$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa File: de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa (raw, json) Hash identifier: LuckTKzyshq1ueidvRcd0tGb29aPla5rJ0mCg9Hk7e0= Subject key identifier: AB:18:57:C7:73:A1:30:60:16:7A:C6:98:19:47:3F:14:94:72:C7:5F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A434C913C90CC6A75789D180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa Signing time: Fri 25 Apr 2025 08:32:45 +0000 ROA not before: Fri 25 Apr 2025 08:32:45 +0000 ROA not after: Thu 24 Jul 2025 08:32:45 +0000 asID: 12041 IP address blocks: 2001:500:cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:34:c9:13:c9:0c:c6:a7:57:89:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:32:45 2025 GMT Not After : Jul 24 08:32:45 2025 GMT Subject: CN=319d8866-80a1-4f3b-a2df-59ce2d032b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:92:d7:06:5d:5b:4e:70:39:67:4d:f7:9b: 38:4a:cb:ea:e9:64:08:09:56:cd:90:35:f2:c5:4d: 89:c4:9f:75:3f:5c:f1:55:b5:e8:53:da:85:1c:b0: 0b:69:b5:fb:4f:02:d3:b4:fd:4a:86:0e:f6:e3:a2: 73:7a:b2:91:1d:44:51:2c:c7:cb:e1:40:4a:1e:fa: d1:a8:27:d8:24:e4:24:7a:54:91:a8:d9:1d:26:a4: 69:b9:0f:46:41:55:bb:48:71:75:75:30:5d:09:1b: 4c:5b:69:6a:47:0b:05:1f:45:a7:50:ce:ea:2b:27: aa:c8:3b:55:e3:3b:78:af:7d:85:0e:d9:5c:19:fd: c7:9e:f8:22:40:0e:70:ae:ca:d1:72:a6:d4:bb:c6: 71:28:08:c0:78:4d:06:02:c2:de:fb:0a:40:70:b7: bc:7d:6b:99:16:69:01:ba:45:b7:d1:69:0f:65:e9: 2c:4d:5d:0e:9c:2c:ed:d2:1c:d8:96:56:49:67:7e: 10:24:2f:f1:76:44:4a:15:0c:21:29:a7:e7:32:0b: 59:ab:64:60:41:46:55:98:7c:7b:73:a2:f9:21:f4: 79:33:18:76:de:52:c5:67:dc:0e:7a:43:a5:bc:03: 2f:70:df:25:18:82:6e:4e:b0:4b:60:a4:aa:04:1b: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:18:57:C7:73:A1:30:60:16:7A:C6:98:19:47:3F:14:94:72:C7:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de9213d6-6ba0-3625-ac9c-03e0d6c25111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d4:e9:16:2d:af:63:e0:70:2b:83:28:0f:0e:bb:a1:61:64: 5f:9c:54:1e:26:9a:f5:26:a5:19:24:b0:fd:ce:0f:4e:c7:37: 24:9f:31:ac:e6:3e:15:83:4c:fb:c7:22:4a:e5:83:4a:d1:02: d0:98:3a:81:c7:fb:7d:b5:3b:17:e1:4e:f2:43:80:b8:9d:22: e9:79:21:c7:91:92:a4:b1:93:7a:24:8a:33:c7:af:7e:81:30: ed:41:70:68:2f:a9:eb:82:1d:fb:79:80:f0:10:f2:58:22:05: 15:85:cb:cc:58:aa:60:1f:06:90:87:25:a0:67:c8:96:80:59: 87:43:a1:9b:27:97:be:15:45:2d:dc:3d:e7:74:49:2e:87:fd: 23:66:10:c6:e4:52:0c:ba:5c:59:c4:69:1f:a6:ec:8f:69:86: 1c:89:2c:54:68:29:d0:72:48:ab:48:23:c7:b5:23:8d:91:a3: 80:ee:17:a4:8b:c1:f0:e2:a5:d4:ba:ee:11:2a:c4:cd:07:f4: 64:0e:01:39:2d:6a:c3:9b:c4:b3:27:1d:0c:4b:95:80:fe:93: f6:96:60:7f:7c:c1:a5:91:22:46:9e:ec:a8:59:3d:ab:f4:05: 4b:90:38:39:74:6c:ef:3e:be:0b:e2:5c:70:81:fd:73:68:16: f6:90:77:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNMkTyQzGp1eJ0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzI0NVoXDTI1MDcyNDA4MzI0NVowLzEtMCsGA1UEAxMk MzE5ZDg4NjYtODBhMS00ZjNiLWEyZGYtNTljZTJkMDMyYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kWS1wZdW05wOWdN95s4Ssvq6WQICVbNkDXy xU2JxJ91P1zxVbXoU9qFHLALabX7TwLTtP1Khg7246JzerKRHURRLMfL4UBKHvrR qCfYJOQkelSRqNkdJqRpuQ9GQVW7SHF1dTBdCRtMW2lqRwsFH0WnUM7qKyeqyDtV 4zt4r32FDtlcGf3HnvgiQA5wrsrRcqbUu8ZxKAjAeE0GAsLe+wpAcLe8fWuZFmkB ukW30WkPZeksTV0OnCzt0hzYllZJZ34QJC/xdkRKFQwhKafnMgtZq2RgQUZVmHx7 c6L5IfR5Mxh23lLFZ9wOekOlvAMvcN8lGIJuTrBLYKSqBBuemQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKsYV8dzoTBgFnrGmBlHPxSUcsdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGU5MjEzZDYtNmJhMC0z NjI1LWFjOWMtMDNlMGQ2YzI1MTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIHU6RYtr2PgcCuDKA8Ou6FhZF+cVB4mmvUmpRkksP3OD07HNySf MazmPhWDTPvHIkrlg0rRAtCYOoHH+321OxfhTvJDgLidIul5IceRkqSxk3okijPH r36BMO1BcGgvqeuCHft5gPAQ8lgiBRWFy8xYqmAfBpCHJaBnyJaAWYdDoZsnl74V RS3cPed0SS6H/SNmEMbkUgy6XFnEaR+m7I9phhyJLFRoKdBySKtII8e1I42Ro4Du F6SLwfDipdS67hEqxM0H9GQOATktasObxLMnHQxLlYD+k/aWYH98waWRIkae7KhZ Pav0BUuQODl0bO8+vgviXHCB/XNoFvaQd38= -----END CERTIFICATE-----Generated at Tue Apr 29 20:32:58 2025 by rpki-client