$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa File: 95be4890-2931-3ddc-9628-15449cfd5f27.roa (raw, json) Hash identifier: JZwcmP4rRzBOPzwjYgcx6NgT7MCfoAqVxk7WF6eXMjg= Subject key identifier: 5E:A7:28:3A:58:F9:2D:3C:98:76:88:D4:C8:21:FA:E1:5B:79:16:19 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A436314250D606F2A81C2800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa Signing time: Fri 25 Apr 2025 08:35:35 +0000 ROA not before: Fri 25 Apr 2025 08:35:35 +0000 ROA not after: Thu 24 Jul 2025 08:35:35 +0000 asID: 12041 IP address blocks: 2001:500:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:31:42:50:d6:06:f2:a8:1c:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:35:35 2025 GMT Not After : Jul 24 08:35:35 2025 GMT Subject: CN=6fcd44b8-c7bc-4628-95b7-078503a49335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:45:13:57:65:9c:c7:eb:8d:61:42:84:0e: 21:83:b3:e6:ac:b1:b5:6c:af:24:fe:02:9a:51:82: d3:df:95:31:01:3e:10:47:53:db:12:26:da:d2:f3: b7:23:b9:88:72:7e:00:10:0a:34:75:f1:68:bf:98: 0a:b3:bf:62:98:94:ad:de:57:46:a3:ee:b5:0a:c4: 77:63:fc:f2:62:4a:6b:68:e2:d9:94:3a:3f:98:1d: 2b:16:c8:51:94:cf:ac:28:7c:10:38:8d:c1:90:38: 41:0c:18:47:d7:c3:77:0b:f3:ae:12:51:d1:51:27: 63:39:92:3d:d3:a9:3c:75:90:e7:82:7b:34:44:1a: b5:27:f9:12:f4:22:37:b4:a3:66:2f:e4:69:3c:17: e9:55:e8:e0:8a:68:dd:e1:48:3d:91:f9:f5:e1:3c: 12:b0:4b:3a:de:9b:6d:41:44:c9:d1:22:bc:97:4f: d5:c3:be:0f:37:63:5c:24:45:f8:62:40:90:96:28: a3:9e:02:80:80:bb:e2:55:b3:f0:18:1d:87:57:4a: ce:dc:94:c1:d9:99:73:19:96:22:23:22:b8:50:22: 65:79:9a:1f:a6:8d:82:7c:a8:90:b3:d2:d6:e0:e6: a4:2e:a6:7f:1b:76:49:be:59:90:77:a0:8d:1a:31: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A7:28:3A:58:F9:2D:3C:98:76:88:D4:C8:21:FA:E1:5B:79:16:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95be4890-2931-3ddc-9628-15449cfd5f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:69:f5:25:ad:11:68:33:e8:8a:8d:d2:7a:06:10:80:95:b7: 77:a6:cb:ed:a0:0b:ec:d7:ac:ae:c4:aa:b7:a6:94:2a:f9:b2: 2e:f9:15:59:53:09:80:ae:84:bb:1c:b5:0d:9c:6d:08:66:2a: 00:43:c1:22:a5:67:62:80:db:d5:71:0b:5d:7c:53:19:1a:85: bd:88:84:7e:3b:5d:e7:b0:0b:65:d9:2f:37:5e:e0:92:d5:9f: 25:54:d2:4b:c3:13:f4:b1:f0:69:a3:2e:2d:c9:b5:72:3e:0f: d6:db:e4:5d:db:de:49:38:33:17:6e:db:52:c5:92:32:d4:65: 16:5c:f9:8e:31:53:e3:f4:7c:e9:12:c8:69:2f:35:fe:6f:1a: af:5d:cc:1c:d5:f8:6e:9e:06:8d:69:23:ed:e2:a7:cd:1c:ae: 67:c4:a3:fe:0a:94:b5:ab:09:0a:1c:d6:1f:da:77:1b:bb:39: e4:1f:db:32:9a:0b:46:74:48:1e:b7:78:cd:48:94:98:81:f9: f3:e7:a5:80:1a:37:dd:d0:42:f8:ff:3b:8d:74:be:65:ca:db: ec:56:f1:ea:61:40:a3:81:e0:76:f6:78:4e:01:f7:7a:6e:15: 76:90:84:86:e4:33:f2:ff:38:74:d9:9d:f8:5b:68:c3:0e:e9: a9:49:82:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNjFCUNYG8qgcKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzUzNVoXDTI1MDcyNDA4MzUzNVowLzEtMCsGA1UEAxMk NmZjZDQ0YjgtYzdiYy00NjI4LTk1YjctMDc4NTAzYTQ5MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1dFE1dlnMfrjWFChA4hg7PmrLG1bK8k/gKa UYLT35UxAT4QR1PbEiba0vO3I7mIcn4AEAo0dfFov5gKs79imJSt3ldGo+61CsR3 Y/zyYkpraOLZlDo/mB0rFshRlM+sKHwQOI3BkDhBDBhH18N3C/OuElHRUSdjOZI9 06k8dZDngns0RBq1J/kS9CI3tKNmL+RpPBfpVejgimjd4Ug9kfn14TwSsEs63ptt QUTJ0SK8l0/Vw74PN2NcJEX4YkCQliijngKAgLviVbPwGB2HV0rO3JTB2ZlzGZYi IyK4UCJleZofpo2CfKiQs9LW4OakLqZ/G3ZJvlmQd6CNGjEtwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF6nKDpY+S08mHaI1Mgh+uFbeRYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTViZTQ4OTAtMjkzMS0z ZGRjLTk2MjgtMTU0NDljZmQ1ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVp9SWtEWgz6IqN0noGEICVt3emy+2gC+zXrK7EqremlCr5si75 FVlTCYCuhLsctQ2cbQhmKgBDwSKlZ2KA29VxC118Uxkahb2IhH47XeewC2XZLzde 4JLVnyVU0kvDE/Sx8GmjLi3JtXI+D9bb5F3b3kk4Mxdu21LFkjLUZRZc+Y4xU+P0 fOkSyGkvNf5vGq9dzBzV+G6eBo1pI+3ip80crmfEo/4KlLWrCQoc1h/adxu7OeQf 2zKaC0Z0SB63eM1IlJiB+fPnpYAaN93QQvj/O410vmXK2+xW8ephQKOB4Hb2eE4B 93puFXaQhIbkM/L/OHTZnfhbaMMO6alJgoc= -----END CERTIFICATE-----Generated at Tue Apr 29 13:23:23 2025 by rpki-client