$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa File: baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa (raw, json) Hash identifier: Yz8vW0j1kSMpX47rP0vlBPJi+EsXwfxmZhazrHWpZDE= Subject key identifier: 45:CA:82:B9:11:DD:2B:F8:B4:60:FB:26:07:3E:40:BB:56:98:95:5F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A434D322BBAC5B239564C5A8 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa Signing time: Fri 25 Apr 2025 08:32:50 +0000 ROA not before: Fri 25 Apr 2025 08:32:50 +0000 ROA not after: Thu 24 Jul 2025 08:32:50 +0000 asID: 12041 IP address blocks: 2001:500:ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:34:d3:22:bb:ac:5b:23:95:64:c5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:32:50 2025 GMT Not After : Jul 24 08:32:50 2025 GMT Subject: CN=6466fe75-8188-409d-86eb-475a1ed422c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6e:73:ad:62:5e:e9:9d:af:88:e7:5e:c0:73: 68:aa:18:69:bd:22:7f:c0:71:e5:f5:69:96:9c:9c: a1:56:02:6f:a6:66:60:c4:a6:b1:47:0b:a8:e5:fa: 2b:97:06:2d:22:85:90:ca:5b:84:df:97:c7:0f:1a: 2e:c5:fe:2c:a3:e1:ad:97:0b:e1:99:ab:c8:47:99: 26:8d:98:b5:d4:6d:fe:9a:64:45:48:b5:a3:81:25: f0:b7:cd:46:55:a4:7e:7d:2f:3f:ed:f1:ab:81:e4: d3:7f:3d:97:3d:48:72:14:12:0b:26:26:dd:7f:a2: 6e:83:56:65:20:42:03:5d:27:b3:a1:12:93:48:b3: ba:22:eb:11:d5:66:a3:95:b8:a5:bb:ad:1b:e2:1f: 7b:18:a5:37:9a:3d:b6:4e:5d:ee:d7:18:60:3e:09: c8:5e:79:cd:52:ae:dd:f2:cd:21:80:8d:2b:f7:cb: 98:90:1c:20:67:91:02:03:f4:b1:99:2c:1c:f2:29: fe:98:eb:9a:fa:9f:e1:87:e1:71:d8:97:cc:f4:c9: 31:85:f4:a4:fe:f0:28:33:b3:31:da:91:4f:e5:99: 2c:b3:fb:2a:90:be:ad:d4:9b:00:b0:59:80:6b:6d: 64:74:49:33:40:97:c4:5c:49:21:9f:c5:64:2c:17: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CA:82:B9:11:DD:2B:F8:B4:60:FB:26:07:3E:40:BB:56:98:95:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/baa5824c-a27d-3ebb-86c8-a450dcab9e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ce::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:bd:2f:b5:45:4f:68:4f:e8:03:2f:b1:c6:b3:1d:85:9c:cc: 14:96:02:ab:47:52:45:56:32:2f:19:87:91:61:11:fd:cd:2d: 9a:02:fc:12:a4:81:07:e3:25:97:64:78:43:cc:ed:0d:8f:50: 55:02:3a:de:e1:9c:dd:17:61:39:c1:f1:4d:98:40:05:5b:8d: 81:fd:02:de:0b:86:27:2f:43:e9:e7:1f:fd:ba:f6:3c:36:2b: 10:d8:04:95:09:c6:65:ae:0b:a0:85:b4:a2:db:87:9a:48:ef: 4e:99:93:81:41:ab:15:c2:73:8d:11:61:6c:cf:ed:89:39:bf: 14:5b:4b:8e:8e:db:16:39:2c:61:4f:6b:25:f2:ba:01:6c:90: 1d:18:b9:82:b5:66:f5:2e:03:6b:78:ec:67:7f:3d:7b:69:11: fa:cb:0e:cf:02:75:ad:4f:42:f1:c9:2c:78:43:07:53:02:7e: c8:a9:2a:30:07:5c:3e:b3:e0:99:87:6f:9f:f3:c3:ca:6e:6a: 5f:4e:06:5f:b1:6f:62:19:b6:8b:2c:9c:b3:93:b9:8c:81:3b: 50:c2:fc:ef:c7:7d:b5:9c:22:85:22:2f:86:5c:dc:c1:ea:5b: be:fb:db:07:aa:43:3d:c9:3f:49:1d:39:52:44:94:0f:ba:d6: ef:60:10:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNNMiu6xbI5VkxagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzI1MFoXDTI1MDcyNDA4MzI1MFowLzEtMCsGA1UEAxMk NjQ2NmZlNzUtODE4OC00MDlkLTg2ZWItNDc1YTFlZDQyMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW5zrWJe6Z2viOdewHNoqhhpvSJ/wHHl9WmW nJyhVgJvpmZgxKaxRwuo5forlwYtIoWQyluE35fHDxouxf4so+GtlwvhmavIR5km jZi11G3+mmRFSLWjgSXwt81GVaR+fS8/7fGrgeTTfz2XPUhyFBILJibdf6Jug1Zl IEIDXSezoRKTSLO6IusR1Wajlbilu60b4h97GKU3mj22Tl3u1xhgPgnIXnnNUq7d 8s0hgI0r98uYkBwgZ5ECA/SxmSwc8in+mOua+p/hh+Fx2JfM9MkxhfSk/vAoM7Mx 2pFP5Zkss/sqkL6t1JsAsFmAa21kdEkzQJfEXEkhn8VkLBcK1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEXKgrkR3Sv4tGD7Jgc+QLtWmJVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmFhNTgyNGMtYTI3ZC0z ZWJiLTg2YzgtYTQ1MGRjYWI5ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD+9L7VFT2hP6AMvscazHYWczBSWAqtHUkVWMi8Zh5FhEf3NLZoC /BKkgQfjJZdkeEPM7Q2PUFUCOt7hnN0XYTnB8U2YQAVbjYH9At4LhicvQ+nnH/26 9jw2KxDYBJUJxmWuC6CFtKLbh5pI706Zk4FBqxXCc40RYWzP7Yk5vxRbS46O2xY5 LGFPayXyugFskB0YuYK1ZvUuA2t47Gd/PXtpEfrLDs8Cda1PQvHJLHhDB1MCfsip KjAHXD6z4JmHb5/zw8pual9OBl+xb2IZtossnLOTuYyBO1DC/O/HfbWcIoUiL4Zc 3MHqW7772weqQz3JP0kdOVJElA+61u9gEPc= -----END CERTIFICATE-----Generated at Tue Apr 29 09:55:57 2025 by rpki-client