$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa File: d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa (raw, json) Hash identifier: kc8w6zVM1vprxu6DUqqRio9xOHzF7CyWl6H47R2P+14= Subject key identifier: 50:A8:B3:7F:6A:27:E3:63:A1:25:C2:88:C6:AD:8F:AE:C1:F2:81:98 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A435A2A566D28B197FFE99C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa Signing time: Fri 25 Apr 2025 08:34:28 +0000 ROA not before: Fri 25 Apr 2025 08:34:28 +0000 ROA not after: Thu 24 Jul 2025 08:34:28 +0000 asID: 12041 IP address blocks: 2001:500:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:a2:a5:66:d2:8b:19:7f:fe:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:34:28 2025 GMT Not After : Jul 24 08:34:28 2025 GMT Subject: CN=22babdda-1ec5-43bd-b6ef-d1a33c5772ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3a:e1:47:1c:ca:40:52:d0:d9:7f:db:f5:f2: 85:18:d8:89:01:45:0b:ff:85:25:d8:7e:55:d4:15: 4d:00:1d:e9:51:6f:ff:19:12:02:06:50:24:0d:ba: 80:0c:90:8c:67:cd:aa:f1:6a:58:19:23:45:8b:83: ad:11:e8:66:3a:86:a8:75:29:ed:0a:62:3d:23:06: 8f:b9:03:4e:58:92:f4:4d:9f:c7:26:39:1f:23:35: 19:91:5c:03:c9:1a:18:43:5e:fd:1f:2d:f8:e5:d2: f6:e2:a4:4d:9e:f3:9c:f0:07:9d:4e:97:bd:3d:d4: 47:ee:63:24:3e:f6:06:eb:96:94:59:f1:6b:a9:89: ac:e9:70:90:da:a9:fc:03:38:6d:9f:a4:59:43:e1: e1:72:51:c7:ab:82:e6:24:27:dd:32:43:a2:6b:fc: a1:3b:00:41:66:9a:79:24:18:81:a5:b2:b6:ea:a7: 28:be:e7:e8:fd:6d:b8:9a:05:a0:e3:b5:c6:62:a8: 72:65:b2:11:b3:af:69:61:24:b1:2a:3f:9c:4f:c9: 39:04:b3:a7:7d:a4:61:72:e7:a1:c9:59:db:80:64: 01:a5:c4:49:46:e1:6b:8f:6b:a1:ce:93:ba:e7:dc: 23:31:c4:bf:48:fc:46:a4:84:c4:bd:84:28:3e:6a: 54:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A8:B3:7F:6A:27:E3:63:A1:25:C2:88:C6:AD:8F:AE:C1:F2:81:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d80b6c84-2a5d-302a-94a7-c2abc010ffca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c9:8e:87:c1:3e:de:69:48:99:fc:09:d2:51:15:86:4b:0a: 7d:21:0a:3e:37:ea:4c:f7:a8:67:12:3d:1f:7b:e3:b6:f6:c9: 95:af:c2:b6:bc:c4:6d:74:12:57:de:2a:5f:90:9b:60:fb:04: d9:a4:46:d4:68:10:42:65:10:32:3c:74:5e:7c:c9:37:79:db: 09:e2:95:82:30:0a:be:13:bb:60:8b:04:17:10:8a:f6:04:4d: 5b:de:14:4b:1f:a9:90:d5:f8:30:42:62:e9:3e:69:5e:9c:fa: 16:f0:88:a2:f5:4b:16:6a:d4:20:4b:5b:1b:5d:26:3f:cf:48: 29:ce:d5:61:c8:5c:bd:c6:d5:69:eb:cc:22:fc:87:cf:f4:8c: 8e:f1:92:18:f4:b4:fb:11:13:17:0a:a4:33:6b:dd:b4:08:3a: 5e:e1:e4:d0:23:23:12:9d:53:0c:94:5d:f7:eb:62:79:10:ee: 04:08:74:f8:98:84:e4:04:28:b3:b4:c0:6a:92:6e:35:1f:d8: c5:33:92:81:08:f7:02:2e:63:27:91:a5:97:4c:80:65:f1:70: 07:7b:b3:e3:15:87:45:75:7e:9d:5e:fc:ce:14:d8:c4:b6:ec: 02:d3:b1:b6:47:90:af:0d:c9:b8:5c:08:4b:f9:c1:09:54:78: bf:a9:0b:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNaKlZtKLGX/+mcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzQyOFoXDTI1MDcyNDA4MzQyOFowLzEtMCsGA1UEAxMk MjJiYWJkZGEtMWVjNS00M2JkLWI2ZWYtZDFhMzNjNTc3MmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TrhRxzKQFLQ2X/b9fKFGNiJAUUL/4Ul2H5V 1BVNAB3pUW//GRICBlAkDbqADJCMZ82q8WpYGSNFi4OtEehmOoaodSntCmI9IwaP uQNOWJL0TZ/HJjkfIzUZkVwDyRoYQ179Hy345dL24qRNnvOc8AedTpe9PdRH7mMk PvYG65aUWfFrqYms6XCQ2qn8Azhtn6RZQ+HhclHHq4LmJCfdMkOia/yhOwBBZpp5 JBiBpbK26qcovufo/W24mgWg47XGYqhyZbIRs69pYSSxKj+cT8k5BLOnfaRhcueh yVnbgGQBpcRJRuFrj2uhzpO659wjMcS/SPxGpITEvYQoPmpUAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFCos39qJ+NjoSXCiMatj67B8oGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDgwYjZjODQtMmE1ZC0z MDJhLTk0YTctYzJhYmMwMTBmZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFHJjofBPt5pSJn8CdJRFYZLCn0hCj436kz3qGcSPR9747b2yZWv wra8xG10ElfeKl+Qm2D7BNmkRtRoEEJlEDI8dF58yTd52wnilYIwCr4Tu2CLBBcQ ivYETVveFEsfqZDV+DBCYuk+aV6c+hbwiKL1SxZq1CBLWxtdJj/PSCnO1WHIXL3G 1WnrzCL8h8/0jI7xkhj0tPsRExcKpDNr3bQIOl7h5NAjIxKdUwyUXffrYnkQ7gQI dPiYhOQEKLO0wGqSbjUf2MUzkoEI9wIuYyeRpZdMgGXxcAd7s+MVh0V1fp1e/M4U 2MS27ALTsbZHkK8NybhcCEv5wQlUeL+pCyk= -----END CERTIFICATE-----Generated at Tue Apr 29 10:04:49 2025 by rpki-client