$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa File: 9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa (raw, json) Hash identifier: b5zDvtIiZcb9T8nUQUp+ohnv4o9EUlWsPtF7yJoGvYY= Subject key identifier: 00:9F:B0:80:DA:A1:EE:CC:4F:B7:AB:7E:83:4F:7A:43:97:F0:75:52 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4352FC8BEE80A9EBFB16E20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa Signing time: Fri 25 Apr 2025 08:33:34 +0000 ROA not before: Fri 25 Apr 2025 08:33:34 +0000 ROA not after: Thu 24 Jul 2025 08:33:34 +0000 asID: 12041 IP address blocks: 2001:500:de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:2f:c8:be:e8:0a:9e:bf:b1:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:34 2025 GMT Not After : Jul 24 08:33:34 2025 GMT Subject: CN=99b82f55-79eb-4f77-980d-24605ffa16a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:07:64:a3:6c:68:bc:5f:3a:04:f0:40:e2:f0: bc:98:a9:fd:a7:86:0c:b0:42:63:15:28:f7:5e:cc: a1:d8:0e:53:c7:61:9e:bc:98:5b:da:b1:74:e3:5d: 93:50:2f:85:f4:b0:bd:18:39:8d:b2:08:96:c9:fa: 31:bf:b9:f0:49:5a:51:7b:22:2c:d5:11:b0:e3:90: e9:39:e8:ab:97:94:1b:9f:6c:80:e4:06:7c:f4:55: d7:26:50:b7:d8:8b:9e:ff:08:e2:58:03:17:16:98: 30:58:17:cc:e2:98:31:1a:9a:d4:43:c7:a8:fb:e3: e6:53:65:3c:e5:9b:58:fd:e4:5e:02:e2:52:a9:7a: 9c:19:1c:8c:28:16:08:1a:48:9c:07:95:ce:d2:b2: ec:75:88:01:24:64:1b:10:fb:1f:9d:b6:4c:72:0f: 03:76:47:75:22:30:bb:19:86:56:6f:c5:5e:03:fe: 08:70:65:e0:b8:2a:2c:1d:2b:bb:0b:67:85:50:72: 3e:ae:67:5b:c6:85:91:eb:d7:ac:e4:d4:20:29:8c: ca:33:9f:2c:45:34:cf:48:87:b8:b8:3a:15:a9:fd: d8:ac:5b:a6:45:c6:6b:6d:d9:9d:a2:b1:25:84:4c: ce:b2:8b:23:f4:84:ec:f4:dd:75:19:8c:d6:0a:e4: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9F:B0:80:DA:A1:EE:CC:4F:B7:AB:7E:83:4F:7A:43:97:F0:75:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9df19dee-0150-33c5-b7f0-ccb4a6cb8fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:de::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7b:28:ca:16:15:0a:52:51:75:cd:68:65:48:ce:15:5d:bb: f0:7d:91:70:2d:ea:52:78:91:01:d0:33:0d:a7:f5:63:78:b1: fe:07:df:e2:1c:13:73:e3:ce:9b:09:a4:2a:fd:4c:38:7e:97: e5:f2:e6:5f:eb:21:ff:56:17:56:b0:3b:d9:c0:31:95:e3:4b: d2:1c:81:6a:85:e5:34:c9:62:03:d5:02:b5:fc:c4:b2:1d:5a: 32:88:49:ab:fc:d0:56:0c:dd:fb:c5:24:fc:a3:2c:26:33:8e: 68:c0:fe:c3:e9:15:c8:ee:b4:16:00:da:84:f7:9d:98:46:1b: 56:5e:d0:01:8a:ab:c5:70:46:d8:7d:7d:00:51:20:91:56:80: bb:9c:2f:48:36:66:24:1e:a9:45:b3:15:b7:20:66:74:c3:19: 1a:63:9b:6a:8b:0b:b0:40:03:41:fd:a7:e8:91:57:e3:84:8a: 98:0e:ba:52:f5:1b:ab:fa:f0:48:fe:ee:75:19:44:0c:0f:f4: 4f:61:62:28:17:d8:20:b8:82:c0:04:37:0c:c4:b7:e7:ea:a5: 9c:2e:5e:e9:fa:ce:8f:1b:7e:5e:8f:fa:7f:65:16:e2:15:4f: 7d:0f:7c:ff:66:c4:3c:8b:7c:0a:23:c1:d9:5a:db:9a:ad:eb: 9a:65:7f:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNS/IvugKnr+xbiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzMzNFoXDTI1MDcyNDA4MzMzNFowLzEtMCsGA1UEAxMk OTliODJmNTUtNzllYi00Zjc3LTk4MGQtMjQ2MDVmZmExNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAdko2xovF86BPBA4vC8mKn9p4YMsEJjFSj3 Xsyh2A5Tx2GevJhb2rF0412TUC+F9LC9GDmNsgiWyfoxv7nwSVpReyIs1RGw45Dp Oeirl5Qbn2yA5AZ89FXXJlC32Iue/wjiWAMXFpgwWBfM4pgxGprUQ8eo++PmU2U8 5ZtY/eReAuJSqXqcGRyMKBYIGkicB5XO0rLsdYgBJGQbEPsfnbZMcg8Ddkd1IjC7 GYZWb8VeA/4IcGXguCosHSu7C2eFUHI+rmdbxoWR69es5NQgKYzKM58sRTTPSIe4 uDoVqf3YrFumRcZrbdmdorElhEzOsosj9ITs9N11GYzWCuQPwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFACfsIDaoe7MT7erfoNPekOX8HVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWRmMTlkZWUtMDE1MC0z M2M1LWI3ZjAtY2NiNGE2Y2I4ZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADh7KMoWFQpSUXXNaGVIzhVdu/B9kXAt6lJ4kQHQMw2n9WN4sf4H 3+IcE3PjzpsJpCr9TDh+l+Xy5l/rIf9WF1awO9nAMZXjS9IcgWqF5TTJYgPVArX8 xLIdWjKISav80FYM3fvFJPyjLCYzjmjA/sPpFcjutBYA2oT3nZhGG1Ze0AGKq8Vw Rth9fQBRIJFWgLucL0g2ZiQeqUWzFbcgZnTDGRpjm2qLC7BAA0H9p+iRV+OEipgO ulL1G6v68Ej+7nUZRAwP9E9hYigX2CC4gsAENwzEt+fqpZwuXun6zo8bfl6P+n9l FuIVT30PfP9mxDyLfAojwdla25qt65plfyw= -----END CERTIFICATE-----Generated at Tue Apr 29 18:32:41 2025 by rpki-client