$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a7178c48-59b6-3a0d-897e-12d38f4c8ee2.roa File: a7178c48-59b6-3a0d-897e-12d38f4c8ee2.roa (raw, json) Hash identifier: FvP33xnekpjPD06Orc7AAreygH/ieOHiXLhvyEqa1W8= Subject key identifier: C7:2B:A7:85:E1:1B:00:D7:B8:47:AD:F9:DC:C3:2F:46:95:A6:0F:CB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A42EB200C3B8407E8F7CC940 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a7178c48-59b6-3a0d-897e-12d38f4c8ee2.roa Signing time: Fri 25 Apr 2025 08:20:29 +0000 ROA not before: Fri 25 Apr 2025 08:20:29 +0000 ROA not after: Thu 24 Jul 2025 08:20:29 +0000 asID: 12041 IP address blocks: 2001:500:a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:2e:b2:00:c3:b8:40:7e:8f:7c:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:20:29 2025 GMT Not After : Jul 24 08:20:29 2025 GMT Subject: CN=b6963778-0ee5-4e8f-8ca5-69be8f26971f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:84:00:a1:f8:76:00:7b:4c:e6:8a:86:9a: 53:7d:7a:4e:ae:89:36:5a:88:b0:4c:fe:8d:fe:e3: 0c:53:31:b4:8c:cb:a7:35:e3:bf:f7:9a:f7:aa:74: 57:01:88:23:0c:43:f0:da:34:03:9d:84:94:08:63: db:04:b4:13:04:3c:e7:4c:12:15:c6:dd:7f:0a:a0: 18:d2:47:45:7b:91:3a:25:d4:e8:f1:db:29:a7:d8: e2:ff:d4:3d:28:eb:a7:49:a5:ca:a0:84:b5:50:9a: 32:59:22:b6:16:6d:ab:03:59:fb:9a:33:f3:0c:a2: e6:fb:58:fe:24:6d:f9:20:4e:b4:4f:54:09:48:44: a2:7f:8f:2f:f8:3c:33:05:18:16:01:49:2b:61:23: 9d:f9:1e:f9:08:db:06:eb:d6:c6:96:34:c5:79:30: 17:e2:30:03:c3:84:86:e1:d5:0c:1b:0c:fa:ca:99: 29:74:fc:56:8b:b4:a5:93:5b:87:7d:d3:15:cf:2a: c5:58:1b:57:32:bb:4a:e5:c2:4b:13:a0:cb:e2:44: e0:bc:da:b1:9f:8e:5d:e3:68:3b:ed:82:df:38:ff: 82:46:d6:c5:35:52:76:00:ae:98:6a:38:68:95:22: d7:12:47:40:68:11:0d:78:26:d3:62:77:23:a0:ee: bc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2B:A7:85:E1:1B:00:D7:B8:47:AD:F9:DC:C3:2F:46:95:A6:0F:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a7178c48-59b6-3a0d-897e-12d38f4c8ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:97:f8:4e:27:79:ee:67:e0:cf:5f:1e:48:60:fc:45:0b:f8: 45:56:33:c2:3f:b6:1f:b6:35:24:65:fc:04:91:6a:12:32:a3: 76:ed:20:fd:b5:a9:d2:0f:95:bd:06:84:33:f3:38:4e:32:53: 2e:61:9d:64:f9:5c:bf:6e:6d:06:24:da:8f:3c:78:61:65:c8: 2c:c1:09:8e:07:dc:32:e8:04:05:9d:c8:2f:ff:cd:03:11:9f: c6:f9:d6:74:23:9f:db:69:c0:0b:db:0d:19:90:45:62:04:02: ce:38:1f:86:f4:20:58:c4:fa:4e:76:8d:ab:45:d5:91:dc:01: 54:08:12:f9:5d:fe:10:17:68:2a:bf:9f:3a:eb:55:77:ab:ef: 99:67:59:0c:5a:ef:3b:76:a7:47:62:d0:ca:b0:39:3c:a3:df: 4b:81:c3:c3:69:8d:33:37:9c:9a:18:94:2b:fa:68:5b:ab:b5: 2e:38:e8:67:21:5b:c5:56:f5:3c:d8:a7:72:3e:1d:7c:3a:c6: 36:79:99:47:d4:b4:07:61:59:c3:b3:e1:93:82:2f:13:24:33: f4:d2:89:5a:8d:59:8e:5f:4f:17:d4:40:97:83:f3:59:d6:2d: 26:71:10:cd:b7:d1:c9:17:8d:a9:bc:98:10:cc:e5:c9:7f:68: 5b:a2:1c:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkLrIAw7hAfo98yUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MjAyOVoXDTI1MDcyNDA4MjAyOVowLzEtMCsGA1UEAxMk YjY5NjM3NzgtMGVlNS00ZThmLThjYTUtNjliZThmMjY5NzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz+EAKH4dgB7TOaKhppTfXpOrok2WoiwTP6N /uMMUzG0jMunNeO/95r3qnRXAYgjDEPw2jQDnYSUCGPbBLQTBDznTBIVxt1/CqAY 0kdFe5E6JdTo8dspp9ji/9Q9KOunSaXKoIS1UJoyWSK2Fm2rA1n7mjPzDKLm+1j+ JG35IE60T1QJSESif48v+DwzBRgWAUkrYSOd+R75CNsG69bGljTFeTAX4jADw4SG 4dUMGwz6ypkpdPxWi7Slk1uHfdMVzyrFWBtXMrtK5cJLE6DL4kTgvNqxn45d42g7 7YLfOP+CRtbFNVJ2AK6YajholSLXEkdAaBENeCbTYncjoO68SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMcrp4XhGwDXuEet+dzDL0aVpg/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTcxNzhjNDgtNTliNi0z YTBkLTg5N2UtMTJkMzhmNGM4ZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD+X+E4nee5n4M9fHkhg/EUL+EVWM8I/th+2NSRl/ASRahIyo3bt IP21qdIPlb0GhDPzOE4yUy5hnWT5XL9ubQYk2o88eGFlyCzBCY4H3DLoBAWdyC// zQMRn8b51nQjn9tpwAvbDRmQRWIEAs44H4b0IFjE+k52jatF1ZHcAVQIEvld/hAX aCq/nzrrVXer75lnWQxa7zt2p0di0MqwOTyj30uBw8NpjTM3nJoYlCv6aFurtS44 6GchW8VW9TzYp3I+HXw6xjZ5mUfUtAdhWcOz4ZOCLxMkM/TSiVqNWY5fTxfUQJeD 81nWLSZxEM230ckXjam8mBDM5cl/aFuiHH0= -----END CERTIFICATE-----Generated at Sun Jun 15 12:02:00 2025 by rpki-client