$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/abc3219c-16f6-331f-98b6-0e29c0c84ddf.roa File: abc3219c-16f6-331f-98b6-0e29c0c84ddf.roa (raw, json) Hash identifier: qRYDYb86vuPccvEqCV13TTsfo160F6YVDYwuQrONboY= Subject key identifier: D2:0E:73:02:A7:EE:EA:4F:01:36:6A:2F:02:C4:78:B9:6E:E9:39:5B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4366B38210FDA5C0567E500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/abc3219c-16f6-331f-98b6-0e29c0c84ddf.roa Signing time: Fri 25 Apr 2025 08:36:02 +0000 ROA not before: Fri 25 Apr 2025 08:36:02 +0000 ROA not after: Thu 24 Jul 2025 08:36:02 +0000 asID: 12041 IP address blocks: 2001:500:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:6b:38:21:0f:da:5c:05:67:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:36:02 2025 GMT Not After : Jul 24 08:36:02 2025 GMT Subject: CN=adab258b-8bc1-40b8-a868-43c2520b05a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:a6:93:c3:aa:97:f8:af:55:57:83:52:ac: 7a:61:75:9a:a0:22:26:cd:34:03:3a:6e:c3:1e:3a: 86:26:bc:5c:e5:a7:3b:88:9a:81:6b:d7:f2:cd:bc: 8b:22:0b:82:6d:b0:31:41:91:7d:38:86:be:78:88: c3:48:34:cb:78:7f:d9:25:af:38:ff:2c:ba:47:c4: 5f:65:7d:ba:94:ed:e6:cd:fc:05:4a:59:7a:d7:71: fd:44:b0:33:04:08:91:cd:0d:1d:1a:49:d1:07:fc: f1:61:14:46:ed:19:3a:c6:c8:15:b5:0c:e2:5f:ea: 1f:e2:9b:0a:83:3e:d9:93:1a:87:c1:8e:1f:d1:aa: 56:b7:b2:ef:b3:05:95:b1:d5:b7:a6:6f:e2:c5:79: 99:80:80:4a:c4:75:43:99:df:76:e6:a6:31:3c:e3: c9:a0:64:14:5c:bc:df:c5:fe:01:de:f0:7a:7c:ec: 63:b8:32:3e:13:5b:be:ed:e7:c0:72:5b:ac:c7:28: 8f:c7:05:92:4e:15:54:79:70:43:da:e1:6e:50:bb: 07:21:cc:c3:4a:c8:22:31:01:33:a5:37:f4:fd:a6: a5:d0:86:c0:3c:97:6a:da:dd:99:d6:11:5f:20:c6: 73:3e:99:42:e4:c7:7a:97:73:40:45:f9:07:b8:4a: b5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0E:73:02:A7:EE:EA:4F:01:36:6A:2F:02:C4:78:B9:6E:E9:39:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/abc3219c-16f6-331f-98b6-0e29c0c84ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9c:bc:67:e6:2c:1e:f3:9e:c6:97:46:17:c2:a3:dd:05:7d: 95:32:8c:67:91:f1:63:2b:d4:6d:62:63:61:cf:60:12:38:48: 51:d5:f9:d0:1e:76:2c:60:60:39:f6:2f:12:8e:37:2f:48:5d: a8:cc:ed:fa:12:ff:e5:47:a7:da:c0:3b:2b:a5:90:7d:5e:64: 16:d6:d3:e8:c5:89:0b:32:6d:ff:99:a2:87:1f:df:49:84:8e: d6:e5:fb:9c:eb:0e:59:7e:6d:c0:cc:0b:d8:e6:be:1e:81:a7: 4e:c5:31:82:3d:19:d7:8f:a7:3f:2a:5e:78:9c:50:1f:d7:3e: c1:19:0b:aa:84:72:c7:76:a4:24:d6:63:d3:5e:61:2b:a2:79: 89:13:c5:87:06:88:d3:b1:41:86:9e:c7:37:5c:a9:1b:f3:7e: 90:70:2e:02:ba:87:b6:96:1b:51:d9:7d:cc:38:a7:38:f1:f8: 96:52:ea:8f:62:f6:4e:f9:42:9c:6c:22:9f:4f:d3:eb:fe:2a: d6:1d:90:4d:cc:86:cb:23:1b:29:50:bb:8c:26:69:6a:fb:11: 80:52:e1:94:e6:b4:fd:96:25:0e:8d:47:07:aa:8f:c5:5b:cb: 91:a5:df:2b:87:05:56:f6:61:18:d3:a6:92:35:73:40:00:a6: eb:9f:0d:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNms4IQ/aXAVn5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzYwMloXDTI1MDcyNDA4MzYwMlowLzEtMCsGA1UEAxMk YWRhYjI1OGItOGJjMS00MGI4LWE4NjgtNDNjMjUyMGIwNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fumk8Oql/ivVVeDUqx6YXWaoCImzTQDOm7D HjqGJrxc5ac7iJqBa9fyzbyLIguCbbAxQZF9OIa+eIjDSDTLeH/ZJa84/yy6R8Rf ZX26lO3mzfwFSll613H9RLAzBAiRzQ0dGknRB/zxYRRG7Rk6xsgVtQziX+of4psK gz7ZkxqHwY4f0apWt7LvswWVsdW3pm/ixXmZgIBKxHVDmd925qYxPOPJoGQUXLzf xf4B3vB6fOxjuDI+E1u+7efAclusxyiPxwWSThVUeXBD2uFuULsHIczDSsgiMQEz pTf0/aal0IbAPJdq2t2Z1hFfIMZzPplC5Md6l3NARfkHuEq1xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNIOcwKn7upPATZqLwLEeLlu6TlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWJjMzIxOWMtMTZmNi0z MzFmLTk4YjYtMGUyOWMwYzg0ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJqcvGfmLB7znsaXRhfCo90FfZUyjGeR8WMr1G1iY2HPYBI4SFHV +dAedixgYDn2LxKONy9IXajM7foS/+VHp9rAOyulkH1eZBbW0+jFiQsybf+Zoocf 30mEjtbl+5zrDll+bcDMC9jmvh6Bp07FMYI9GdePpz8qXnicUB/XPsEZC6qEcsd2 pCTWY9NeYSuieYkTxYcGiNOxQYaexzdcqRvzfpBwLgK6h7aWG1HZfcw4pzjx+JZS 6o9i9k75QpxsIp9P0+v+KtYdkE3MhssjGylQu4wmaWr7EYBS4ZTmtP2WJQ6NRweq j8Vby5Gl3yuHBVb2YRjTppI1c0AApuufDak= -----END CERTIFICATE-----Generated at Wed Apr 30 08:18:46 2025 by rpki-client