$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa File: a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa (raw, json) Hash identifier: K0/MxqwHHc/UBb9+hXte84FZ9G4OPJKFOgq6bcl3sNY= Subject key identifier: 47:EA:B5:59:DC:23:0E:BD:67:B9:76:3B:05:E9:0B:E7:08:A2:A7:81 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A43534CC7288613536B922A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa Signing time: Fri 25 Apr 2025 08:33:36 +0000 ROA not before: Fri 25 Apr 2025 08:33:36 +0000 ROA not after: Thu 24 Jul 2025 08:33:36 +0000 asID: 12041 IP address blocks: 2001:500:df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:34:cc:72:88:61:35:36:b9:22:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:36 2025 GMT Not After : Jul 24 08:33:36 2025 GMT Subject: CN=8d831289-cc3b-4f39-ad2b-0408f18ce083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:77:29:6d:06:4f:1d:78:a9:c9:ee:98:24: e3:84:80:41:ef:e9:39:1e:54:70:36:ad:18:66:a5: 8f:16:73:b6:07:ac:14:9e:29:e2:9e:22:05:7f:54: 3b:a8:3b:c7:1a:cc:55:72:8d:3a:b9:8f:4b:8f:9e: da:d3:58:bd:0e:83:53:02:e8:55:c2:ce:33:ce:48: a1:9e:7e:36:83:d5:a2:9b:99:97:e2:4a:ae:f0:de: 68:f7:09:77:49:19:56:91:34:64:3c:37:84:86:81: 5c:41:47:6f:65:f0:2b:60:6b:88:93:08:8e:89:85: b7:79:ac:b8:aa:fa:a6:44:3b:78:ff:85:cf:25:eb: fd:28:41:8f:2f:1d:5c:2d:59:63:98:6c:fa:7f:7b: 69:11:fc:7d:a4:76:5d:23:ad:8f:17:f7:db:3b:45: 99:50:80:a2:34:f3:43:06:02:1d:1b:ef:44:e7:fa: 46:fc:a9:19:4e:50:5b:4e:bb:98:a7:af:b8:f8:03: c5:f0:f0:b0:f0:e4:86:11:aa:82:a5:36:99:f3:ff: 4b:9a:17:6d:0d:57:19:00:0c:8c:f7:d8:5f:89:dd: 62:53:9d:13:c5:09:7c:49:14:9e:59:e9:c5:e2:a3: 3f:db:6b:4d:cd:57:67:06:dc:e3:4b:40:1b:be:ca: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EA:B5:59:DC:23:0E:BD:67:B9:76:3B:05:E9:0B:E7:08:A2:A7:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a0cc841e-aa6e-3432-af26-61621f8ab3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c8:82:f3:c9:e9:e5:2b:b8:6a:75:b0:09:30:21:36:a4:94: 48:5c:7f:20:97:27:1a:1b:c9:a3:f4:0f:4e:a6:76:f5:72:9e: a4:18:b4:b9:31:3e:31:3c:b3:7b:d5:e8:79:b4:86:cb:04:1b: b0:38:95:bc:86:4a:cf:11:cc:7e:4b:e3:6b:5c:cd:0b:df:dc: 8c:b5:61:5f:1e:37:9d:8b:6d:45:d8:d7:f3:39:54:fe:fa:2a: d4:22:8c:c7:56:bb:84:0f:e3:1d:24:05:f4:68:77:a6:51:4c: 74:15:31:7d:32:3f:82:6a:a4:12:37:ad:12:3e:9e:8e:1c:c5: d1:ec:0c:6d:b5:33:19:32:b7:ea:6f:c9:0f:dd:3b:1a:00:90: 02:b2:ac:16:2f:48:26:91:ce:0e:c7:ec:78:56:98:85:94:32: 66:97:35:7e:c0:dc:d2:0c:7e:d9:1d:a4:f9:ac:0e:75:00:f3: 74:02:fb:f6:74:a1:6e:fa:9c:85:bd:6c:46:32:d0:08:30:06: 04:db:69:a7:f0:09:33:e6:0a:a4:e6:95:d5:3f:89:94:94:fa: 7e:28:f4:85:3f:17:b3:a3:cf:16:3b:22:1c:9c:3e:50:bc:28: d5:7f:d1:73:4a:ec:cb:42:3f:c6:cb:65:97:ca:04:7a:fc:b7: e3:a5:f6:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNTTMcohhNTa5IqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzMzNloXDTI1MDcyNDA4MzMzNlowLzEtMCsGA1UEAxMk OGQ4MzEyODktY2MzYi00ZjM5LWFkMmItMDQwOGYxOGNlMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCt3KW0GTx14qcnumCTjhIBB7+k5HlRwNq0Y ZqWPFnO2B6wUnininiIFf1Q7qDvHGsxVco06uY9Lj57a01i9DoNTAuhVws4zzkih nn42g9Wim5mX4kqu8N5o9wl3SRlWkTRkPDeEhoFcQUdvZfArYGuIkwiOiYW3eay4 qvqmRDt4/4XPJev9KEGPLx1cLVljmGz6f3tpEfx9pHZdI62PF/fbO0WZUICiNPND BgIdG+9E5/pG/KkZTlBbTruYp6+4+APF8PCw8OSGEaqCpTaZ8/9LmhdtDVcZAAyM 99hfid1iU50TxQl8SRSeWenF4qM/22tNzVdnBtzjS0AbvsptTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEfqtVncIw69Z7l2OwXpC+cIoqeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTBjYzg0MWUtYWE2ZS0z NDMyLWFmMjYtNjE2MjFmOGFiM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDIgvPJ6eUruGp1sAkwITaklEhcfyCXJxobyaP0D06mdvVynqQY tLkxPjE8s3vV6Hm0hssEG7A4lbyGSs8RzH5L42tczQvf3Iy1YV8eN52LbUXY1/M5 VP76KtQijMdWu4QP4x0kBfRod6ZRTHQVMX0yP4JqpBI3rRI+no4cxdHsDG21Mxky t+pvyQ/dOxoAkAKyrBYvSCaRzg7H7HhWmIWUMmaXNX7A3NIMftkdpPmsDnUA83QC +/Z0oW76nIW9bEYy0AgwBgTbaafwCTPmCqTmldU/iZSU+n4o9IU/F7OjzxY7Ihyc PlC8KNV/0XNK7MtCP8bLZZfKBHr8t+Ol9uA= -----END CERTIFICATE-----Generated at Wed Apr 30 06:24:58 2025 by rpki-client