$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a715ae04-027d-33a5-a29e-1a770fb32675.roa File: a715ae04-027d-33a5-a29e-1a770fb32675.roa (raw, json) Hash identifier: qtCGQMRHE5Sdy1eV45FkmOliZz0v6i9axOpiRo7boAM= Subject key identifier: F7:B6:0E:0B:CE:F0:D1:20:1D:74:A7:FC:B3:40:3F:B1:31:81:10:5D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A23E0F09069A9429BFCC1800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a715ae04-027d-33a5-a29e-1a770fb32675.roa Signing time: Thu 24 Apr 2025 15:39:49 +0000 ROA not before: Thu 24 Apr 2025 15:39:49 +0000 ROA not after: Wed 23 Jul 2025 15:39:49 +0000 asID: 207266 IP address blocks: 2001:500:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:3e:0f:09:06:9a:94:29:bf:cc:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 15:39:49 2025 GMT Not After : Jul 23 15:39:49 2025 GMT Subject: CN=9ac50208-4f06-4e76-a262-bc34737ae93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:93:51:c8:b2:68:24:1b:e3:9e:3a:2f:53: c2:52:41:78:31:1c:15:7e:9b:cf:9f:22:28:e2:77: ed:fc:16:f4:9a:4a:d3:bb:85:41:56:a4:c5:8e:b9: df:70:3d:30:23:54:e6:ac:e9:b2:76:32:f1:2b:ce: b0:1e:4f:c9:78:3b:0d:79:ff:45:9f:c3:cf:0c:97: 4f:d8:2e:e5:1b:0b:c0:fc:9d:ab:29:10:9e:51:31: c9:7c:81:7f:c3:8c:90:b1:de:fb:e9:98:1d:7e:7c: e1:89:6e:a2:01:71:7c:ba:87:6d:f7:72:dd:a8:fa: 49:fa:c6:b3:09:f8:61:79:36:49:eb:4c:78:09:f7: b3:16:5e:96:1a:db:34:6e:7d:de:0d:9e:7d:75:32: 06:bd:a8:78:12:07:1c:16:e6:a4:05:0e:27:a0:59: 7e:4c:6b:f2:07:ae:eb:05:92:0c:9e:1c:bc:63:bf: 05:c3:6f:64:40:87:e8:89:78:52:47:bb:e1:ea:ea: 94:53:03:22:44:fd:43:f2:d0:ca:e8:a5:f8:e4:b8: 35:32:4d:35:a6:0f:91:b1:c4:94:3a:ba:4c:62:4c: 9b:12:cf:a5:a6:f3:17:4b:a3:cd:91:71:b4:6d:31: f9:a0:44:d4:70:d0:04:a3:61:21:de:05:ea:dc:17: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B6:0E:0B:CE:F0:D1:20:1D:74:A7:FC:B3:40:3F:B1:31:81:10:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a715ae04-027d-33a5-a29e-1a770fb32675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:44::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c7:0a:88:b6:96:e9:7c:ee:c4:34:3f:a8:3d:ab:3d:ac:8f: 06:80:59:8d:bb:ec:27:97:d6:15:2e:b6:c3:20:46:25:e2:c2: c3:30:f1:e4:d9:77:ea:64:95:c0:25:da:b6:50:4e:fc:30:82: 31:43:81:c3:ab:c2:eb:7d:d5:6b:68:5b:5c:1e:ab:3c:8c:3e: f2:4c:2e:90:18:59:f1:06:5a:ae:ac:bf:1c:16:d3:ff:5c:6d: ff:ef:ac:85:b7:e3:0f:62:8c:99:22:4c:24:c9:88:25:a6:b8: 45:50:50:54:2a:b7:95:36:b7:1b:6d:30:bc:ed:78:14:65:62: 36:ea:ec:a7:5f:05:83:e4:53:42:e3:7e:ce:58:f3:43:e6:f2: 9a:8f:69:30:fb:c0:09:02:08:41:01:93:39:bf:8d:b4:6d:a1: d3:8d:6c:ba:e3:f5:da:90:ba:72:05:36:82:06:4c:a8:4d:ba: 8e:56:1c:9b:e1:1a:e4:51:39:18:52:5b:b0:71:dc:20:03:35: 44:e1:14:c6:e3:9a:2a:07:e0:0a:df:3e:c8:7a:ed:c8:be:38: 08:03:eb:eb:9c:e1:f4:45:8c:f8:a8:69:45:11:b3:ba:3e:c3: 2a:35:6f:5b:13:6b:01:f8:91:06:12:1c:8e:72:8b:18:c0:59: 9e:55:ad:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmiPg8JBpqUKb/MGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE1Mzk0OVoXDTI1MDcyMzE1Mzk0OVowLzEtMCsGA1UEAxMk OWFjNTAyMDgtNGYwNi00ZTc2LWEyNjItYmMzNDczN2FlOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovKTUciyaCQb4546L1PCUkF4MRwVfpvPnyIo 4nft/Bb0mkrTu4VBVqTFjrnfcD0wI1TmrOmydjLxK86wHk/JeDsNef9Fn8PPDJdP 2C7lGwvA/J2rKRCeUTHJfIF/w4yQsd776ZgdfnzhiW6iAXF8uodt93LdqPpJ+saz CfhheTZJ60x4CfezFl6WGts0bn3eDZ59dTIGvah4EgccFuakBQ4noFl+TGvyB67r BZIMnhy8Y78Fw29kQIfoiXhSR7vh6uqUUwMiRP1D8tDK6KX45Lg1Mk01pg+RscSU OrpMYkybEs+lpvMXS6PNkXG0bTH5oETUcNAEo2Eh3gXq3BdEOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPe2DgvO8NEgHXSn/LNAP7ExgRBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTcxNWFlMDQtMDI3ZC0z M2E1LWEyOWUtMWE3NzBmYjMyNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFDHCoi2lul87sQ0P6g9qz2sjwaAWY277CeX1hUutsMgRiXiwsMw 8eTZd+pklcAl2rZQTvwwgjFDgcOrwut91WtoW1weqzyMPvJMLpAYWfEGWq6svxwW 0/9cbf/vrIW34w9ijJkiTCTJiCWmuEVQUFQqt5U2txttMLzteBRlYjbq7KdfBYPk U0Ljfs5Y80Pm8pqPaTD7wAkCCEEBkzm/jbRtodONbLrj9dqQunIFNoIGTKhNuo5W HJvhGuRRORhSW7Bx3CADNUThFMbjmioH4ArfPsh67ci+OAgD6+uc4fRFjPioaUUR s7o+wyo1b1sTawH4kQYSHI5yixjAWZ5VrYk= -----END CERTIFICATE-----Generated at Wed Apr 30 01:33:45 2025 by rpki-client