$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa File: cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa (raw, json) Hash identifier: kR0cNOjdTj5BjwJq9PA6IZg5/sMEG0hi1QUPA1B4zf8= Subject key identifier: DC:D1:09:CF:8F:08:7E:7E:02:70:DC:FC:63:E7:6F:85:0B:F0:AD:FB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A42ECF88EE6CECD553E30B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa Signing time: Fri 25 Apr 2025 08:20:43 +0000 ROA not before: Fri 25 Apr 2025 08:20:43 +0000 ROA not after: Thu 24 Jul 2025 08:20:43 +0000 asID: 12041 IP address blocks: 2001:500:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:2e:cf:88:ee:6c:ec:d5:53:e3:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:20:43 2025 GMT Not After : Jul 24 08:20:43 2025 GMT Subject: CN=c30c30ee-ff2b-4bc8-a7bc-faeee8b663a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f2:6d:76:db:41:b0:be:dc:bc:25:5c:f8:85: 5a:cf:47:05:3b:d1:63:35:84:5f:b8:d4:f5:67:2e: ee:81:bd:fd:c1:c6:b5:5d:a4:b1:98:33:78:1f:63: d8:d7:09:bf:7e:9c:cd:e3:45:d6:eb:1a:53:65:e2: 61:4e:f1:70:7b:63:89:1b:87:79:c1:b9:4c:72:62: c0:e5:05:47:bf:62:92:1a:f5:49:76:31:2c:f3:6d: b5:37:fc:42:2d:d0:9d:ab:46:34:83:39:bf:14:60: ea:1f:e9:89:c5:55:c5:44:44:f3:fa:37:9d:fe:9f: 1d:40:ff:27:79:fb:42:93:31:a2:54:2e:1f:9b:ee: 0d:1e:80:f7:1d:d5:a2:7e:bb:77:07:88:55:25:15: cd:53:2d:a0:72:3d:e7:9d:52:14:71:64:62:52:6d: cf:1b:f4:a9:14:bf:9b:07:3f:cb:e0:ea:3f:cf:fe: ac:fc:f9:5a:13:12:cc:54:d7:17:90:1b:ee:58:ef: 16:2d:45:79:26:b0:2b:8a:4a:ca:2f:cd:01:28:28: e4:fc:46:9f:3e:15:39:6b:48:c2:d0:85:55:d3:05: 12:5f:17:44:44:50:30:e9:39:37:a0:ba:df:6a:0f: d3:19:4f:ed:36:ac:ff:af:52:51:8f:76:0c:6b:8e: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D1:09:CF:8F:08:7E:7E:02:70:DC:FC:63:E7:6F:85:0B:F0:AD:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cf93bc78-48c3-3c66-b8f9-632ec29115a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:87:3e:c4:e2:ef:b1:3b:dd:b5:d9:eb:4b:ab:c8:47:2e:55: 43:4d:89:9a:88:b6:93:b5:de:92:d5:36:a5:69:f5:e5:5f:f9: f1:84:20:4c:9a:2c:d2:13:69:c7:79:ae:10:be:52:ec:79:9c: 42:61:36:f0:ae:bf:a8:e0:6c:01:55:8f:e8:4c:94:b0:10:17: 9b:80:69:f3:f3:fc:05:7a:10:03:6c:78:fb:52:b2:cc:07:6a: 26:b6:f1:d9:af:db:85:01:ca:44:a8:db:82:e5:7d:c0:e1:3d: bc:59:03:23:9a:72:26:d5:66:ca:6f:ca:93:a1:58:47:6a:9f: a5:48:33:0e:fd:80:51:37:fa:bd:75:af:6c:a1:73:d5:c2:78: 65:7d:e0:43:ec:7d:16:c6:99:16:61:c9:64:fb:51:73:65:46: 88:ab:d0:90:b5:bf:1c:3b:0a:3c:37:50:52:97:ff:ea:5b:71: c3:c6:8e:f4:5a:d5:16:2c:fa:85:82:9d:29:d5:db:e7:6d:14: f0:61:87:4d:45:43:a5:db:2c:9e:33:7c:75:e2:ca:fe:9e:c6: 98:29:3f:78:75:76:9d:4c:58:49:78:1f:dc:2d:68:c8:1f:87: dc:a7:e6:1a:7a:4e:bb:59:b4:e7:6e:2c:e7:cc:f0:c4:cf:35: eb:c9:c8:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkLs+I7mzs1VPjC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MjA0M1oXDTI1MDcyNDA4MjA0M1owLzEtMCsGA1UEAxMk YzMwYzMwZWUtZmYyYi00YmM4LWE3YmMtZmFlZWU4YjY2M2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfJtdttBsL7cvCVc+IVaz0cFO9FjNYRfuNT1 Zy7ugb39wca1XaSxmDN4H2PY1wm/fpzN40XW6xpTZeJhTvFwe2OJG4d5wblMcmLA 5QVHv2KSGvVJdjEs8221N/xCLdCdq0Y0gzm/FGDqH+mJxVXFRETz+jed/p8dQP8n eftCkzGiVC4fm+4NHoD3HdWifrt3B4hVJRXNUy2gcj3nnVIUcWRiUm3PG/SpFL+b Bz/L4Oo/z/6s/PlaExLMVNcXkBvuWO8WLUV5JrArikrKL80BKCjk/EafPhU5a0jC 0IVV0wUSXxdERFAw6Tk3oLrfag/TGU/tNqz/r1JRj3YMa44TtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNzRCc+PCH5+AnDc/GPnb4UL8K37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2Y5M2JjNzgtNDhjMy0z YzY2LWI4ZjktNjMyZWMyOTExNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6HPsTi77E73bXZ60uryEcuVUNNiZqItpO13pLVNqVp9eVf+fGE IEyaLNITacd5rhC+Uux5nEJhNvCuv6jgbAFVj+hMlLAQF5uAafPz/AV6EANsePtS sswHaia28dmv24UBykSo24LlfcDhPbxZAyOacibVZspvypOhWEdqn6VIMw79gFE3 +r11r2yhc9XCeGV94EPsfRbGmRZhyWT7UXNlRoir0JC1vxw7Cjw3UFKX/+pbccPG jvRa1RYs+oWCnSnV2+dtFPBhh01FQ6XbLJ4zfHXiyv6expgpP3h1dp1MWEl4H9wt aMgfh9yn5hp6TrtZtOduLOfM8MTPNevJyC8= -----END CERTIFICATE-----Generated at Tue Apr 29 12:01:21 2025 by rpki-client