$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa File: d7b76d36-d31b-377f-98aa-7d8bea972932.roa (raw, json) Hash identifier: 7e3Ucdx5RwZhGAG3dJH+GrHkIRwjrgWthKHXT+kxdEs= Subject key identifier: B6:C5:EA:11:53:CC:B9:6F:15:87:DF:6F:1B:FD:4E:AD:00:FA:5C:F4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4350D8CA04D8D305DDA7680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa Signing time: Fri 25 Apr 2025 08:33:17 +0000 ROA not before: Fri 25 Apr 2025 08:33:17 +0000 ROA not after: Thu 24 Jul 2025 08:33:17 +0000 asID: 12041 IP address blocks: 2001:500:d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:0d:8c:a0:4d:8d:30:5d:da:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:17 2025 GMT Not After : Jul 24 08:33:17 2025 GMT Subject: CN=61e13bb9-8399-494d-b3e7-7cbf43cedca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:f5:9d:ea:09:ff:b3:fd:f5:e5:ea:3a:62: 23:9d:f2:06:0b:27:e7:cd:af:1b:c4:f0:29:8a:6d: 59:86:56:6d:46:b4:5f:25:49:df:35:4c:d9:33:dc: d4:06:b2:3e:c2:2a:d8:f4:40:ff:ff:c3:b0:b1:7a: 4a:90:87:18:9d:32:06:b6:c0:2d:8a:00:16:37:1e: b6:08:fa:28:e4:4e:11:5a:5e:b1:68:1f:66:c4:fe: 6b:67:aa:38:1b:a6:6d:85:b1:16:18:0c:c9:e7:07: 49:7a:14:d9:c1:06:10:c6:fd:e0:d4:b9:d3:ff:f3: 34:f4:b0:83:a6:fa:e8:a7:10:a4:c6:ea:4f:39:3f: 6a:cd:0a:0d:06:74:56:26:4a:49:71:b8:5e:f3:ef: 9d:6d:64:22:ab:a3:db:27:b5:9f:00:b3:43:78:b3: bb:2b:55:e8:10:7d:f7:3e:6b:96:47:e5:69:d0:d9: b9:d2:fc:b1:c2:61:c9:85:bd:5b:a7:9c:88:9d:c7: 83:07:f2:b4:17:7f:ed:56:97:c4:7d:70:65:f1:4b: a9:76:24:c3:72:be:5b:b8:e1:34:38:e1:cb:b8:9d: fa:b3:28:5f:22:84:5f:cd:2e:30:be:6a:9f:28:39: eb:5a:a7:4e:10:a8:68:40:d5:9f:dd:60:59:32:9c: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C5:EA:11:53:CC:B9:6F:15:87:DF:6F:1B:FD:4E:AD:00:FA:5C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d7b76d36-d31b-377f-98aa-7d8bea972932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:69:57:25:51:ec:60:c5:e7:93:e1:36:41:d3:dd:76:ff:41: 6d:3a:ed:db:e1:92:36:ef:ea:64:5b:9c:53:13:bb:18:0d:63: 2b:fa:31:80:b9:5b:0e:90:81:2c:ce:2a:c0:16:ee:5a:23:5b: f0:72:8c:3e:b9:52:da:96:9e:06:eb:32:ca:2d:25:e0:f6:26: b0:7b:13:2d:a9:f1:55:46:de:a6:3d:9c:02:9d:27:28:95:28: 09:7f:c6:d0:a0:94:df:65:09:c5:4f:f0:c1:d6:68:da:ec:c5: da:55:6f:4d:9e:d7:46:fb:44:fd:ab:fa:39:88:ef:fb:11:a4: 4b:c0:96:30:0d:ae:98:28:66:61:4d:a3:a8:be:82:21:f5:d3: 54:32:b6:81:47:69:a3:43:03:7b:ec:64:81:4d:31:8e:22:cb: 33:c4:d3:c7:20:3f:a1:6e:09:59:83:18:12:e5:82:78:b5:04: 06:c7:16:43:ac:6d:0a:8f:3f:c0:e6:14:3b:a7:6a:d1:21:25: 29:4b:42:d4:40:21:e5:77:4e:f0:f9:c4:ce:ed:9c:db:6e:b9: bc:fb:51:1d:a4:89:d6:25:fc:7a:dd:9a:37:7f:d2:95:8f:69: 11:66:75:0c:c4:10:ba:4a:ae:69:72:4e:18:4c:bf:2c:12:39: b0:62:70:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNQ2MoE2NMF3adoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzMxN1oXDTI1MDcyNDA4MzMxN1owLzEtMCsGA1UEAxMk NjFlMTNiYjktODM5OS00OTRkLWIzZTctN2NiZjQzY2VkY2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3z1neoJ/7P99eXqOmIjnfIGCyfnza8bxPAp im1ZhlZtRrRfJUnfNUzZM9zUBrI+wirY9ED//8OwsXpKkIcYnTIGtsAtigAWNx62 CPoo5E4RWl6xaB9mxP5rZ6o4G6ZthbEWGAzJ5wdJehTZwQYQxv3g1LnT//M09LCD pvropxCkxupPOT9qzQoNBnRWJkpJcbhe8++dbWQiq6PbJ7WfALNDeLO7K1XoEH33 PmuWR+Vp0Nm50vyxwmHJhb1bp5yInceDB/K0F3/tVpfEfXBl8UupdiTDcr5buOE0 OOHLuJ36syhfIoRfzS4wvmqfKDnrWqdOEKhoQNWf3WBZMpxSjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLbF6hFTzLlvFYffbxv9Tq0A+lz0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDdiNzZkMzYtZDMxYi0z NzdmLTk4YWEtN2Q4YmVhOTcyOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMRpVyVR7GDF55PhNkHT3Xb/QW067dvhkjbv6mRbnFMTuxgNYyv6 MYC5Ww6QgSzOKsAW7lojW/ByjD65UtqWngbrMsotJeD2JrB7Ey2p8VVG3qY9nAKd JyiVKAl/xtCglN9lCcVP8MHWaNrsxdpVb02e10b7RP2r+jmI7/sRpEvAljANrpgo ZmFNo6i+giH101QytoFHaaNDA3vsZIFNMY4iyzPE08cgP6FuCVmDGBLlgni1BAbH FkOsbQqPP8DmFDunatEhJSlLQtRAIeV3TvD5xM7tnNtuubz7UR2kidYl/Hrdmjd/ 0pWPaRFmdQzEELpKrmlyThhMvywSObBicEI= -----END CERTIFICATE-----Generated at Tue Apr 29 12:08:13 2025 by rpki-client