$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8bdce9cf-a386-3032-8c97-a8eaf6b98e0e.roa File: 8bdce9cf-a386-3032-8c97-a8eaf6b98e0e.roa (raw, json) Hash identifier: he4CrdXSGA1PEomhcUmyCjxfoCtnk1wD8qyXzvALFko= Subject key identifier: 8B:EE:FD:60:B6:5A:9A:4D:C3:55:80:20:27:3E:B2:A9:13:70:3A:BC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4352939E286369645A2EC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8bdce9cf-a386-3032-8c97-a8eaf6b98e0e.roa Signing time: Fri 25 Apr 2025 08:33:30 +0000 ROA not before: Fri 25 Apr 2025 08:33:30 +0000 ROA not after: Thu 24 Jul 2025 08:33:30 +0000 asID: 12041 IP address blocks: 2001:500:dd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:29:39:e2:86:36:96:45:a2:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:30 2025 GMT Not After : Jul 24 08:33:30 2025 GMT Subject: CN=a37595a2-d48e-4263-9fc6-5362e3e69c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:e1:4d:0f:45:4c:f4:c8:82:f7:6b:b6:9b: b4:f2:9a:58:53:a0:88:9f:ba:db:55:ea:a7:93:47: 92:39:de:2c:bb:a0:10:6e:f6:0c:9f:28:ec:a6:84: 17:d2:1f:8d:ee:15:f4:a6:e1:b1:50:70:28:00:7d: 4e:a6:ac:e9:36:0e:75:86:41:8f:64:05:af:57:98: 4f:62:72:39:66:3b:70:c1:13:2e:ab:e7:76:d7:2e: 58:81:a1:d9:88:3c:6c:76:8d:e8:50:0f:87:ef:dd: e4:d1:a3:86:69:0f:67:01:b3:45:de:4b:c2:cd:53: 5d:b8:d8:b7:31:81:30:79:c8:c5:ea:03:61:ce:81: 7a:df:a0:2c:de:fa:85:70:a4:26:dc:3e:25:51:6a: 70:88:4c:d0:80:45:fb:4f:10:01:2d:b8:8d:28:c7: 7e:35:3f:59:ed:f6:6a:bc:09:f8:1e:1c:e0:bd:16: 24:ad:44:90:ce:99:a1:1e:3e:e7:b3:01:85:21:3d: c4:3a:e2:35:60:2b:82:7f:67:54:4d:e3:58:69:2e: 40:c4:ee:66:ce:c3:f3:91:6b:c5:e6:60:20:39:56: 7d:5c:d9:f2:b8:b3:e1:fc:ec:26:90:e4:f8:4b:59: 9d:9e:f9:ef:51:7c:c0:ab:fc:08:a8:a3:ff:7e:43: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EE:FD:60:B6:5A:9A:4D:C3:55:80:20:27:3E:B2:A9:13:70:3A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8bdce9cf-a386-3032-8c97-a8eaf6b98e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:dd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ea:d6:15:bb:59:40:e0:dc:ff:4f:06:71:93:fa:02:ff:17: 35:5c:26:f9:71:df:55:9f:bf:dd:07:9d:5b:f3:21:d0:37:a9: 82:67:c9:31:c5:e2:f4:6a:b6:db:f7:58:74:37:df:1a:16:8e: c5:02:7a:ab:bf:4e:b5:ef:11:62:e5:b0:a5:65:f8:3a:fa:79: 51:33:fd:34:3d:c1:9b:79:e2:ca:79:60:4f:a3:34:f6:34:3d: 61:1b:87:1e:29:81:9c:76:46:67:83:1a:a6:39:6f:ad:0d:96: c1:a5:a4:e7:9a:13:62:bd:ab:9d:89:1a:3c:89:b9:91:4f:30: e7:8f:2c:8b:67:f5:3b:de:00:39:48:88:6e:3a:3f:8f:51:7b: 3c:84:fe:80:25:e6:ee:f1:4f:05:70:db:25:b5:5c:f3:d6:fd: 7f:96:d1:ea:05:f9:5d:02:51:c7:3d:64:18:97:fe:db:5b:82: cf:0a:45:76:5c:2a:ce:d1:91:91:fe:80:a0:b5:1d:30:c3:a0: ef:b9:82:11:07:59:82:a6:81:f8:ec:97:33:a6:70:a5:7f:9c: 4a:dd:20:24:06:86:87:09:c3:a4:b4:76:21:b3:61:d3:64:10: 5c:d3:93:66:72:6f:49:8c:3d:e6:bc:fb:f2:3c:1e:92:b2:79: 6e:93:3c:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNSk54oY2lkWi7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzMzMFoXDTI1MDcyNDA4MzMzMFowLzEtMCsGA1UEAxMk YTM3NTk1YTItZDQ4ZS00MjYzLTlmYzYtNTM2MmUzZTY5YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqLhTQ9FTPTIgvdrtpu08ppYU6CIn7rbVeqn k0eSOd4su6AQbvYMnyjspoQX0h+N7hX0puGxUHAoAH1OpqzpNg51hkGPZAWvV5hP YnI5ZjtwwRMuq+d21y5YgaHZiDxsdo3oUA+H793k0aOGaQ9nAbNF3kvCzVNduNi3 MYEwecjF6gNhzoF636As3vqFcKQm3D4lUWpwiEzQgEX7TxABLbiNKMd+NT9Z7fZq vAn4HhzgvRYkrUSQzpmhHj7nswGFIT3EOuI1YCuCf2dUTeNYaS5AxO5mzsPzkWvF 5mAgOVZ9XNnyuLPh/OwmkOT4S1mdnvnvUXzAq/wIqKP/fkPwRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIvu/WC2WppNw1WAICc+sqkTcDq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGJkY2U5Y2YtYTM4Ni0z MDMyLThjOTctYThlYWY2Yjk4ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH3q1hW7WUDg3P9PBnGT+gL/FzVcJvlx31Wfv90HnVvzIdA3qYJn yTHF4vRqttv3WHQ33xoWjsUCequ/TrXvEWLlsKVl+Dr6eVEz/TQ9wZt54sp5YE+j NPY0PWEbhx4pgZx2RmeDGqY5b60NlsGlpOeaE2K9q52JGjyJuZFPMOePLItn9Tve ADlIiG46P49RezyE/oAl5u7xTwVw2yW1XPPW/X+W0eoF+V0CUcc9ZBiX/ttbgs8K RXZcKs7RkZH+gKC1HTDDoO+5ghEHWYKmgfjslzOmcKV/nErdICQGhocJw6S0diGz YdNkEFzTk2Zyb0mMPea8+/I8HpKyeW6TPO8= -----END CERTIFICATE-----Generated at Tue Apr 29 14:31:18 2025 by rpki-client