$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa File: f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa (raw, json) Hash identifier: MGYTG1bNPeA7gejBRnxDkVGzOzFBxYvi2TNfFnMeImQ= Subject key identifier: 35:80:F2:1E:CC:7C:B6:81:F2:2B:09:57:88:F8:63:B2:1E:0B:D7:24 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849CE9A357E3A16BE1A5A871FC7 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13901 IP address blocks: 2001:500:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:35:7e:3a:16:be:1a:5a:87:1f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=675bcadc-5651-4a64-a455-c231e8a92a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:96:42:a9:25:bc:15:90:c1:76:a7:0d:8a:ca: 46:c6:97:1a:66:13:a2:9a:00:5f:1c:0a:21:2a:58: 46:f5:92:36:a9:e0:5b:a2:8e:b2:1f:f7:f0:33:89: 21:00:7f:2b:63:f4:8d:dc:47:9b:57:bb:88:9d:7d: d0:49:ac:c3:38:94:11:73:7b:3b:e4:04:42:b9:31: 5f:66:cc:5e:78:a2:ff:db:d6:17:9f:7b:1f:4b:66: 6b:8c:ee:22:fb:13:6d:fe:b3:4a:9f:31:52:31:06: cd:1d:04:ed:9d:d2:c1:39:20:f4:5d:60:96:7b:25: bf:31:f0:99:a5:be:df:cd:24:16:b1:c1:dc:c8:66: 71:1d:bd:cb:4a:6c:3d:88:15:15:41:4b:2a:94:c9: 75:47:9f:ea:2b:29:ce:86:0e:93:fd:ae:16:ba:3c: bf:95:2d:48:85:fd:c0:80:2f:a7:a4:f9:e7:a0:e0: d5:41:63:05:99:e0:0f:2f:da:44:0e:7d:84:15:8b: be:1e:06:86:92:92:37:d6:cc:2d:dd:1a:a2:3f:50: 24:0e:c4:11:9c:22:47:cb:23:07:e1:18:85:30:9a: 1a:53:71:75:bb:ed:29:4e:b8:ab:d8:45:e2:a5:ee: e9:46:d4:af:65:4c:aa:51:6b:47:a9:2f:03:3a:ca: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:80:F2:1E:CC:7C:B6:81:F2:2B:09:57:88:F8:63:B2:1E:0B:D7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:97:f8:88:fe:60:61:31:c2:b7:29:98:30:bf:1a:77:7b:c5: 92:0d:8c:51:e0:c5:dc:a9:a1:03:47:f8:fb:d8:71:13:1d:ea: 52:b3:29:1f:55:5a:4a:c4:1e:e9:c0:ad:da:88:72:c4:47:82: 30:b5:fb:4f:6c:7b:58:0d:09:ab:29:c8:96:9a:8f:3d:f3:f8: d0:5b:d3:df:8c:9a:ae:fa:88:72:3f:dc:6f:fb:77:35:42:ad: a9:0e:20:6f:0f:83:6a:ab:68:92:1e:62:2e:63:9e:5d:e0:d9: 3a:ee:82:ec:ea:61:db:5c:25:16:78:f6:09:5d:27:da:ab:2f: 72:70:06:fd:90:d5:b5:f0:02:fb:19:54:a9:d1:d3:cf:a2:e0: fa:60:cf:e0:f2:4f:27:68:65:ff:86:3f:1b:ca:62:b1:1a:16: 1b:0c:eb:76:b0:8f:fc:36:50:d9:ca:12:e0:fc:c7:75:01:83: cd:98:86:a8:56:a1:11:1c:8f:1b:79:6e:ac:86:e6:41:a4:95: 4c:15:9d:89:cc:47:61:28:1a:bf:de:c5:0c:e3:09:2a:6e:65: 81:ac:92:b5:99:44:cc:b5:e3:b5:45:56:60:57:98:b9:d5:61: 13:d9:0b:ef:89:47:a5:35:d0:80:2d:e9:6c:5d:5a:c5:e1:bb: 04:4e:cf:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmjV+Oha+GlqHH8cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk Njc1YmNhZGMtNTY1MS00YTY0LWE0NTUtYzIzMWU4YTkyYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZZCqSW8FZDBdqcNispGxpcaZhOimgBfHAoh KlhG9ZI2qeBboo6yH/fwM4khAH8rY/SN3EebV7uInX3QSazDOJQRc3s75ARCuTFf ZsxeeKL/29YXn3sfS2ZrjO4i+xNt/rNKnzFSMQbNHQTtndLBOSD0XWCWeyW/MfCZ pb7fzSQWscHcyGZxHb3LSmw9iBUVQUsqlMl1R5/qKynOhg6T/a4Wujy/lS1Ihf3A gC+npPnnoODVQWMFmeAPL9pEDn2EFYu+HgaGkpI31swt3RqiP1AkDsQRnCJHyyMH 4RiFMJoaU3F1u+0pTrir2EXipe7pRtSvZUyqUWtHqS8DOsovJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDWA8h7MfLaB8isJV4j4Y7IeC9ckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjBhNjQyNjYtZmFmZS0z NTUzLThiYjEtODliYjljMWE3M2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKX+Ij+YGExwrcpmDC/Gnd7xZINjFHgxdypoQNH+PvYcRMd6lKz KR9VWkrEHunArdqIcsRHgjC1+09se1gNCaspyJaajz3z+NBb09+Mmq76iHI/3G/7 dzVCrakOIG8Pg2qraJIeYi5jnl3g2TruguzqYdtcJRZ49gldJ9qrL3JwBv2Q1bXw AvsZVKnR08+i4Ppgz+DyTydoZf+GPxvKYrEaFhsM63awj/w2UNnKEuD8x3UBg82Y hqhWoREcjxt5bqyG5kGklUwVnYnMR2EoGr/exQzjCSpuZYGskrWZRMy147VFVmBX mLnVYRPZC++JR6U10IAt6WxdWsXhuwROz3E= -----END CERTIFICATE-----Generated at Mon Jun 16 13:05:20 2025 by rpki-client