$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5dbfe6e-662a-3972-a1f5-95f51fd7f8d3.roa File: c5dbfe6e-662a-3972-a1f5-95f51fd7f8d3.roa (raw, json) Hash identifier: atGNWXhCVTNQ5HrrEOM9K2bLTYHWHdTDyZ6xV9Y4Yyc= Subject key identifier: 1A:B3:1E:E1:73:AF:91:E2:76:AA:27:A4:7F:55:DC:23:47:0E:E2:51 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4356FBA929909796EA3DA60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5dbfe6e-662a-3972-a1f5-95f51fd7f8d3.roa Signing time: Fri 25 Apr 2025 08:34:04 +0000 ROA not before: Fri 25 Apr 2025 08:34:04 +0000 ROA not after: Thu 24 Jul 2025 08:34:04 +0000 asID: 12041 IP address blocks: 2001:500:e9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:6f:ba:92:99:09:79:6e:a3:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:34:04 2025 GMT Not After : Jul 24 08:34:04 2025 GMT Subject: CN=c086dae5-ac98-4cb3-ab7c-f02a3f5a5ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:bf:a0:84:b5:29:b5:4e:fd:12:6d:63:41: 4c:ee:64:c4:ad:99:f3:01:a3:30:74:67:0f:ff:0f: a2:e4:8f:6c:98:7a:6e:a9:fa:36:89:0d:38:cf:d4: ea:a6:b7:60:37:91:9a:90:fb:b9:c0:f2:d3:28:5a: 90:d4:39:1c:ef:44:2a:6a:bf:12:9e:e6:2a:3e:0d: a7:e5:f1:a4:d0:2d:db:ed:25:31:b5:52:01:b8:33: 9f:05:67:50:f1:2b:c3:69:fd:aa:23:24:90:42:b1: 99:36:b9:f6:fd:36:05:08:97:07:24:13:a3:2d:ba: 13:35:00:bc:cc:e6:66:f7:38:84:94:7d:48:e4:ff: 9a:44:a2:39:15:50:32:1f:e0:f9:b8:42:b7:ee:f4: 99:b6:67:da:00:6f:b4:dd:f4:93:7f:18:3f:17:27: 0d:11:3e:aa:26:8a:21:77:fd:12:34:1f:b2:ba:03: 6a:3c:6f:33:45:da:b1:78:52:af:de:9d:52:45:40: 5c:72:44:d9:15:9c:f3:05:7e:e3:20:4e:30:a1:eb: 97:ee:15:24:8e:de:95:e3:03:e7:ad:59:b6:f7:f8: 86:83:32:f4:4a:dc:93:43:d5:23:16:ba:4f:88:4f: 30:35:6b:09:5b:07:9d:6b:a6:91:cb:f2:33:b4:0f: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B3:1E:E1:73:AF:91:E2:76:AA:27:A4:7F:55:DC:23:47:0E:E2:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5dbfe6e-662a-3972-a1f5-95f51fd7f8d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ab:d8:b8:99:aa:f8:9e:25:4c:de:12:32:d8:07:78:02:40: ec:f8:a8:90:6d:b2:35:4b:1c:2f:91:43:b0:c5:4b:e1:6a:0d: c3:b1:ba:3e:17:91:0f:40:e4:cf:a1:ae:19:ca:59:47:4a:25: 16:7c:8a:d4:66:7e:fa:9d:4c:52:85:9a:9c:2b:19:ba:28:fe: b8:9a:cf:1a:49:1c:1a:f6:a7:52:13:76:63:c3:08:96:ec:0b: a8:3c:07:5b:6c:a4:25:5d:e9:ea:7b:ee:ca:59:46:7c:d9:51: de:21:e0:6a:b1:17:59:0b:d0:c0:cc:66:07:91:8e:1d:ab:2e: ec:bb:5b:24:13:28:33:3e:95:26:0e:a1:d6:d4:ad:73:74:7e: 22:92:3c:27:a3:b2:f9:fd:f4:c7:3a:0a:36:80:0a:7f:31:9c: d0:4f:a4:0f:65:45:ce:aa:cd:e6:d0:d8:94:bd:ac:d9:fb:8f: be:25:34:c1:5e:a4:e9:95:4b:dd:5d:cb:34:9c:3a:55:44:c8: 04:c9:12:28:a9:08:04:53:eb:11:8f:0d:ca:4d:e5:8a:04:72: 12:a8:bd:b6:06:d2:b6:0f:e1:a0:bb:4d:c0:28:d9:b4:25:95: 07:5f:80:ef:a3:95:f3:c9:fc:2d:2a:c9:31:e9:e8:89:08:08: c0:1a:29:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNW+6kpkJeW6j2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzQwNFoXDTI1MDcyNDA4MzQwNFowLzEtMCsGA1UEAxMk YzA4NmRhZTUtYWM5OC00Y2IzLWFiN2MtZjAyYTNmNWE1Y2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0y/oIS1KbVO/RJtY0FM7mTErZnzAaMwdGcP /w+i5I9smHpuqfo2iQ04z9TqprdgN5GakPu5wPLTKFqQ1Dkc70Qqar8SnuYqPg2n 5fGk0C3b7SUxtVIBuDOfBWdQ8SvDaf2qIySQQrGZNrn2/TYFCJcHJBOjLboTNQC8 zOZm9ziElH1I5P+aRKI5FVAyH+D5uEK37vSZtmfaAG+03fSTfxg/FycNET6qJooh d/0SNB+yugNqPG8zRdqxeFKv3p1SRUBcckTZFZzzBX7jIE4woeuX7hUkjt6V4wPn rVm29/iGgzL0StyTQ9UjFrpPiE8wNWsJWweda6aRy/IztA9TdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBqzHuFzr5HidqonpH9V3CNHDuJRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzVkYmZlNmUtNjYyYS0z OTcyLWExZjUtOTVmNTFmZDdmOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIyr2LiZqvieJUzeEjLYB3gCQOz4qJBtsjVLHC+RQ7DFS+FqDcOx uj4XkQ9A5M+hrhnKWUdKJRZ8itRmfvqdTFKFmpwrGboo/riazxpJHBr2p1ITdmPD CJbsC6g8B1tspCVd6ep77spZRnzZUd4h4GqxF1kL0MDMZgeRjh2rLuy7WyQTKDM+ lSYOodbUrXN0fiKSPCejsvn99Mc6CjaACn8xnNBPpA9lRc6qzebQ2JS9rNn7j74l NMFepOmVS91dyzScOlVEyATJEiipCART6xGPDcpN5YoEchKovbYG0rYP4aC7TcAo 2bQllQdfgO+jlfPJ/C0qyTHp6IkICMAaKQg= -----END CERTIFICATE-----Generated at Tue Apr 29 18:34:48 2025 by rpki-client