$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ec88900c-64b6-34e1-a603-b34015c59fde.roa File: ec88900c-64b6-34e1-a603-b34015c59fde.roa (raw, json) Hash identifier: Gd54e4O2OY7tCjKLdipD+Q80cQ/8E8BHA9NzxuO7060= Subject key identifier: BE:09:65:72:66:9F:BA:BC:C6:6F:CE:4A:E7:24:56:17:DA:54:04:8F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A23E6A5E605E9FED8BEAEF40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ec88900c-64b6-34e1-a603-b34015c59fde.roa Signing time: Thu 24 Apr 2025 15:40:32 +0000 ROA not before: Thu 24 Apr 2025 15:40:32 +0000 ROA not after: Wed 23 Jul 2025 15:40:32 +0000 asID: 207266 IP address blocks: 2001:500:e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:3e:6a:5e:60:5e:9f:ed:8b:ea:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 15:40:32 2025 GMT Not After : Jul 23 15:40:32 2025 GMT Subject: CN=ab9d1d14-5575-4e12-bda5-04365ea8e69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3e:2c:3e:21:72:72:b3:a2:6a:fa:9c:b4:cd: 29:73:f4:91:da:34:d8:fd:ac:1f:89:cb:91:a2:ac: f0:37:f0:c9:c4:72:29:2e:c6:11:ed:29:fb:ad:30: a1:4a:d9:fc:5a:74:d7:9c:fc:19:d2:b8:9a:0e:86: 45:5c:5c:33:f3:e4:66:fb:3d:c4:5d:06:db:c7:1c: 89:b1:b4:6d:aa:07:4b:27:de:d2:f9:63:46:51:68: 3f:b9:78:20:46:ed:1d:9f:4e:9b:6b:cf:86:96:ac: 0c:58:2f:d0:b2:b3:14:fa:4c:5c:7a:91:7e:28:32: d7:ff:39:d7:d3:1f:09:b7:7d:0c:f3:87:4e:fb:28: 86:c3:3b:de:d3:f4:5b:4e:79:9b:7a:cb:b1:e2:f1: b7:1c:e8:46:bc:55:3e:48:a6:bc:75:29:fe:3f:15: 9f:3e:27:11:87:8f:b4:59:06:31:ed:82:3b:7a:f9: fc:69:6f:b3:6c:07:5f:e5:b3:3d:65:5d:65:1d:54: 71:c1:6d:5f:78:ed:f3:78:f5:d1:7e:72:52:8f:5b: 45:d6:4d:d5:d2:f8:3b:32:90:07:8d:aa:4d:a4:59: ad:5d:5b:0e:26:76:e0:ce:0a:bc:ed:2f:90:b3:34: 3a:8d:dc:df:08:44:92:ad:62:d0:d1:72:93:15:96: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:09:65:72:66:9F:BA:BC:C6:6F:CE:4A:E7:24:56:17:DA:54:04:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ec88900c-64b6-34e1-a603-b34015c59fde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:1d:18:6c:b2:39:50:c6:7b:91:17:ca:a1:91:32:58:83:b0: 55:9c:e1:63:55:46:a4:8e:09:fe:32:3c:c4:83:99:d3:96:69: 55:1f:db:36:4e:16:ba:33:a9:06:d2:e2:92:40:80:7b:d2:75: 4d:7c:08:d1:61:9a:b5:3a:4b:7d:8e:4b:54:db:83:e7:54:05: b2:06:58:c8:b1:6a:c5:8b:4f:33:79:62:8f:17:0d:45:80:53: b6:ab:b9:5f:31:54:b1:7f:64:56:3d:7f:b9:c1:a0:8e:1c:2e: 18:e3:35:69:11:70:fb:f3:d7:75:01:19:b3:0a:31:e1:84:55: 8b:c0:39:33:8c:a1:46:b4:5b:7e:77:4f:57:a2:0d:c7:51:e7: ee:fe:9d:58:90:9c:d8:72:36:f7:70:ca:0e:c7:17:7b:db:3b: 13:a0:6c:49:05:b6:54:5f:f7:a1:bf:81:b7:4f:72:e8:9d:cf: cc:ef:27:68:ea:95:2e:c2:2f:5f:6b:0f:fa:f9:13:e1:0e:b2: 75:ac:7f:ea:10:5c:0d:74:fc:68:a2:77:47:f6:8c:85:c8:c5: ac:24:b5:7f:a8:cd:36:35:0c:14:96:92:e1:ba:1f:5a:3b:3d: 4a:52:2d:a5:64:77:6c:ea:b3:d2:5d:7e:d7:a3:ec:a4:46:92: 82:68:eb:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmiPmpeYF6f7Yvq70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE1NDAzMloXDTI1MDcyMzE1NDAzMlowLzEtMCsGA1UEAxMk YWI5ZDFkMTQtNTU3NS00ZTEyLWJkYTUtMDQzNjVlYThlNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8D4sPiFycrOiavqctM0pc/SR2jTY/awficuR oqzwN/DJxHIpLsYR7Sn7rTChStn8WnTXnPwZ0riaDoZFXFwz8+Rm+z3EXQbbxxyJ sbRtqgdLJ97S+WNGUWg/uXggRu0dn06ba8+GlqwMWC/QsrMU+kxcepF+KDLX/znX 0x8Jt30M84dO+yiGwzve0/RbTnmbesux4vG3HOhGvFU+SKa8dSn+PxWfPicRh4+0 WQYx7YI7evn8aW+zbAdf5bM9ZV1lHVRxwW1feO3zePXRfnJSj1tF1k3V0vg7MpAH japNpFmtXVsOJnbgzgq87S+QszQ6jdzfCESSrWLQ0XKTFZam5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL4JZXJmn7q8xm/OSuckVhfaVASPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWM4ODkwMGMtNjRiNi0z NGUxLWE2MDMtYjM0MDE1YzU5ZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUdGGyyOVDGe5EXyqGRMliDsFWc4WNVRqSOCf4yPMSDmdOWaVUf 2zZOFrozqQbS4pJAgHvSdU18CNFhmrU6S32OS1Tbg+dUBbIGWMixasWLTzN5Yo8X DUWAU7aruV8xVLF/ZFY9f7nBoI4cLhjjNWkRcPvz13UBGbMKMeGEVYvAOTOMoUa0 W353T1eiDcdR5+7+nViQnNhyNvdwyg7HF3vbOxOgbEkFtlRf96G/gbdPcuidz8zv J2jqlS7CL19rD/r5E+EOsnWsf+oQXA10/Giid0f2jIXIxawktX+ozTY1DBSWkuG6 H1o7PUpSLaVkd2zqs9Jdftej7KRGkoJo62w= -----END CERTIFICATE-----Generated at Wed Apr 30 03:47:53 2025 by rpki-client