$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f92cc81-ec07-39b2-9f74-7efd8814cabb.roa File: 8f92cc81-ec07-39b2-9f74-7efd8814cabb.roa (raw, json) Hash identifier: 5eNLvQJKusA5EO6n6JFbOWDJA9aEwQOyP20Krq9cSNU= Subject key identifier: FC:4F:8E:57:F6:41:91:0C:54:2D:C4:8C:AF:D5:26:7F:2D:A6:93:D6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A436576F48385B657F2E4380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f92cc81-ec07-39b2-9f74-7efd8814cabb.roa Signing time: Fri 25 Apr 2025 08:35:53 +0000 ROA not before: Fri 25 Apr 2025 08:35:53 +0000 ROA not after: Thu 24 Jul 2025 08:35:53 +0000 asID: 12041 IP address blocks: 2001:500:25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:57:6f:48:38:5b:65:7f:2e:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:35:53 2025 GMT Not After : Jul 24 08:35:53 2025 GMT Subject: CN=a748368f-87aa-405b-833e-742625655269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:74:36:7d:d0:85:23:41:4b:33:c4:33:21: dd:91:53:ee:27:f5:57:ff:ff:23:65:10:aa:83:57: 09:d2:be:1e:3a:b5:a1:04:15:b5:4c:8c:6e:40:13: bc:a2:6a:4c:df:58:2b:9a:06:55:c5:08:5c:2a:3b: 43:02:4a:14:ea:3c:ab:10:b6:e4:f5:39:75:a9:aa: 7b:eb:91:c5:1e:1b:29:27:58:e9:00:ff:1e:5d:ee: 6f:64:c2:64:09:b9:37:96:4a:30:d2:5e:c2:1f:00: 55:cc:6d:52:c1:d8:d3:3e:5e:1d:75:74:4a:f7:84: 40:fd:70:8c:85:47:d4:36:02:75:e9:81:3d:a4:6c: 16:b4:7a:63:64:ff:59:1e:0b:5e:f4:60:60:f2:10: 0a:15:2e:70:86:5d:25:b3:8e:94:f5:fe:d9:1d:eb: 4d:47:3d:9d:c9:f8:14:7b:b3:6b:07:2d:ae:08:03: af:21:6b:8d:cf:33:70:2e:3c:84:09:8c:a7:fe:c2: 3e:a1:53:08:ff:28:62:4f:94:ea:ba:68:e5:13:d7: 29:26:51:30:46:6d:b6:b4:3e:2b:94:2f:a7:ae:53: ef:f3:08:33:95:21:0b:3c:9e:9f:1f:34:fa:d0:d0: 38:14:cd:0f:31:92:6b:26:ef:b9:05:7c:5f:6e:9f: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4F:8E:57:F6:41:91:0C:54:2D:C4:8C:AF:D5:26:7F:2D:A6:93:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f92cc81-ec07-39b2-9f74-7efd8814cabb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:25::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:27:a9:34:25:a9:8e:2e:24:a8:a7:80:dc:e8:8b:8b:58:18: d4:cb:64:e9:c4:5b:a1:cc:9e:9b:59:b9:cf:8e:e4:25:a9:f4: a4:f8:a7:3b:34:9d:0d:13:8b:e2:39:bf:79:4f:13:f8:ae:51: 51:22:4b:41:b0:eb:f4:1c:78:7e:30:c9:25:71:a1:1b:ce:45: 44:49:07:a0:80:67:3d:27:38:e3:a6:41:03:3a:8c:0a:98:68: 76:af:c5:7e:d9:6c:08:90:ed:82:51:07:77:78:0f:27:dd:86: b3:65:82:5b:3b:cd:b1:a3:c3:77:f0:35:a9:36:61:9c:e9:a1: 25:58:dc:81:3d:af:c5:09:40:f4:a6:f8:5f:26:7c:e0:c7:7a: a1:46:3f:f8:b8:96:03:d1:a7:a7:2c:70:23:e1:45:aa:ea:62: 26:f5:cd:fa:c2:9b:3a:62:0e:38:9d:f8:30:ad:73:7c:cf:01: 12:78:29:46:65:57:d2:c3:76:68:e1:17:86:ea:dc:d4:c5:bc: 78:1f:52:2f:50:3a:50:94:4c:8d:32:67:a5:7d:1f:04:b1:17: b1:ce:6a:34:77:c1:94:33:1d:b1:26:4a:87:ab:12:a0:b3:7a: 84:b1:4e:4f:e6:f9:11:fb:a7:a1:05:04:f4:4c:8f:1d:49:93: 11:59:ab:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNldvSDhbZX8uQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzU1M1oXDTI1MDcyNDA4MzU1M1owLzEtMCsGA1UEAxMk YTc0ODM2OGYtODdhYS00MDViLTgzM2UtNzQyNjI1NjU1MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdF0Nn3QhSNBSzPEMyHdkVPuJ/VX//8jZRCq g1cJ0r4eOrWhBBW1TIxuQBO8ompM31grmgZVxQhcKjtDAkoU6jyrELbk9Tl1qap7 65HFHhspJ1jpAP8eXe5vZMJkCbk3lkow0l7CHwBVzG1SwdjTPl4ddXRK94RA/XCM hUfUNgJ16YE9pGwWtHpjZP9ZHgte9GBg8hAKFS5whl0ls46U9f7ZHetNRz2dyfgU e7NrBy2uCAOvIWuNzzNwLjyECYyn/sI+oVMI/yhiT5TqumjlE9cpJlEwRm22tD4r lC+nrlPv8wgzlSELPJ6fHzT60NA4FM0PMZJrJu+5BXxfbp9KfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPxPjlf2QZEMVC3EjK/VJn8tppPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGY5MmNjODEtZWMwNy0z OWIyLTlmNzQtN2VmZDg4MTRjYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH4nqTQlqY4uJKingNzoi4tYGNTLZOnEW6HMnptZuc+O5CWp9KT4 pzs0nQ0Ti+I5v3lPE/iuUVEiS0Gw6/QceH4wySVxoRvORURJB6CAZz0nOOOmQQM6 jAqYaHavxX7ZbAiQ7YJRB3d4DyfdhrNlgls7zbGjw3fwNak2YZzpoSVY3IE9r8UJ QPSm+F8mfODHeqFGP/i4lgPRp6cscCPhRarqYib1zfrCmzpiDjid+DCtc3zPARJ4 KUZlV9LDdmjhF4bq3NTFvHgfUi9QOlCUTI0yZ6V9HwSxF7HOajR3wZQzHbEmSoer EqCzeoSxTk/m+RH7p6EFBPRMjx1JkxFZq9A= -----END CERTIFICATE-----Generated at Tue Apr 29 20:29:55 2025 by rpki-client