:a2: 54:44:fc:c0:45:1a:ca:49:71:aa:a2:6d:f0:bb:c4: 3f:e6:47:54:fb:22:ff:ba:94:d9:d1:90:51:8c:22: 4f:8f:01:6d:b4:61:94:26:3b:5f:d8:57:b2:85:2f: 15:7e:4e:b9:ff:fb:0d:2b:06:1f:d6:02:3d:da:4d: ba:2c:6e:a3:0e:bf:ee:97:d2:22:f8:36:2c:87:a9: 7a:99:4b:f1:67:ec:53:e2:d4:a7:2c:05:2d:3c:b5: 97:c5:7c:0f:27:45:f1:01:1f:d1:ac:8d:24:13:14: 13:c1:c0:b8:74:9e:81:de:98:29:e4:44:d9:3c:2f: 90:3a:df:1a:1a:f2:43:73:29:df:a1:a9:55:f5:29: 73:c0:76:50:ab:af:dc:ad:15:ab:4e:76:e7:70:02: 72:2a:3f:00:c0:9a:ec:47:d4:22:89:aa:07:ac:51: e5:93:5d:5e:5b:e2:3e:7c:64:28:f6:29:85:6a:27: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5D:F9:0D:17:9E:84:83:D3:A3:37:00:DC:84:CF:B9:8A:D2:3E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7d398d98-047f-372e-b6b6-421a60b9bc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c3:b2:82:8e:b2:80:31:81:be:d3:ae:87:b6:2e:c1:20:b7: 25:cc:e8:44:6d:fb:b1:3a:94:33:79:68:35:c0:aa:9d:76:54: cb:c1:32:d0:23:aa:d7:de:da:8d:a8:09:cd:14:f1:51:bc:a8: 85:48:be:c1:3b:14:cc:33:21:c5:d4:2e:ef:e2:1f:1c:c0:a0: f9:0b:fc:fc:fb:6a:b1:63:ed:7d:6e:22:02:b1:5c:5c:71:d6: 78:6b:98:67:1b:fc:e1:aa:df:e5:e9:8d:50:27:6b:21:f3:da: 28:d8:c2:34:f4:7c:ee:0b:9c:7a:bb:93:dc:3c:b8:b3:49:3c: f1:01:75:61:8b:c6:60:57:27:e4:24:dc:07:18:7a:35:2c:e0: 45:37:86:e6:e9:4f:c9:a3:10:ea:b7:dd:b0:75:bd:af:a3:ec: b0:0d:0e:dc:75:59:12:93:f1:bc:78:ed:0a:ca:c7:79:e3:06: fd:e8:44:36:d6:8e:eb:fb:a7:32:ac:3e:86:6a:13:7a:01:40: bc:53:dd:7d:5b:36:5f:7d:9d:86:3d:03:ba:36:ca:68:e9:60: c9:59:c1:14:c1:06:02:7a:05:1d:e0:9f:93:07:8c:0b:cd:f7: 6e:04:2e:f8:21:7b:81:bd:b5:f3:d0:78:fd:59:48:68:d7:bc: bd:37:eb:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkLuasba8naRYneVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MjA1NFoXDTI1MDcyNDA4MjA1NFowLzEtMCsGA1UEAxMk MmIzYTU5MzUtMjVhZS00ODA3LTlmYmUtNTBkODZjMTE2NGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSpE/9ORVBBvRvY7Y3fBMNdtpr31lf0kI8FU kuOegU9ilEE21Bft6jpR20B8CUe2n5HZKFkAT8H/kbDBTYz0R1kgz0mB+lR6aKJU RPzARRrKSXGqom3wu8Q/5kdU+yL/upTZ0ZBRjCJPjwFttGGUJjtf2FeyhS8Vfk65 //sNKwYf1gI92k26LG6jDr/ul9Ii+DYsh6l6mUvxZ+xT4tSnLAUtPLWXxXwPJ0Xx AR/RrI0kExQTwcC4dJ6B3pgp5ETZPC+QOt8aGvJDcynfoalV9SlzwHZQq6/crRWr TnbncAJyKj8AwJrsR9QiiaoHrFHlk11eW+I+fGQo9imFaidiwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOBd+Q0XnoSD06M3ANyEz7mK0j51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2QzOThkOTgtMDQ3Zi0z NzJlLWI2YjYtNDIxYTYwYjliYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGLDsoKOsoAxgb7Troe2LsEgtyXM6ERt+7E6lDN5aDXAqp12VMvB MtAjqtfe2o2oCc0U8VG8qIVIvsE7FMwzIcXULu/iHxzAoPkL/Pz7arFj7X1uIgKx XFxx1nhrmGcb/OGq3+XpjVAnayHz2ijYwjT0fO4LnHq7k9w8uLNJPPEBdWGLxmBX J+Qk3AcYejUs4EU3hubpT8mjEOq33bB1va+j7LANDtx1WRKT8bx47QrKx3njBv3o RDbWjuv7pzKsPoZqE3oBQLxT3X1bNl99nYY9A7o2ymjpYMlZwRTBBgJ6BR3gn5MH jAvN924ELvghe4G9tfPQeP1ZSGjXvL036xM= -----END CERTIFICATE-----Generated at Tue Apr 29 14:34:05 2025 by rpki-client