$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bdbfb896-a10f-3b73-8710-07fa0dd42fb2.roa File: bdbfb896-a10f-3b73-8710-07fa0dd42fb2.roa (raw, json) Hash identifier: jimk8d+vLU5ShKCa5sU4s/M3mBSIpZL3JQsS1kt7PGA= Subject key identifier: E9:7F:6F:C7:2C:C5:9B:C9:0E:40:0E:A4:31:35:78:DC:95:6C:3C:02 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A23E1AED7CEA09430FCA5200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bdbfb896-a10f-3b73-8710-07fa0dd42fb2.roa Signing time: Thu 24 Apr 2025 15:39:55 +0000 ROA not before: Thu 24 Apr 2025 15:39:55 +0000 ROA not after: Wed 23 Jul 2025 15:39:55 +0000 asID: 207266 IP address blocks: 2001:500:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:3e:1a:ed:7c:ea:09:43:0f:ca:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 15:39:55 2025 GMT Not After : Jul 23 15:39:55 2025 GMT Subject: CN=36693c63-b25c-41bd-9a24-86c1f44b7bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:11:fd:3e:eb:d5:ce:62:90:0b:7f:cf:42: 0d:0c:db:85:c1:c8:78:94:29:29:28:6d:36:e3:48: 00:8f:a0:a3:67:68:e9:be:36:82:c7:c4:a3:b4:ad: 5d:51:ef:a4:c1:79:de:ef:b1:ed:0a:08:30:ab:43: 43:42:ae:79:5b:3e:88:7a:f6:12:79:60:f4:e7:e8: 1d:82:b1:0f:7f:2c:63:29:28:4a:6f:c9:bb:61:07: c0:fb:0b:45:28:23:ec:1a:1c:6c:4f:5c:2b:00:21: 4f:f6:79:02:58:89:27:de:b0:3a:0c:a8:d6:46:9c: 72:b7:1f:ff:e8:8e:a9:ee:2f:fe:b4:c4:07:15:68: 98:c8:ce:eb:07:b9:d6:fb:b7:40:8e:4a:43:83:b7: dd:5d:34:63:e8:d1:df:10:17:e4:c0:67:6f:ab:fc: db:e2:0a:a7:d9:74:69:6e:5a:0f:fa:14:a8:94:f8: 27:13:b3:9a:6e:ff:8f:6b:96:bc:18:95:6a:78:b3: 40:41:a8:95:5f:a7:1d:43:7e:26:91:ec:40:53:b8: ec:2c:66:59:14:a7:c9:f3:43:d1:3d:e9:33:b9:8d: 6d:50:74:df:1f:1d:31:c2:bd:4c:c9:7e:55:dc:f3: 3c:12:5d:e1:58:4b:7d:b5:32:30:02:15:1b:bd:42: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:6F:C7:2C:C5:9B:C9:0E:40:0E:A4:31:35:78:DC:95:6C:3C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bdbfb896-a10f-3b73-8710-07fa0dd42fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:46::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:1c:8f:08:f3:3f:a6:08:6a:9e:47:b6:95:3c:7c:9c:41:9d: a5:40:cb:d5:d3:b0:53:7f:95:c5:00:a2:50:84:8c:38:e0:90: d5:19:ed:c1:88:30:1e:f5:00:5e:6b:06:94:d4:aa:ab:8f:71: fd:36:22:f2:de:23:6d:8b:8a:ac:94:42:cb:09:56:38:af:b3: e3:4d:3d:f2:df:ac:a8:26:bd:e3:e9:9f:38:70:1b:40:a9:ed: 79:08:0c:dc:4e:ce:a2:3e:d2:f5:c4:6a:8e:2b:19:8c:ff:52: d6:ee:ca:9a:05:6b:b8:21:c7:51:b8:0d:c1:a8:88:74:bd:22: 76:b8:69:2d:4c:f9:4d:6c:aa:65:78:28:bc:84:43:fb:7c:54: 9f:67:e2:5f:db:8e:70:b9:e0:d3:15:bd:40:5e:a4:75:c7:41: 54:3a:cb:02:00:3a:49:ef:02:dc:d2:f5:8d:bc:34:c5:e1:6c: 2b:ce:93:cf:6b:25:c5:d1:e5:95:11:83:a2:63:d3:7b:5a:4e: f1:73:8f:bd:cc:02:3c:6f:72:15:53:e6:54:06:ac:aa:77:4d: 54:de:34:cf:09:3d:44:9e:d2:4c:5b:dd:17:d0:26:d8:ed:48: 54:c0:df:b9:47:72:ab:fb:43:4e:b0:7a:a2:f5:e4:de:b2:20: 9d:4a:f3:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmiPhrtfOoJQw/KUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE1Mzk1NVoXDTI1MDcyMzE1Mzk1NVowLzEtMCsGA1UEAxMk MzY2OTNjNjMtYjI1Yy00MWJkLTlhMjQtODZjMWY0NGI3YmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRkR/T7r1c5ikAt/z0INDNuFwch4lCkpKG02 40gAj6CjZ2jpvjaCx8SjtK1dUe+kwXne77HtCggwq0NDQq55Wz6IevYSeWD05+gd grEPfyxjKShKb8m7YQfA+wtFKCPsGhxsT1wrACFP9nkCWIkn3rA6DKjWRpxytx// 6I6p7i/+tMQHFWiYyM7rB7nW+7dAjkpDg7fdXTRj6NHfEBfkwGdvq/zb4gqn2XRp bloP+hSolPgnE7Oabv+Pa5a8GJVqeLNAQaiVX6cdQ34mkexAU7jsLGZZFKfJ80PR PekzuY1tUHTfHx0xwr1MyX5V3PM8El3hWEt9tTIwAhUbvUKoFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOl/b8csxZvJDkAOpDE1eNyVbDwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmRiZmI4OTYtYTEwZi0z YjczLTg3MTAtMDdmYTBkZDQyZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMIcjwjzP6YIap5HtpU8fJxBnaVAy9XTsFN/lcUAolCEjDjgkNUZ 7cGIMB71AF5rBpTUqquPcf02IvLeI22LiqyUQssJVjivs+NNPfLfrKgmvePpnzhw G0Cp7XkIDNxOzqI+0vXEao4rGYz/UtbuypoFa7ghx1G4DcGoiHS9Ina4aS1M+U1s qmV4KLyEQ/t8VJ9n4l/bjnC54NMVvUBepHXHQVQ6ywIAOknvAtzS9Y28NMXhbCvO k89rJcXR5ZURg6Jj03taTvFzj73MAjxvchVT5lQGrKp3TVTeNM8JPUSe0kxb3RfQ JtjtSFTA37lHcqv7Q06weqL15N6yIJ1K85c= -----END CERTIFICATE-----Generated at Wed Apr 30 01:36:15 2025 by rpki-client