$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa File: 9579d882-eb1c-3901-97ff-7eb7aeae8077.roa (raw, json) Hash identifier: xepq8YN3oC9yb1CR7sc7OiGtnIHLTqcHex4MK9igD68= Subject key identifier: 8D:6D:00:50:BF:62:2A:09:D7:08:94:C5:AA:6B:24:ED:3A:9E:C0:FF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4362AC801FFA9323C1AA780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa Signing time: Fri 25 Apr 2025 08:35:32 +0000 ROA not before: Fri 25 Apr 2025 08:35:32 +0000 ROA not after: Thu 24 Jul 2025 08:35:32 +0000 asID: 12041 IP address blocks: 2001:500:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:2a:c8:01:ff:a9:32:3c:1a:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:35:32 2025 GMT Not After : Jul 24 08:35:32 2025 GMT Subject: CN=0184411e-8a31-4423-bee2-dcebc16a5cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:d5:f8:fa:88:ff:a7:fa:76:be:b9:c7:67: 9e:88:d5:e0:f1:9b:15:06:98:6b:0f:eb:8f:c3:b8: 9c:ad:41:f2:a8:e6:5c:e8:94:2a:0f:1d:80:07:eb: 68:42:23:52:10:e4:61:76:e2:5b:bf:e2:bb:29:bd: a3:6c:96:d2:de:c3:d6:cc:d4:32:9a:a4:cf:1c:51: d2:78:c6:fb:36:54:d5:b1:17:f1:b5:5b:5e:80:1f: 32:26:1b:e9:7b:e6:72:4c:1b:b1:f7:70:9e:95:61: 45:36:eb:c4:44:f2:21:97:81:7a:2d:a7:00:53:80: 53:d9:fb:fc:39:b1:aa:07:e3:22:57:1b:cf:a9:06: ca:b0:8c:50:41:63:99:1f:9b:b2:76:d8:4e:c2:c0: 24:d1:0f:3d:a6:7e:74:7a:34:9c:ff:46:21:12:69: 82:80:ce:1a:57:b7:22:25:2d:9b:e6:c6:7d:c0:9b: c0:66:63:fe:38:6b:82:14:21:e0:cb:5b:82:b6:4d: 6f:67:1b:23:d4:61:a5:a5:e8:e5:5b:f9:66:2b:9f: 30:4e:bf:17:b1:18:91:4a:ec:1c:3a:b5:b3:fa:53: f9:73:91:04:aa:02:dd:d2:00:db:bd:6f:bd:37:d8: b4:47:95:a8:b9:77:67:2a:0a:0c:52:ff:85:eb:60: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6D:00:50:BF:62:2A:09:D7:08:94:C5:AA:6B:24:ED:3A:9E:C0:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9579d882-eb1c-3901-97ff-7eb7aeae8077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b9:4d:0b:79:82:97:a1:45:df:e8:de:4d:6c:49:9c:88:5f: 79:72:e6:2f:3a:66:d8:db:5f:83:47:94:34:61:48:23:00:0b: ff:70:f3:dd:29:bf:47:37:07:22:1f:aa:25:aa:78:7c:4e:9e: 72:05:3f:5f:a8:39:3a:2b:df:2d:e6:b7:2c:43:76:40:b8:43: e7:c0:0e:58:4a:19:64:d7:19:7b:73:f0:fe:53:44:36:1c:3b: 50:29:f3:d3:96:9c:02:77:91:31:99:90:8d:e7:89:f2:2d:5e: 51:46:ef:3e:30:cf:16:ac:68:4c:3b:d9:e5:82:99:51:04:d3: e2:a6:b6:ad:cd:74:7f:97:f5:d8:0e:cb:61:dd:ad:11:ca:f8: 31:7c:35:dc:77:5e:a7:82:79:c5:14:aa:8a:93:fa:e9:62:d0: 9d:57:0f:9f:63:4e:57:cc:55:5e:3a:e7:81:d4:49:19:99:6d: 8d:13:94:34:c8:66:6a:38:4c:69:85:5d:f3:ba:8f:64:19:8d: b6:3d:f4:5e:8b:2c:a9:30:62:51:87:01:54:65:1b:2e:07:a6: 4c:0a:9d:2d:ee:b7:57:b8:69:38:35:c3:47:2a:b8:6b:cf:04: 9a:69:4a:55:0d:75:01:ca:48:55:2e:11:f1:50:92:61:41:b0: cb:2e:f4:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNirIAf+pMjwap4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzUzMloXDTI1MDcyNDA4MzUzMlowLzEtMCsGA1UEAxMk MDE4NDQxMWUtOGEzMS00NDIzLWJlZTItZGNlYmMxNmE1Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGTV+PqI/6f6dr65x2eeiNXg8ZsVBphrD+uP w7icrUHyqOZc6JQqDx2AB+toQiNSEORhduJbv+K7Kb2jbJbS3sPWzNQymqTPHFHS eMb7NlTVsRfxtVtegB8yJhvpe+ZyTBux93CelWFFNuvERPIhl4F6LacAU4BT2fv8 ObGqB+MiVxvPqQbKsIxQQWOZH5uydthOwsAk0Q89pn50ejSc/0YhEmmCgM4aV7ci JS2b5sZ9wJvAZmP+OGuCFCHgy1uCtk1vZxsj1GGlpejlW/lmK58wTr8XsRiRSuwc OrWz+lP5c5EEqgLd0gDbvW+9N9i0R5WouXdnKgoMUv+F62BgrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1tAFC/YioJ1wiUxaprJO06nsD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTU3OWQ4ODItZWIxYy0z OTAxLTk3ZmYtN2ViN2FlYWU4MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHS5TQt5gpehRd/o3k1sSZyIX3ly5i86ZtjbX4NHlDRhSCMAC/9w 890pv0c3ByIfqiWqeHxOnnIFP1+oOTor3y3mtyxDdkC4Q+fADlhKGWTXGXtz8P5T RDYcO1Ap89OWnAJ3kTGZkI3nifItXlFG7z4wzxasaEw72eWCmVEE0+Kmtq3NdH+X 9dgOy2HdrRHK+DF8Ndx3XqeCecUUqoqT+uli0J1XD59jTlfMVV4654HUSRmZbY0T lDTIZmo4TGmFXfO6j2QZjbY99F6LLKkwYlGHAVRlGy4HpkwKnS3ut1e4aTg1w0cq uGvPBJppSlUNdQHKSFUuEfFQkmFBsMsu9L8= -----END CERTIFICATE-----Generated at Tue Apr 29 17:49:07 2025 by rpki-client