$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e109de6d-8211-3cfd-890e-cf8ec51922e0.roa File: e109de6d-8211-3cfd-890e-cf8ec51922e0.roa (raw, json) Hash identifier: QdyNmtyWlUzixvdQfKbTb0xFFIXh3SD8KiEc3C+35Tk= Subject key identifier: 22:FD:9A:12:00:F3:D0:89:DA:BB:D8:D6:BB:06:F0:1E:14:95:88:FA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A435EB6892C08AF34A12CB00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e109de6d-8211-3cfd-890e-cf8ec51922e0.roa Signing time: Fri 25 Apr 2025 08:35:02 +0000 ROA not before: Fri 25 Apr 2025 08:35:02 +0000 ROA not after: Thu 24 Jul 2025 08:35:02 +0000 asID: 12041 IP address blocks: 2001:500:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:eb:68:92:c0:8a:f3:4a:12:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:35:02 2025 GMT Not After : Jul 24 08:35:02 2025 GMT Subject: CN=9c67f29a-efa8-4f03-a1fb-f106b83bfd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:5f:84:7d:e8:b3:3e:ce:0c:43:30:df:26: 69:a9:8d:95:67:3e:aa:6d:8a:91:bd:24:28:62:2c: 3c:26:a2:92:7a:6f:71:de:28:8b:7d:45:e4:d0:8d: f6:4c:aa:29:d0:6c:0b:67:35:74:bf:2d:4d:45:58: 4b:b2:56:6c:15:9e:3a:b0:21:09:49:d8:e0:b6:11: b1:85:0c:7f:54:8c:8d:9c:88:64:28:d2:15:92:24: b1:02:c9:3f:cd:97:9f:99:8e:02:23:7f:2f:93:bc: 10:7d:75:b9:bf:ad:a0:a9:c7:57:8b:b1:2d:1f:0c: 9f:37:fc:92:6a:0f:47:51:c8:46:95:51:a2:68:17: 65:a1:e6:58:c6:96:26:2f:18:a2:dc:32:76:59:8d: a6:31:f6:0d:e2:fd:8d:0a:18:ae:b0:9e:a1:c8:66: 9c:35:c9:b1:0d:8f:a5:fe:d7:ea:69:f5:d0:2b:a2: 96:ca:f6:f8:04:fe:78:ef:a4:ce:60:7f:bd:29:e3: 3b:bf:e6:10:64:e3:6f:20:8c:5d:6c:03:73:d0:e0: 6c:01:73:5f:a4:77:80:4a:ba:8c:7e:f2:e8:02:84: 92:20:44:46:e6:47:b5:21:27:b3:2e:18:8d:d5:21: 5f:fa:57:1b:51:99:ef:d3:f3:0d:6b:2b:46:2e:57: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:9A:12:00:F3:D0:89:DA:BB:D8:D6:BB:06:F0:1E:14:95:88:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e109de6d-8211-3cfd-890e-cf8ec51922e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:44:dc:03:ba:60:9f:8a:67:b3:2b:22:83:76:95:ec:30:c6: b2:f3:32:73:1d:fa:7f:40:bc:f9:83:e7:bf:94:0a:33:13:2f: f4:35:eb:f4:90:0e:83:5e:d8:9e:63:30:df:87:b2:21:2e:3d: 2d:3e:c2:3f:53:db:ad:fc:01:df:e1:62:f7:0e:99:20:4d:39: a6:f2:42:64:99:f7:f2:71:7f:df:58:ef:b0:06:81:92:15:c8: 42:6f:52:0e:ea:7b:39:c1:fd:75:23:b7:02:09:66:85:0b:76: 7f:cf:6d:50:a6:d9:0e:0c:9e:d0:7d:a1:76:ae:ab:cb:45:c6: 6f:94:70:5f:a8:0b:7d:53:62:ca:73:2f:67:a1:11:1f:9d:11: 5b:4c:c0:fb:ce:9f:10:2f:cd:71:04:10:dd:5a:ae:6d:01:6c: d0:59:54:83:04:ab:9a:24:32:43:f2:e5:18:e6:b4:53:c5:4c: 24:c3:0e:d9:ca:4c:f5:24:e6:8c:14:72:a6:46:ef:68:3b:7e: 1d:04:99:03:86:94:03:59:69:db:33:17:eb:83:9a:6f:aa:c1: 4b:02:85:ab:bd:73:2d:0e:15:18:4d:52:23:60:55:57:6d:1d: f1:e4:05:9b:f8:a9:32:4f:b0:31:81:53:cd:d8:7d:b6:d0:e5: 25:4b:e6:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNetoksCK80oSywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzUwMloXDTI1MDcyNDA4MzUwMlowLzEtMCsGA1UEAxMk OWM2N2YyOWEtZWZhOC00ZjAzLWExZmItZjEwNmI4M2JmZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkhfhH3osz7ODEMw3yZpqY2VZz6qbYqRvSQo Yiw8JqKSem9x3iiLfUXk0I32TKop0GwLZzV0vy1NRVhLslZsFZ46sCEJSdjgthGx hQx/VIyNnIhkKNIVkiSxAsk/zZefmY4CI38vk7wQfXW5v62gqcdXi7EtHwyfN/yS ag9HUchGlVGiaBdloeZYxpYmLxii3DJ2WY2mMfYN4v2NChiusJ6hyGacNcmxDY+l /tfqafXQK6KWyvb4BP5476TOYH+9KeM7v+YQZONvIIxdbANz0OBsAXNfpHeASrqM fvLoAoSSIERG5ke1ISezLhiN1SFf+lcbUZnv0/MNaytGLlfSiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCL9mhIA89CJ2rvY1rsG8B4UlYj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTEwOWRlNmQtODIxMS0z Y2ZkLTg5MGUtY2Y4ZWM1MTkyMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD1E3AO6YJ+KZ7MrIoN2lewwxrLzMnMd+n9AvPmD57+UCjMTL/Q1 6/SQDoNe2J5jMN+HsiEuPS0+wj9T2638Ad/hYvcOmSBNOabyQmSZ9/Jxf99Y77AG gZIVyEJvUg7qeznB/XUjtwIJZoULdn/PbVCm2Q4MntB9oXauq8tFxm+UcF+oC31T YspzL2ehER+dEVtMwPvOnxAvzXEEEN1arm0BbNBZVIMEq5okMkPy5RjmtFPFTCTD DtnKTPUk5owUcqZG72g7fh0EmQOGlANZadszF+uDmm+qwUsChau9cy0OFRhNUiNg VVdtHfHkBZv4qTJPsDGBU83YfbbQ5SVL5r8= -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:21 2025 by rpki-client