$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa File: dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa (raw, json) Hash identifier: GMAbF8yqfpA+ZhVdWpp7et533XASIdiSNGbimy58pfA= Subject key identifier: 3E:55:B8:08:E9:07:76:34:6B:F6:B0:97:A6:6E:5C:8C:97:01:1C:F5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A436CD93219BEA5690EB1D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa Signing time: Fri 25 Apr 2025 08:36:49 +0000 ROA not before: Fri 25 Apr 2025 08:36:49 +0000 ROA not after: Thu 24 Jul 2025 08:36:49 +0000 asID: 12041 IP address blocks: 2001:500:53::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:cd:93:21:9b:ea:56:90:eb:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:36:49 2025 GMT Not After : Jul 24 08:36:49 2025 GMT Subject: CN=00eee1b9-b436-4660-9708-c0925bb1a82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:bb:8e:cc:89:f1:47:86:81:46:b3:2a:d3: ab:cb:51:ea:3f:2c:53:9c:8a:a0:cd:48:1c:1c:88: 6f:22:df:4d:a6:e7:58:15:00:c2:52:dd:c1:77:fe: 24:49:68:17:bf:18:8b:fb:9d:77:1d:d3:18:8e:e5: d9:a8:9c:4e:79:64:ed:ce:90:fe:e0:66:6e:39:dc: 58:33:0a:f0:28:f9:63:72:53:93:c4:29:c9:ab:30: dd:be:ab:33:e2:e3:66:ff:46:01:ee:33:4f:6a:13: ee:9e:ab:b7:eb:a2:08:08:48:00:8a:52:b6:42:a8: 99:bc:04:6a:6e:72:0c:24:18:f4:db:ac:ad:63:9a: 81:e0:c8:76:ce:a6:78:91:82:c6:e9:c0:e6:e0:d4: 00:32:de:1a:e0:22:ae:79:2c:4c:5a:1c:2b:9b:d8: 64:de:df:7a:1f:fc:fe:a6:62:f7:b7:02:d3:68:44: 4f:22:f4:bf:8f:b7:6e:b0:2c:ea:a1:b7:dc:98:57: b3:68:14:4e:72:fe:69:35:9c:0d:38:cb:2d:fa:43: 53:1c:40:84:90:36:a7:59:a0:50:78:60:0a:dc:c8: 2e:9c:6e:5f:f2:67:fe:28:00:c6:84:9b:31:2e:07: 8f:7a:d3:92:7b:58:02:a7:1f:b7:06:dc:fe:ec:a2: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:55:B8:08:E9:07:76:34:6B:F6:B0:97:A6:6E:5C:8C:97:01:1C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/dec554fa-c1aa-3c06-9f62-6d8ed708df23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:53::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:54:be:2d:2c:86:15:21:38:4c:82:75:f8:ca:76:17:ba:9b: 5c:d0:c9:b3:50:f9:b7:88:aa:01:e3:46:5b:91:8c:5e:33:7d: 1e:a9:45:b8:16:89:5a:49:c9:06:5c:e6:67:f2:81:17:2d:37: 89:9c:f9:8e:3b:3d:60:f0:af:c8:48:60:81:bc:8f:b5:fb:58: 00:6b:6b:86:8a:70:5b:73:99:78:74:43:f1:96:09:52:05:3a: 3a:ca:eb:e7:36:c6:d7:f8:d3:58:00:83:80:62:23:6e:2b:fa: fb:e7:fb:7c:40:d6:f7:8c:73:78:86:6c:55:b3:06:be:c0:e3: 0b:6b:cf:b9:e8:b2:91:0c:9b:c3:27:7a:db:bb:40:53:97:24: c8:98:c9:60:2d:6a:0f:b2:bf:71:97:be:47:ca:33:d1:b8:f7: f1:45:37:85:ac:e6:2a:df:4a:63:b0:9a:e3:df:ca:76:01:87: 51:2b:44:01:4a:2e:c9:3e:34:ee:a0:08:77:08:82:e1:16:44: e7:b6:5e:ba:2f:7d:57:58:9e:d1:df:f1:41:59:20:c0:a8:5b: 3d:93:ec:3f:66:77:5e:80:0a:0f:76:be:96:6c:ac:90:d1:23: 8d:12:6a:87:54:a3:d3:68:5a:e9:c3:71:4f:0e:f5:37:42:e7: 6e:79:ec:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNs2TIZvqVpDrHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzY0OVoXDTI1MDcyNDA4MzY0OVowLzEtMCsGA1UEAxMk MDBlZWUxYjktYjQzNi00NjYwLTk3MDgtYzA5MjViYjFhODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvK7jsyJ8UeGgUazKtOry1HqPyxTnIqgzUgc HIhvIt9NpudYFQDCUt3Bd/4kSWgXvxiL+513HdMYjuXZqJxOeWTtzpD+4GZuOdxY MwrwKPljclOTxCnJqzDdvqsz4uNm/0YB7jNPahPunqu366IICEgAilK2QqiZvARq bnIMJBj026ytY5qB4Mh2zqZ4kYLG6cDm4NQAMt4a4CKueSxMWhwrm9hk3t96H/z+ pmL3twLTaERPIvS/j7dusCzqobfcmFezaBROcv5pNZwNOMst+kNTHECEkDanWaBQ eGAK3MgunG5f8mf+KADGhJsxLgePetOSe1gCpx+3Btz+7KIhGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD5VuAjpB3Y0a/awl6ZuXIyXARz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGVjNTU0ZmEtYzFhYS0z YzA2LTlmNjItNmQ4ZWQ3MDhkZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZUvi0shhUhOEyCdfjKdhe6m1zQybNQ+beIqgHjRluRjF4zfR6p RbgWiVpJyQZc5mfygRctN4mc+Y47PWDwr8hIYIG8j7X7WABra4aKcFtzmXh0Q/GW CVIFOjrK6+c2xtf401gAg4BiI24r+vvn+3xA1veMc3iGbFWzBr7A4wtrz7nospEM m8Mnetu7QFOXJMiYyWAtag+yv3GXvkfKM9G49/FFN4Ws5irfSmOwmuPfynYBh1Er RAFKLsk+NO6gCHcIguEWROe2XrovfVdYntHf8UFZIMCoWz2T7D9md16ACg92vpZs rJDRI40SaodUo9NoWunDcU8O9TdC52557LY= -----END CERTIFICATE-----Generated at Tue Apr 29 14:32:34 2025 by rpki-client