$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d97e7a38-8b7d-3cb8-a06d-289074a13617.roa File: d97e7a38-8b7d-3cb8-a06d-289074a13617.roa (raw, json) Hash identifier: F/l0SVTzwJBO6MQ+s6xMSo9Ko+svFd7bX7mZohuTq4E= Subject key identifier: 7F:25:C9:FA:EA:1D:CD:C4:66:9E:EE:2F:A8:74:9F:98:52:5B:C8:95 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A436C06A77D55172A43E64C5 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d97e7a38-8b7d-3cb8-a06d-289074a13617.roa Signing time: Fri 25 Apr 2025 08:36:43 +0000 ROA not before: Fri 25 Apr 2025 08:36:43 +0000 ROA not after: Thu 24 Jul 2025 08:36:43 +0000 asID: 12041 IP address blocks: 2001:500:51::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:c0:6a:77:d5:51:72:a4:3e:64:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:36:43 2025 GMT Not After : Jul 24 08:36:43 2025 GMT Subject: CN=162c2eea-677d-4f76-92b1-3f5da767421c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:03:50:3c:0f:bf:05:6f:d7:8e:3b:74:65: 0e:5c:4f:74:e5:b0:95:8f:6d:d7:77:93:77:18:bb: 39:af:c5:cd:e3:99:d3:b8:cc:e0:c9:93:9b:37:47: 3f:b1:1f:85:e7:7a:6c:cd:3b:ff:c8:ec:87:6c:92: 87:cb:c4:2e:1d:31:a0:1e:e5:4f:05:b0:1e:a1:ed: 9a:95:0a:e3:c8:63:26:9e:bf:42:dc:2a:9f:91:81: 2e:b6:0c:35:a7:c6:79:9f:a1:48:a5:a2:08:86:1d: 5a:ba:c2:bc:3b:d0:b1:f7:47:e7:51:1d:bd:b4:be: 46:df:80:16:8c:f8:3d:ec:0a:19:d3:20:b1:14:d5: 00:a6:0a:02:01:e8:93:b3:83:12:3b:8e:48:c1:a7: 19:ed:86:37:80:3c:9e:a9:0d:ec:a0:26:ee:37:f7: 5d:26:5d:96:bb:d9:4d:7b:aa:16:c4:5c:7b:1f:66: d2:cf:30:ce:16:48:66:e2:60:48:fc:d7:c3:7a:0b: 6c:3c:b3:d9:03:ce:68:be:c6:6c:6c:31:32:5a:7a: bb:7b:b8:93:92:38:88:7d:f3:1d:83:85:92:d9:c4: f5:3f:2e:99:79:ee:06:96:34:ee:ce:d5:29:a0:00: 2f:57:34:76:c5:c4:bf:63:de:a9:a5:f9:e3:78:b8: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:25:C9:FA:EA:1D:CD:C4:66:9E:EE:2F:A8:74:9F:98:52:5B:C8:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d97e7a38-8b7d-3cb8-a06d-289074a13617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:51::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8c:85:6a:b1:bb:34:eb:eb:09:c3:02:e6:4a:1d:d3:91:3e: 7c:1f:fb:94:95:66:b5:db:9f:84:79:43:0b:90:a2:43:55:f9: f2:fd:86:51:20:83:b7:40:6c:3f:b2:38:2d:c4:13:37:03:ba: 8b:c4:f5:75:53:6a:a4:43:9b:6f:84:d6:ee:de:ac:bf:29:35: 55:fe:d9:9d:e5:3d:51:1a:4c:84:55:43:bc:6c:a0:29:d1:7b: db:f5:20:6f:84:37:04:fc:d0:19:3d:8e:47:30:bb:f0:75:d7: 80:1c:19:59:97:d4:0c:20:86:c2:01:74:2a:73:e8:5d:30:1a: 03:e6:ec:c4:14:78:13:6b:8e:82:a9:4e:d8:55:4e:d5:07:2f: 21:31:19:01:f6:90:25:a3:5a:0c:b2:a9:be:79:0d:76:f6:75: 80:5d:57:57:46:2e:21:81:65:ec:2c:a9:34:e2:00:9a:0f:e6: 68:09:e1:e6:55:de:34:d7:56:41:aa:65:19:42:a5:64:21:64: bb:6e:1f:29:19:57:8f:e1:24:88:7c:ee:1b:3a:03:8d:a3:7a: 3f:1a:94:5b:0c:34:70:17:e0:d8:ec:a7:f5:4b:d5:0a:73:f9: e4:f3:57:33:f1:ba:1d:58:35:4e:fc:80:30:ac:33:57:89:e6: fc:59:a5:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNsBqd9VRcqQ+ZMUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzY0M1oXDTI1MDcyNDA4MzY0M1owLzEtMCsGA1UEAxMk MTYyYzJlZWEtNjc3ZC00Zjc2LTkyYjEtM2Y1ZGE3Njc0MjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1gDUDwPvwVv1447dGUOXE905bCVj23Xd5N3 GLs5r8XN45nTuMzgyZObN0c/sR+F53pszTv/yOyHbJKHy8QuHTGgHuVPBbAeoe2a lQrjyGMmnr9C3CqfkYEutgw1p8Z5n6FIpaIIhh1ausK8O9Cx90fnUR29tL5G34AW jPg97AoZ0yCxFNUApgoCAeiTs4MSO45IwacZ7YY3gDyeqQ3soCbuN/ddJl2Wu9lN e6oWxFx7H2bSzzDOFkhm4mBI/NfDegtsPLPZA85ovsZsbDEyWnq7e7iTkjiIffMd g4WS2cT1Py6Zee4GljTuztUpoAAvVzR2xcS/Y96ppfnjeLibrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8lyfrqHc3EZp7uL6h0n5hSW8iVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDk3ZTdhMzgtOGI3ZC0z Y2I4LWEwNmQtMjg5MDc0YTEzNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAiMhWqxuzTr6wnDAuZKHdORPnwf+5SVZrXbn4R5QwuQokNV+fL9 hlEgg7dAbD+yOC3EEzcDuovE9XVTaqRDm2+E1u7erL8pNVX+2Z3lPVEaTIRVQ7xs oCnRe9v1IG+ENwT80Bk9jkcwu/B114AcGVmX1AwghsIBdCpz6F0wGgPm7MQUeBNr joKpTthVTtUHLyExGQH2kCWjWgyyqb55DXb2dYBdV1dGLiGBZewsqTTiAJoP5mgJ 4eZV3jTXVkGqZRlCpWQhZLtuHykZV4/hJIh87hs6A42jej8alFsMNHAX4Njsp/VL 1Qpz+eTzVzPxuh1YNU78gDCsM1eJ5vxZpQs= -----END CERTIFICATE-----Generated at Tue Apr 29 18:39:22 2025 by rpki-client