$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9bb899c9-7b5d-3b39-8425-0623aa5487b9.roa File: 9bb899c9-7b5d-3b39-8425-0623aa5487b9.roa (raw, json) Hash identifier: evjdPZHVmozqfPGLEWQSKDNH7hebeRzyMvoNnxnuud8= Subject key identifier: 6C:FB:12:C9:97:F7:65:1F:6A:7C:F5:86:06:90:6A:87:A3:BE:50:3F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A43620C6058248FD651375E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9bb899c9-7b5d-3b39-8425-0623aa5487b9.roa Signing time: Fri 25 Apr 2025 08:35:27 +0000 ROA not before: Fri 25 Apr 2025 08:35:27 +0000 ROA not after: Thu 24 Jul 2025 08:35:27 +0000 asID: 12041 IP address blocks: 2001:500:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:20:c6:05:82:48:fd:65:13:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:35:27 2025 GMT Not After : Jul 24 08:35:27 2025 GMT Subject: CN=f24d5d37-6f5b-4f3d-a24d-aadaa032d0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:38:45:2a:b0:05:10:38:d1:38:87:a6:88: 6b:b2:3a:79:9d:f8:53:db:43:19:a0:77:35:de:00: d7:0a:b7:75:57:b6:a9:ec:b1:ba:1d:81:62:05:9d: 5d:fc:63:ce:86:a6:ee:7d:b0:45:0c:3d:48:4c:39: f4:10:90:0b:5d:39:b4:79:15:81:f3:d7:30:36:39: bd:91:0a:9a:e9:ad:7e:87:95:1a:ab:d0:42:67:4c: 4d:12:15:ef:8f:3d:97:07:6e:01:2b:4a:f8:96:17: 96:f4:d4:e2:24:57:c5:a6:2a:9a:50:a8:36:fd:46: dd:5d:79:82:75:a4:8b:86:a4:b7:c6:e6:87:58:f0: 4d:ab:31:a9:8b:ee:bd:25:2e:f4:08:01:4c:6b:a9: 04:cc:2b:7e:da:84:a2:64:45:ec:46:1c:4c:71:81: 72:07:cf:a0:29:df:71:bf:16:b6:46:e9:65:41:f2: e0:ca:21:4d:a0:22:ac:5e:e1:5b:e4:bf:23:47:a5: 28:f7:1a:fc:2e:35:2d:8c:0e:2b:b0:af:9f:68:97: 39:64:84:a1:89:f6:d8:cf:72:8b:50:63:7a:97:b9: d3:a8:43:82:2d:8d:10:45:05:94:e6:5f:a7:8c:6b: 4b:da:f6:95:e2:be:f5:35:a5:86:73:d4:b5:e1:13: 72:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FB:12:C9:97:F7:65:1F:6A:7C:F5:86:06:90:6A:87:A3:BE:50:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9bb899c9-7b5d-3b39-8425-0623aa5487b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f5:31:9a:19:aa:69:5f:75:ab:68:d9:c0:7a:aa:81:86:0a: d3:a9:ba:a6:dd:10:2a:d6:f1:36:c4:ee:df:fb:b4:4d:d2:53: d2:9d:5a:34:b1:4b:15:d6:76:e7:b2:1b:19:b4:3b:f8:fe:8a: 0d:9a:e1:c1:2b:20:fb:40:bb:cf:21:44:94:e7:d8:61:55:9d: 45:7c:21:ce:ea:6b:34:5f:25:83:bb:44:62:50:3a:6d:05:28: 2c:9a:50:6b:91:c3:26:0a:df:44:25:2f:7f:22:ed:bd:a8:d6: ac:a5:30:af:f4:a9:9b:d9:9b:b0:63:10:09:a6:c3:06:f3:c9: a0:f0:80:5f:59:87:2c:4d:b9:96:1c:9c:e3:6f:a9:ad:a3:c0: 18:a1:50:fd:a2:22:2c:ff:29:6d:fb:f2:73:4c:0c:96:15:d7: cb:d7:4a:1b:46:0b:6d:72:f0:0a:f4:54:39:43:45:4b:dc:e0: 0b:65:b1:53:c0:42:55:ca:95:be:c3:b6:23:ee:11:57:b7:d9: 08:47:c8:85:c4:56:0c:25:d7:3a:7f:2c:94:5d:9d:b9:93:e0: b3:e8:78:0b:cd:26:8e:59:1f:c2:8d:2d:ba:a9:90:0c:5d:3b: c4:be:b8:26:d4:bd:d7:98:bc:37:a6:f7:4f:b6:f3:2a:70:4e: 4d:ce:9c:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNiDGBYJI/WUTdeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzUyN1oXDTI1MDcyNDA4MzUyN1owLzEtMCsGA1UEAxMk ZjI0ZDVkMzctNmY1Yi00ZjNkLWEyNGQtYWFkYWEwMzJkMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjk4RSqwBRA40TiHpohrsjp5nfhT20MZoHc1 3gDXCrd1V7ap7LG6HYFiBZ1d/GPOhqbufbBFDD1ITDn0EJALXTm0eRWB89cwNjm9 kQqa6a1+h5Uaq9BCZ0xNEhXvjz2XB24BK0r4lheW9NTiJFfFpiqaUKg2/UbdXXmC daSLhqS3xuaHWPBNqzGpi+69JS70CAFMa6kEzCt+2oSiZEXsRhxMcYFyB8+gKd9x vxa2RullQfLgyiFNoCKsXuFb5L8jR6Uo9xr8LjUtjA4rsK+faJc5ZIShifbYz3KL UGN6l7nTqEOCLY0QRQWU5l+njGtL2vaV4r71NaWGc9S14RNyIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGz7EsmX92Ufanz1hgaQaoejvlA/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWJiODk5YzktN2I1ZC0z YjM5LTg0MjUtMDYyM2FhNTQ4N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACf1MZoZqmlfdato2cB6qoGGCtOpuqbdECrW8TbE7t/7tE3SU9Kd WjSxSxXWdueyGxm0O/j+ig2a4cErIPtAu88hRJTn2GFVnUV8Ic7qazRfJYO7RGJQ Om0FKCyaUGuRwyYK30QlL38i7b2o1qylMK/0qZvZm7BjEAmmwwbzyaDwgF9ZhyxN uZYcnONvqa2jwBihUP2iIiz/KW378nNMDJYV18vXShtGC21y8Ar0VDlDRUvc4Atl sVPAQlXKlb7DtiPuEVe32QhHyIXEVgwl1zp/LJRdnbmT4LPoeAvNJo5ZH8KNLbqp kAxdO8S+uCbUvdeYvDem90+28ypwTk3OnAo= -----END CERTIFICATE-----Generated at Tue Apr 29 12:07:15 2025 by rpki-client