$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa File: d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa (raw, json) Hash identifier: FRi+d15GhStcDOslUMd+PsbGoYHGiUcvvbkpNaZqqcE= Subject key identifier: 55:6D:B2:B3:AE:F3:09:B6:48:EA:4D:C5:16:EC:83:8E:D0:2F:C3:4E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A434BD4F5630F02419EE5B00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa Signing time: Fri 25 Apr 2025 08:32:39 +0000 ROA not before: Fri 25 Apr 2025 08:32:39 +0000 ROA not after: Thu 24 Jul 2025 08:32:39 +0000 asID: 12041 IP address blocks: 2001:500:ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:34:bd:4f:56:30:f0:24:19:ee:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:32:39 2025 GMT Not After : Jul 24 08:32:39 2025 GMT Subject: CN=07f7f872-1d4a-4ea9-9f22-123aad8d75d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4e:dd:aa:2f:cd:dd:0b:38:79:45:ed:41:e6: 02:94:3c:13:8e:e0:58:69:c2:b0:19:8a:ea:e1:0e: 9f:ec:67:7d:ec:e8:fb:40:8a:49:a0:42:a4:81:4b: 47:e9:6e:db:d8:fe:af:1b:df:3a:4b:5b:15:9f:88: 8c:c9:86:6e:47:2c:e8:ef:1c:1f:fe:23:be:53:35: a8:52:e1:ce:ad:2e:78:22:6b:1b:93:84:e8:7e:04: 71:df:98:14:46:a3:37:15:31:cc:02:44:55:ca:98: 2a:5c:52:a1:87:29:08:3d:e4:51:03:65:5d:9d:a2: 14:67:3f:98:b5:39:8d:59:d9:ae:d5:9a:c3:a8:36: ec:fd:83:ad:f2:ca:f7:57:b5:25:21:27:64:4d:53: d2:30:56:27:58:3a:df:31:c8:d8:0f:b0:b6:b4:57: 7d:71:ff:a9:14:4e:82:70:7e:25:7c:f6:c0:d3:3e: 7b:23:5d:5d:0e:a3:a1:2c:ea:e5:49:fc:06:be:74: 8d:bb:ec:8a:c2:25:3e:89:70:f6:4a:87:61:8f:2b: 8f:6c:0a:3d:c1:10:81:5b:dd:fb:60:6a:49:ef:b3: 5b:0b:fc:5f:c2:fd:7f:58:41:aa:e0:29:99:a7:b2: 7c:0f:c3:29:7f:3a:4f:c4:8e:00:70:c8:0d:77:1f: 16:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6D:B2:B3:AE:F3:09:B6:48:EA:4D:C5:16:EC:83:8E:D0:2F:C3:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2d854ed-6294-32b0-8c77-413d51fe5c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:50:4f:1f:9a:0a:89:0e:11:8e:a2:1f:5d:30:15:fa:ff:f9: a9:df:99:d6:b0:01:90:f3:33:34:71:0c:3b:65:e0:03:9b:8a: d7:83:ea:d9:5b:9e:35:4a:31:f6:2f:19:3e:c4:3a:5a:60:0e: 30:49:5a:b8:01:21:9b:91:a8:a0:39:f7:82:85:64:e2:50:b1: 86:52:1a:3f:98:c5:89:2a:dd:73:0c:07:aa:3b:72:3a:67:21: 75:0d:8f:1f:00:2f:bd:dd:61:b1:9b:5a:c4:2a:8d:a9:17:ca: 2e:64:16:b3:9f:99:fc:49:cc:93:c7:fb:c3:fb:1b:56:51:21: 7f:44:7e:a6:82:df:9c:f3:c9:9c:e0:3e:2a:6b:95:7d:e9:a1: f3:4f:8f:bd:14:e3:a2:ab:b2:cb:d4:71:c9:55:b1:8c:d0:ec: 86:bb:de:f3:cf:d8:76:5e:07:46:b4:89:11:ac:17:00:7a:8f: 64:e1:e5:b5:e9:3f:3f:6e:c2:ef:3e:92:40:48:ef:bf:99:6a: 18:55:c2:0f:b9:d8:28:cd:b5:51:20:56:e1:4c:90:1b:d1:42: a4:86:00:24:5d:a5:a6:cd:f5:00:1e:34:57:0a:97:6b:91:44: 8a:60:da:e8:1c:fd:3e:b1:7f:fb:ee:6a:e0:1f:16:89:8e:c8: 74:9e:f1:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNL1PVjDwJBnuWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzIzOVoXDTI1MDcyNDA4MzIzOVowLzEtMCsGA1UEAxMk MDdmN2Y4NzItMWQ0YS00ZWE5LTlmMjItMTIzYWFkOGQ3NWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA207dqi/N3Qs4eUXtQeYClDwTjuBYacKwGYrq 4Q6f7Gd97Oj7QIpJoEKkgUtH6W7b2P6vG986S1sVn4iMyYZuRyzo7xwf/iO+UzWo UuHOrS54Imsbk4TofgRx35gURqM3FTHMAkRVypgqXFKhhykIPeRRA2VdnaIUZz+Y tTmNWdmu1ZrDqDbs/YOt8sr3V7UlISdkTVPSMFYnWDrfMcjYD7C2tFd9cf+pFE6C cH4lfPbA0z57I11dDqOhLOrlSfwGvnSNu+yKwiU+iXD2SodhjyuPbAo9wRCBW937 YGpJ77NbC/xfwv1/WEGq4CmZp7J8D8MpfzpPxI4AcMgNdx8W4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFVtsrOu8wm2SOpNxRbsg47QL8NOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDJkODU0ZWQtNjI5NC0z MmIwLThjNzctNDEzZDUxZmU1YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACxQTx+aCokOEY6iH10wFfr/+anfmdawAZDzMzRxDDtl4AObiteD 6tlbnjVKMfYvGT7EOlpgDjBJWrgBIZuRqKA594KFZOJQsYZSGj+YxYkq3XMMB6o7 cjpnIXUNjx8AL73dYbGbWsQqjakXyi5kFrOfmfxJzJPH+8P7G1ZRIX9EfqaC35zz yZzgPiprlX3pofNPj70U46KrssvUcclVsYzQ7Ia73vPP2HZeB0a0iRGsFwB6j2Th 5bXpPz9uwu8+kkBI77+ZahhVwg+52CjNtVEgVuFMkBvRQqSGACRdpabN9QAeNFcK l2uRRIpg2ugc/T6xf/vuauAfFomOyHSe8Qg= -----END CERTIFICATE-----Generated at Wed Apr 30 01:37:54 2025 by rpki-client