$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a323c9f9-d1ee-3d04-a9f5-71e0431c5967.roa File: a323c9f9-d1ee-3d04-a9f5-71e0431c5967.roa (raw, json) Hash identifier: ENOqcUo96biotiPke4/WWu4Ij2D3iGEPkJ238TPujAk= Subject key identifier: B6:59:AA:F0:BA:96:E9:BE:A9:D0:3F:CC:33:F5:EF:64:1F:FF:90:CA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A23E2685FD14D0FBB5818780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a323c9f9-d1ee-3d04-a9f5-71e0431c5967.roa Signing time: Thu 24 Apr 2025 15:40:00 +0000 ROA not before: Thu 24 Apr 2025 15:40:00 +0000 ROA not after: Wed 23 Jul 2025 15:40:00 +0000 asID: 207266 IP address blocks: 2001:500:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:3e:26:85:fd:14:d0:fb:b5:81:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 15:40:00 2025 GMT Not After : Jul 23 15:40:00 2025 GMT Subject: CN=8050da24-a969-453a-b04a-f2a728a5d01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:a6:7a:f2:fc:35:76:c7:38:3a:00:1a:9c: cc:48:02:38:1d:ed:6b:30:a9:60:51:90:25:ea:35: 53:4e:fc:94:d3:68:a1:a5:2e:59:de:5c:ef:ac:2a: 4b:c4:7d:74:f7:f7:6b:93:3d:ec:86:9d:44:d6:df: da:fa:07:da:1f:4a:da:cc:47:ea:65:85:02:c4:a0: 6f:c6:69:73:34:08:73:7a:62:05:b4:f3:60:3e:71: bf:7f:56:3f:96:d9:e3:46:24:94:0e:12:a3:b3:ec: b9:c7:ad:d5:6d:3c:11:a4:a6:1a:4f:30:05:d2:fe: d7:89:5a:19:02:dd:82:d6:2e:94:64:64:ed:b9:88: d6:85:ce:85:46:09:68:ab:94:cd:99:af:e0:38:cd: 95:b3:4c:5e:20:48:de:0c:8b:42:71:48:21:2f:ff: fd:f8:b6:72:e1:51:25:ae:5f:34:a3:ca:b9:6a:31: ed:25:b6:04:b6:a7:21:82:01:a7:48:fd:65:a3:d7: a1:04:d6:f5:7b:29:c5:c7:2f:3a:a0:15:ff:46:67: 37:c0:50:31:53:a3:00:0a:fb:b1:62:2c:b5:09:2f: c9:04:38:dc:98:50:87:d4:e9:50:e3:9f:59:35:6a: b8:70:f0:42:ad:16:14:3d:d9:76:4b:56:34:e4:ad: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:59:AA:F0:BA:96:E9:BE:A9:D0:3F:CC:33:F5:EF:64:1F:FF:90:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a323c9f9-d1ee-3d04-a9f5-71e0431c5967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:48::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:65:f5:98:7d:fa:b2:79:c3:34:8a:9c:37:0c:05:71:63:a4: 75:e7:8c:93:9d:a2:30:04:8b:8a:ff:01:2c:5a:ec:73:80:38: 51:85:f3:28:74:c0:e8:8d:37:96:fe:cd:43:88:14:85:e1:30: 88:d8:aa:55:8a:6c:99:84:68:15:2d:08:8a:bc:cc:b3:b1:86: f8:a5:75:6b:5e:61:7d:c9:c1:4c:6c:3c:d8:45:cd:8d:aa:13: ca:0f:f1:9a:04:41:68:7e:86:f8:3f:72:d8:a5:9d:fa:68:67: 54:2a:ed:ec:4a:05:8b:08:ed:c8:c6:9b:6b:5b:1e:9d:55:15: 7a:6a:45:98:81:dc:68:13:66:ee:25:22:82:e3:cf:3b:9e:08: 04:c0:1d:c4:58:d5:83:7f:32:33:a7:2a:26:d5:ff:b4:d2:9c: 26:14:ab:a6:6d:4e:ec:0d:ba:6d:af:46:49:17:99:ee:bd:a1: 2b:6d:33:8e:03:bd:1f:be:ac:ab:cb:fe:81:4e:94:7d:a7:b1: fb:45:fa:2e:b9:75:66:8f:3a:b5:96:c5:11:e2:e5:b6:cb:3d: c0:54:6b:6e:13:c6:eb:26:30:49:04:12:bf:7a:74:c4:4a:a2: 6a:67:90:53:7a:89:81:48:ed:d0:85:4d:0d:6f:91:02:7a:e9: 50:96:b6:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmiPiaF/RTQ+7WBh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE1NDAwMFoXDTI1MDcyMzE1NDAwMFowLzEtMCsGA1UEAxMk ODA1MGRhMjQtYTk2OS00NTNhLWIwNGEtZjJhNzI4YTVkMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8ymevL8NXbHODoAGpzMSAI4He1rMKlgUZAl 6jVTTvyU02ihpS5Z3lzvrCpLxH109/drkz3shp1E1t/a+gfaH0razEfqZYUCxKBv xmlzNAhzemIFtPNgPnG/f1Y/ltnjRiSUDhKjs+y5x63VbTwRpKYaTzAF0v7XiVoZ At2C1i6UZGTtuYjWhc6FRgloq5TNma/gOM2Vs0xeIEjeDItCcUghL//9+LZy4VEl rl80o8q5ajHtJbYEtqchggGnSP1lo9ehBNb1eynFxy86oBX/Rmc3wFAxU6MACvux Yiy1CS/JBDjcmFCH1OlQ459ZNWq4cPBCrRYUPdl2S1Y05K3HCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLZZqvC6lum+qdA/zDP172Qf/5DKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTMyM2M5ZjktZDFlZS0z ZDA0LWE5ZjUtNzFlMDQzMWM1OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMJl9Zh9+rJ5wzSKnDcMBXFjpHXnjJOdojAEi4r/ASxa7HOAOFGF 8yh0wOiNN5b+zUOIFIXhMIjYqlWKbJmEaBUtCIq8zLOxhvildWteYX3JwUxsPNhF zY2qE8oP8ZoEQWh+hvg/ctilnfpoZ1Qq7exKBYsI7cjGm2tbHp1VFXpqRZiB3GgT Zu4lIoLjzzueCATAHcRY1YN/MjOnKibV/7TSnCYUq6ZtTuwNum2vRkkXme69oStt M44DvR++rKvL/oFOlH2nsftF+i65dWaPOrWWxRHi5bbLPcBUa24TxusmMEkEEr96 dMRKompnkFN6iYFI7dCFTQ1vkQJ66VCWtmg= -----END CERTIFICATE-----Generated at Tue Apr 29 20:58:47 2025 by rpki-client