$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ccdbf9bf-afc5-3b7a-b28a-ee76fba1aa02.roa File: ccdbf9bf-afc5-3b7a-b28a-ee76fba1aa02.roa (raw, json) Hash identifier: mke4FMSb53TP98BLzOMb5v4JT04EdaOHU7kMiWmUnvU= Subject key identifier: EF:AB:5B:46:C1:BE:DB:83:AB:4A:EF:A9:8C:79:25:C4:AF:B3:19:B9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4360A2CB7EFE46797E322A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ccdbf9bf-afc5-3b7a-b28a-ee76fba1aa02.roa Signing time: Fri 25 Apr 2025 08:35:17 +0000 ROA not before: Fri 25 Apr 2025 08:35:17 +0000 ROA not after: Thu 24 Jul 2025 08:35:17 +0000 asID: 12041 IP address blocks: 2001:500:4e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:0a:2c:b7:ef:e4:67:97:e3:22:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:35:17 2025 GMT Not After : Jul 24 08:35:17 2025 GMT Subject: CN=0d5ee2e9-b586-4103-9c79-5d7423595f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:e7:93:e5:23:02:cc:a9:7e:71:07:c6:97: f0:e0:76:25:4c:94:de:46:9c:57:6b:47:a7:95:be: 4f:34:34:52:01:af:47:2b:5c:6a:64:8b:20:0f:6b: 13:50:4e:d3:73:79:85:8e:9a:4a:2d:ee:ea:da:d5: f7:bc:54:f9:c5:6e:df:ef:64:fb:c6:b0:05:1f:4b: 1c:92:02:ba:ca:1f:77:a2:63:be:b5:0a:c0:e9:74: 62:b0:d1:4f:21:d7:f0:f2:30:78:20:33:54:07:98: 5d:1a:25:7d:86:5f:24:99:ed:9a:8d:e9:ac:73:74: 14:29:2d:3e:c8:27:05:9c:d5:a8:e4:bb:bd:cb:de: 9f:58:a0:a1:62:10:0d:76:92:5a:e4:59:e1:85:a9: 9d:19:ed:c4:b5:fd:08:4f:70:1d:26:cc:34:6c:4c: 58:a2:5f:e9:83:31:82:25:ac:10:f8:db:82:60:82: 33:12:c7:d9:f0:3c:2b:4f:d5:20:84:9f:bd:77:8b: f5:57:13:84:aa:b2:a5:00:58:d0:40:b8:05:5f:f5: d1:56:b0:8a:2b:68:f0:bb:34:36:a2:84:3b:c7:e9: 29:b6:4e:da:2f:1c:2b:c9:bf:91:6d:b2:07:27:36: 63:7f:40:01:89:6f:3f:76:e1:1e:25:23:a6:2c:0f: 5b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AB:5B:46:C1:BE:DB:83:AB:4A:EF:A9:8C:79:25:C4:AF:B3:19:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ccdbf9bf-afc5-3b7a-b28a-ee76fba1aa02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:86:7a:52:f6:9e:cb:a9:5b:7f:e5:6c:7e:11:05:d8:75:a8: 82:d7:85:c6:9e:b3:5e:7a:49:3d:88:5a:fd:e3:cc:a9:0d:af: 1a:5b:05:bc:92:e0:b6:c5:06:b7:62:13:13:eb:19:93:6f:20: 94:31:1f:03:53:fb:ce:fb:59:47:37:d9:57:a2:d4:87:5f:af: fe:0d:17:3e:e3:db:8d:c3:0e:1c:37:98:8d:a6:64:68:2e:f0: b8:1a:c2:eb:5a:0c:86:44:4e:86:70:ef:db:a3:d4:a9:9a:fe: 2a:ae:1c:9b:58:3a:a6:d7:d8:f9:84:db:1e:82:44:b5:d1:fd: 69:d0:22:96:c0:53:c0:78:de:cd:a4:46:e3:a7:92:b0:c7:7e: 9d:93:40:5c:88:3a:7e:ed:97:8c:b7:44:fe:e6:9f:f0:f5:b9: 60:43:c2:80:59:27:d1:c2:ba:75:e3:03:08:39:e0:db:42:da: c9:cc:80:4f:4c:0a:56:32:92:24:b3:93:2f:4d:5a:17:ba:ea: 08:53:d6:7e:10:e9:30:56:a0:e3:b0:64:30:94:e8:52:65:7a: 6d:79:86:2f:b3:c6:16:e0:1e:00:42:e9:5b:65:f6:9c:1b:39: 6e:0d:3b:44:d9:af:23:a5:7e:47:9a:5d:e1:5f:7f:77:24:b2: ae:c3:5a:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNgost+/kZ5fjIqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzUxN1oXDTI1MDcyNDA4MzUxN1owLzEtMCsGA1UEAxMk MGQ1ZWUyZTktYjU4Ni00MTAzLTljNzktNWQ3NDIzNTk1ZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzbnk+UjAsypfnEHxpfw4HYlTJTeRpxXa0en lb5PNDRSAa9HK1xqZIsgD2sTUE7Tc3mFjppKLe7q2tX3vFT5xW7f72T7xrAFH0sc kgK6yh93omO+tQrA6XRisNFPIdfw8jB4IDNUB5hdGiV9hl8kme2ajemsc3QUKS0+ yCcFnNWo5Lu9y96fWKChYhANdpJa5FnhhamdGe3Etf0IT3AdJsw0bExYol/pgzGC JawQ+NuCYIIzEsfZ8DwrT9UghJ+9d4v1VxOEqrKlAFjQQLgFX/XRVrCKK2jwuzQ2 ooQ7x+kptk7aLxwryb+RbbIHJzZjf0ABiW8/duEeJSOmLA9bgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO+rW0bBvtuDq0rvqYx5JcSvsxm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2NkYmY5YmYtYWZjNS0z YjdhLWIyOGEtZWU3NmZiYTFhYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKmGelL2nsupW3/lbH4RBdh1qILXhcaes156ST2IWv3jzKkNrxpb BbyS4LbFBrdiExPrGZNvIJQxHwNT+877WUc32Vei1Idfr/4NFz7j243DDhw3mI2m ZGgu8LgawutaDIZEToZw79uj1Kma/iquHJtYOqbX2PmE2x6CRLXR/WnQIpbAU8B4 3s2kRuOnkrDHfp2TQFyIOn7tl4y3RP7mn/D1uWBDwoBZJ9HCunXjAwg54NtC2snM gE9MClYykiSzky9NWhe66ghT1n4Q6TBWoOOwZDCU6FJlem15hi+zxhbgHgBC6Vtl 9pwbOW4NO0TZryOlfkeaXeFff3cksq7DWos= -----END CERTIFICATE-----Generated at Tue Apr 29 23:27:52 2025 by rpki-client