$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd5996b9-9e4f-3753-b04e-18a43ee1c61e.roa File: dd5996b9-9e4f-3753-b04e-18a43ee1c61e.roa (raw, json) Hash identifier: kZRi3QS6jnPV1NoZDW4tq/iq0NbNT+eJaPX1PMLEx5g= Subject key identifier: BB:22:FF:20:DA:77:40:B6:06:D7:7B:25:B9:FF:43:2D:AD:8F:6C:5A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4358E11CDDD0D7E5DA8B6C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd5996b9-9e4f-3753-b04e-18a43ee1c61e.roa Signing time: Fri 25 Apr 2025 08:34:18 +0000 ROA not before: Fri 25 Apr 2025 08:34:18 +0000 ROA not after: Thu 24 Jul 2025 08:34:18 +0000 asID: 12041 IP address blocks: 2001:500:ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:8e:11:cd:dd:0d:7e:5d:a8:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:34:18 2025 GMT Not After : Jul 24 08:34:18 2025 GMT Subject: CN=2a236262-21b4-48a8-8c5f-8947fd8afb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:c2:17:8f:95:b4:c1:2e:eb:72:24:4d:48: e2:bd:69:63:4c:39:84:ab:7e:2b:c7:35:7b:ce:6d: b2:ea:a1:ed:39:a2:8c:88:d3:31:02:81:22:b1:06: 67:65:2c:72:46:9f:e8:d5:3a:9d:13:ff:13:51:6d: 4f:de:33:0c:56:f5:a6:a7:8e:65:7c:5f:5b:63:d4: 09:4e:c1:60:1c:f1:95:fd:f1:c1:88:3c:66:f7:57: bb:d0:00:15:47:84:fd:85:f1:92:82:d7:6d:52:bd: fb:b6:da:c0:8c:58:23:7f:c6:77:92:f5:4e:82:a9: af:92:99:0f:33:f1:4e:18:4c:86:66:e6:d2:8d:4d: ff:e4:cd:58:0d:dc:15:4f:fb:5b:4b:93:db:79:ce: 08:97:4c:57:5e:5b:75:d2:7d:89:77:c9:9f:d7:d5: 17:a7:95:4f:8f:4d:eb:ea:b8:f0:21:5f:4d:3d:5e: 8e:42:85:e7:6a:d7:ce:9d:7f:0e:88:69:1e:94:93: df:95:9a:dd:1c:58:c4:71:e2:c0:f0:9c:41:14:66: 78:c5:f7:73:92:4d:f6:de:a3:92:87:4e:4f:2f:90: 4c:ac:33:73:69:26:dc:bd:45:c2:47:2a:1e:10:c0: 24:40:d8:bf:c2:14:17:c0:5d:7a:b5:85:18:e1:7f: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:22:FF:20:DA:77:40:B6:06:D7:7B:25:B9:FF:43:2D:AD:8F:6C:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dd5996b9-9e4f-3753-b04e-18a43ee1c61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:16:82:00:40:a7:bb:44:b9:5b:7a:af:a6:b4:82:8f:62:57: 55:a1:e3:91:2c:b7:a7:b4:15:d3:f3:4d:db:95:50:ee:41:10: 92:8a:cc:fe:97:9a:e1:51:49:71:9a:a0:ad:ea:11:b1:5b:e8: e5:9f:e0:97:72:3c:32:95:eb:2e:46:a4:48:1f:b8:5a:0c:72: b9:bb:b0:b0:68:e7:4a:ee:63:79:e3:de:fc:86:0d:1b:c8:e0: 07:58:ad:50:24:89:d0:dd:32:33:e6:69:ae:ae:2e:f1:8e:89: 1a:14:42:91:52:c0:93:30:78:2d:b4:ed:0a:4f:2e:fe:10:6c: 5c:a9:f6:f7:9b:5a:12:2b:ea:fd:8d:a7:9a:0c:ec:6e:e1:44: 2a:0f:ae:69:81:a6:ae:bd:61:fb:aa:08:57:d0:bc:6e:3c:4e: 1c:75:84:16:53:a0:10:37:de:e0:5f:59:42:3e:bb:2d:03:7f: e5:7b:b8:2a:26:50:4a:33:13:a4:97:bd:4d:86:d3:45:29:88: 44:3d:9b:e9:d2:09:58:a2:b2:9d:fd:db:bf:a7:d5:11:bf:e2: 94:f7:b4:12:68:6c:69:94:f9:c5:76:5d:eb:3c:aa:fb:62:02: 60:01:cd:d6:c5:e3:02:b8:a4:96:b9:9b:bc:aa:5e:17:d0:88: 51:a7:f4:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNY4Rzd0Nfl2otsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzQxOFoXDTI1MDcyNDA4MzQxOFowLzEtMCsGA1UEAxMk MmEyMzYyNjItMjFiNC00OGE4LThjNWYtODk0N2ZkOGFmYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv/CF4+VtMEu63IkTUjivWljTDmEq34rxzV7 zm2y6qHtOaKMiNMxAoEisQZnZSxyRp/o1TqdE/8TUW1P3jMMVvWmp45lfF9bY9QJ TsFgHPGV/fHBiDxm91e70AAVR4T9hfGSgtdtUr37ttrAjFgjf8Z3kvVOgqmvkpkP M/FOGEyGZubSjU3/5M1YDdwVT/tbS5Pbec4Il0xXXlt10n2Jd8mf19UXp5VPj03r 6rjwIV9NPV6OQoXnatfOnX8OiGkelJPflZrdHFjEceLA8JxBFGZ4xfdzkk323qOS h05PL5BMrDNzaSbcvUXCRyoeEMAkQNi/whQXwF16tYUY4X9M6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLsi/yDad0C2Btd7Jbn/Qy2tj2xaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGQ1OTk2YjktOWU0Zi0z NzUzLWIwNGUtMThhNDNlZTFjNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA8WggBAp7tEuVt6r6a0go9iV1Wh45Est6e0FdPzTduVUO5BEJKK zP6XmuFRSXGaoK3qEbFb6OWf4JdyPDKV6y5GpEgfuFoMcrm7sLBo50ruY3nj3vyG DRvI4AdYrVAkidDdMjPmaa6uLvGOiRoUQpFSwJMweC207QpPLv4QbFyp9vebWhIr 6v2Np5oM7G7hRCoPrmmBpq69YfuqCFfQvG48Thx1hBZToBA33uBfWUI+uy0Df+V7 uComUEozE6SXvU2G00UpiEQ9m+nSCViisp3927+n1RG/4pT3tBJobGmU+cV2Xes8 qvtiAmABzdbF4wK4pJa5m7yqXhfQiFGn9FU= -----END CERTIFICATE-----Generated at Tue Apr 29 14:32:35 2025 by rpki-client