$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa File: 8f25252a-c003-3570-b9c6-4bc221214d3a.roa (raw, json) Hash identifier: 2736XzGxnkOfWv5iWzZL500aJbwSiQlq4d9cuqiHaeA= Subject key identifier: DC:DA:6A:C4:54:49:20:90:EA:62:99:44:87:3F:DD:04:88:67:A3:C1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A42EF1755F7A8DA0315F1440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa Signing time: Fri 25 Apr 2025 08:20:59 +0000 ROA not before: Fri 25 Apr 2025 08:20:59 +0000 ROA not after: Thu 24 Jul 2025 08:20:59 +0000 asID: 12041 IP address blocks: 2001:500:c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:2e:f1:75:5f:7a:8d:a0:31:5f:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:20:59 2025 GMT Not After : Jul 24 08:20:59 2025 GMT Subject: CN=70061d36-2e82-49a6-ab95-46a8f008f305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:95:d5:44:49:05:d8:4c:e7:9e:b0:45:54: 2f:57:9f:92:52:a3:b5:16:0b:be:15:df:a9:20:6b: fe:87:07:d8:f8:88:7b:0b:f0:56:aa:8b:22:be:2e: cc:9d:e0:64:c9:11:e8:d4:64:7f:27:46:a5:0c:26: 97:c6:94:82:b3:33:04:bf:f3:c4:ec:09:d8:53:09: 9c:14:40:05:b4:3c:6c:d4:ac:2a:a5:43:5d:c4:e1: e4:c6:70:a9:91:96:bc:ed:b5:9d:45:08:87:4c:4a: 8a:88:3f:dc:2f:e4:84:ae:88:21:12:b5:61:ca:2d: b1:0d:6e:dd:dd:a4:23:93:28:8d:d3:89:6f:e8:b5: 6b:d6:6d:c8:50:fc:16:a5:5d:e2:4b:78:cc:1f:6d: 7e:f5:57:41:50:ab:20:99:50:7a:ba:62:b3:08:24: 2f:5f:71:7d:5e:d2:8e:0c:62:e5:2a:1d:ef:c7:c8: 9d:27:2c:1a:5e:09:58:20:6b:1f:45:9f:cc:bf:de: b9:39:62:4c:7a:8b:c5:81:98:00:90:36:7f:a9:95: c0:4f:2d:85:55:56:d9:a9:79:f0:8c:19:6c:c6:4b: b6:ff:5b:4c:52:b5:67:37:53:fc:0e:6a:e4:64:d0: 33:af:63:39:40:cc:50:d9:37:70:9d:72:3b:6c:7c: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DA:6A:C4:54:49:20:90:EA:62:99:44:87:3F:DD:04:88:67:A3:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f25252a-c003-3570-b9c6-4bc221214d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:11:bb:56:47:0d:9f:34:8f:27:01:a6:1a:85:f5:48:f6:4d: 65:55:f4:8d:7b:69:4c:34:f5:0e:0d:12:e9:d7:af:81:fd:7e: c4:5a:73:09:12:b4:fa:7a:cd:78:17:3b:83:03:1c:1f:ed:56: b7:85:fd:f3:21:c0:ed:16:ae:1f:38:6b:00:4b:31:92:78:97: 6c:bf:fe:6f:e1:9e:9c:df:8e:4a:17:8d:84:75:53:dc:be:13: c5:67:5b:ef:a0:9c:3a:3c:ff:63:d3:99:56:4c:21:8e:ee:52: f2:e4:2b:18:6d:23:95:51:90:af:0e:38:b8:e5:a6:4a:0c:5d: 53:41:96:06:d1:ed:f0:f9:ed:e7:aa:49:87:c8:1d:da:70:26: 95:31:c9:da:93:43:37:61:1e:14:8c:a7:30:fc:d9:96:7a:4d: 50:e4:f7:1e:70:17:88:0a:72:5c:fd:31:0d:d5:41:ff:3c:00: e0:74:74:49:12:c3:a2:53:e8:36:76:7b:97:bd:28:b7:b9:d6: fc:04:f0:b4:0f:7d:58:f9:f0:0e:4b:ef:74:9a:72:f3:70:29: ea:82:06:a5:97:5f:eb:97:6c:35:88:9d:c0:a3:e1:21:96:7b: 63:5a:24:c2:82:bb:5b:f6:14:6d:7d:17:7a:92:d1:0f:5d:9d: 2f:54:a2:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkLvF1X3qNoDFfFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MjA1OVoXDTI1MDcyNDA4MjA1OVowLzEtMCsGA1UEAxMk NzAwNjFkMzYtMmU4Mi00OWE2LWFiOTUtNDZhOGYwMDhmMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPuV1URJBdhM556wRVQvV5+SUqO1Fgu+Fd+p IGv+hwfY+Ih7C/BWqosivi7MneBkyRHo1GR/J0alDCaXxpSCszMEv/PE7AnYUwmc FEAFtDxs1KwqpUNdxOHkxnCpkZa87bWdRQiHTEqKiD/cL+SEroghErVhyi2xDW7d 3aQjkyiN04lv6LVr1m3IUPwWpV3iS3jMH21+9VdBUKsgmVB6umKzCCQvX3F9XtKO DGLlKh3vx8idJywaXglYIGsfRZ/Mv965OWJMeovFgZgAkDZ/qZXATy2FVVbZqXnw jBlsxku2/1tMUrVnN1P8DmrkZNAzr2M5QMxQ2TdwnXI7bHx8uwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNzaasRUSSCQ6mKZRIc/3QSIZ6PBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGYyNTI1MmEtYzAwMy0z NTcwLWI5YzYtNGJjMjIxMjE0ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIMRu1ZHDZ80jycBphqF9Uj2TWVV9I17aUw09Q4NEunXr4H9fsRa cwkStPp6zXgXO4MDHB/tVreF/fMhwO0Wrh84awBLMZJ4l2y//m/hnpzfjkoXjYR1 U9y+E8VnW++gnDo8/2PTmVZMIY7uUvLkKxhtI5VRkK8OOLjlpkoMXVNBlgbR7fD5 7eeqSYfIHdpwJpUxydqTQzdhHhSMpzD82ZZ6TVDk9x5wF4gKclz9MQ3VQf88AOB0 dEkSw6JT6DZ2e5e9KLe51vwE8LQPfVj58A5L73SacvNwKeqCBqWXX+uXbDWIncCj 4SGWe2NaJMKCu1v2FG19F3qS0Q9dnS9Uoj0= -----END CERTIFICATE-----Generated at Tue Apr 29 15:02:37 2025 by rpki-client