$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa File: f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa (raw, json) Hash identifier: +TiumtCY/1UW/LmdA2c5FToYQZxDmn+7R/HDOX2Ujs8= Subject key identifier: BF:32:E5:C4:F0:35:E9:9B:18:88:48:72:9E:84:E4:89:AC:88:7E:20 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A43518876C4D2BF84143A700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa Signing time: Fri 25 Apr 2025 08:33:23 +0000 ROA not before: Fri 25 Apr 2025 08:33:23 +0000 ROA not after: Thu 24 Jul 2025 08:33:23 +0000 asID: 12041 IP address blocks: 2001:500:da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:18:87:6c:4d:2b:f8:41:43:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:23 2025 GMT Not After : Jul 24 08:33:23 2025 GMT Subject: CN=a648768d-23fe-4a2c-a139-cbc66c40938e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:94:ec:f2:1d:a1:1f:0b:f3:3c:84:ef:96:fa: 53:bd:94:e2:49:19:32:12:57:a9:ef:35:e1:60:96: 86:e0:36:99:5f:b5:a2:6f:5f:23:e9:07:8b:85:ab: ca:5d:9b:fa:3c:6d:53:50:5b:ec:d8:d4:d4:5d:c1: 98:7c:36:61:ac:d0:63:30:39:b9:3e:40:98:31:c2: 11:27:e0:2c:e6:d3:e2:2d:11:d3:26:3a:4b:38:30: 00:99:de:b0:ed:bc:39:9c:4c:7e:fc:92:69:24:3a: 7b:22:3a:b9:29:26:82:85:18:55:5b:73:ad:1f:fd: 61:45:f6:3c:2d:26:ac:42:db:f2:64:84:38:c9:a9: b9:62:3d:7e:b8:2a:46:89:0d:f4:ee:84:7e:d9:d7: 53:f5:66:ac:32:18:fd:9b:47:6f:60:73:91:01:9f: f3:67:82:d2:d8:a0:d8:6c:49:d2:10:73:f0:aa:34: e1:07:c0:81:3c:7e:d5:5e:24:15:b9:65:94:c3:95: a0:cb:9b:a4:50:24:8a:f8:a2:df:ab:8f:da:ad:e1: 82:59:ea:ff:e1:de:fb:18:15:18:d6:51:99:46:64: e5:da:0f:81:63:84:40:56:73:8f:7f:e7:04:c7:1e: 07:f1:44:10:e1:20:31:ba:fc:40:c8:6f:ad:b6:b2: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:32:E5:C4:F0:35:E9:9B:18:88:48:72:9E:84:E4:89:AC:88:7E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f082116a-4c1d-3cd2-85e1-2c283a2d1abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a1:30:94:a9:57:ef:62:54:fd:76:8a:a3:15:85:2e:bd:0f: d6:34:90:5d:4e:0f:58:c7:6c:d4:c7:38:b9:9e:00:6d:94:02: 82:b5:83:21:37:8c:7c:ce:ab:74:1b:0d:0d:46:c0:a1:7d:e8: c4:97:ed:b6:69:d0:be:68:15:7b:8d:2e:ae:54:e5:1b:ab:ad: 6d:12:48:60:4b:ef:f7:ab:f3:75:66:3d:a3:a6:19:56:b6:fa: ef:0e:ce:55:29:0e:eb:98:b3:0c:f4:97:b9:b6:43:dd:ca:d4: e1:b4:95:1e:4d:0b:d5:88:d4:53:36:69:ae:c5:56:4c:87:ff: 8a:40:1a:5d:80:db:04:e8:b1:d0:80:6d:0e:32:a9:2f:6d:8d: d7:25:a7:d8:24:ea:c2:2e:6f:a4:8a:25:5d:fb:93:0e:1f:30: 5a:9b:af:8e:c1:c9:20:f5:3e:fa:42:1d:34:33:a3:e9:53:56: bb:2e:33:3a:5e:14:9d:ac:3e:41:3c:9c:07:6c:28:cf:34:a3: 3e:f8:98:67:27:1e:bf:c4:9d:c8:c5:15:be:c1:85:23:8d:2b: 75:d1:09:33:1b:aa:fe:bd:cd:64:ee:ca:1e:38:33:df:00:f4: 62:9e:86:f1:c4:58:9c:61:c5:51:74:bb:11:1d:7d:9c:01:8a: 37:1c:3c:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNRiHbE0r+EFDpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzMyM1oXDTI1MDcyNDA4MzMyM1owLzEtMCsGA1UEAxMk YTY0ODc2OGQtMjNmZS00YTJjLWExMzktY2JjNjZjNDA5MzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpTs8h2hHwvzPITvlvpTvZTiSRkyElep7zXh YJaG4DaZX7Wib18j6QeLhavKXZv6PG1TUFvs2NTUXcGYfDZhrNBjMDm5PkCYMcIR J+As5tPiLRHTJjpLODAAmd6w7bw5nEx+/JJpJDp7Ijq5KSaChRhVW3OtH/1hRfY8 LSasQtvyZIQ4yam5Yj1+uCpGiQ307oR+2ddT9WasMhj9m0dvYHORAZ/zZ4LS2KDY bEnSEHPwqjThB8CBPH7VXiQVuWWUw5Wgy5ukUCSK+KLfq4/areGCWer/4d77GBUY 1lGZRmTl2g+BY4RAVnOPf+cExx4H8UQQ4SAxuvxAyG+ttrLJRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL8y5cTwNembGIhIcp6E5ImsiH4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjA4MjExNmEtNGMxZC0z Y2QyLTg1ZTEtMmMyODNhMmQxYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIyhMJSpV+9iVP12iqMVhS69D9Y0kF1OD1jHbNTHOLmeAG2UAoK1 gyE3jHzOq3QbDQ1GwKF96MSX7bZp0L5oFXuNLq5U5RurrW0SSGBL7/er83VmPaOm GVa2+u8OzlUpDuuYswz0l7m2Q93K1OG0lR5NC9WI1FM2aa7FVkyH/4pAGl2A2wTo sdCAbQ4yqS9tjdclp9gk6sIub6SKJV37kw4fMFqbr47BySD1PvpCHTQzo+lTVrsu MzpeFJ2sPkE8nAdsKM80oz74mGcnHr/EncjFFb7BhSONK3XRCTMbqv69zWTuyh44 M98A9GKehvHEWJxhxVF0uxEdfZwBijccPPA= -----END CERTIFICATE-----Generated at Wed Apr 30 05:38:53 2025 by rpki-client