$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa File: f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa (raw, json) Hash identifier: bvHmz+H9nrS6LkmBIsfF4BqxH3dbVy+3xmYcC2uv854= Subject key identifier: 49:99:A5:92:CB:07:7C:24:CD:95:AD:F7:E5:93:73:FB:9D:B4:82:EB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285848EECA22B3B0402553CD2F4E00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa Signing time: Wed 19 Feb 2025 08:56:33 +0000 ROA not before: Wed 19 Feb 2025 08:56:33 +0000 ROA not after: Tue 20 May 2025 07:56:33 +0000 asID: 13901 IP address blocks: 2001:500:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ee:ca:22:b3:b0:40:25:53:cd:2f:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Feb 19 08:56:33 2025 GMT Not After : May 20 07:56:33 2025 GMT Subject: CN=7601f916-cf70-4c12-b80a-12003007b446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:88:9c:c1:bd:6c:ee:45:22:9f:cb:56:ed: 7c:48:f1:ca:37:fd:0b:65:95:89:d9:e7:22:03:f1: 0c:7d:ba:87:13:ce:cc:96:97:7f:ac:6f:aa:f1:9e: 1b:b5:d0:c0:f5:94:69:88:70:ca:12:84:ee:19:ea: aa:a4:28:08:3e:93:2f:d4:7b:51:a5:bb:77:9e:d2: 17:b1:76:3a:1a:6e:6d:f7:e4:e3:41:46:b0:66:c3: fb:4a:8a:f2:4a:0a:af:76:97:34:ca:ea:2f:8f:46: 47:f2:01:8f:0a:65:36:24:ea:a9:f2:e9:be:08:5a: 7f:28:19:6d:5a:98:c3:89:93:92:c8:f9:ee:40:b7: 05:23:af:43:d1:98:3a:d9:8b:75:aa:f2:0c:7c:1b: 8a:2a:74:27:8a:c3:e6:84:67:6c:af:f3:a1:a9:8c: 32:9f:17:94:5e:fa:cd:35:0e:21:f8:d5:e5:3b:c4: 0b:ad:f9:68:ca:04:a2:5e:60:f5:10:d7:3a:e0:69: 74:18:a9:7f:01:ea:45:44:0b:84:02:a0:8b:62:1f: 7a:27:ab:2b:ce:61:64:75:85:60:6b:3d:f7:24:c1: ff:9b:67:16:23:ad:e6:6d:8d:31:d2:2a:7f:44:7c: 4b:f7:aa:2e:5e:4d:be:56:1b:a9:ec:83:01:fa:59: 89:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:99:A5:92:CB:07:7C:24:CD:95:AD:F7:E5:93:73:FB:9D:B4:82:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0a64266-fafe-3553-8bb1-89bb9c1a73c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ea:a5:4d:78:20:7b:bb:0a:90:27:13:73:e8:87:5b:6c:b5: 1e:09:e5:35:b5:bb:56:ab:42:c5:b7:6e:b8:ec:70:40:81:5f: 58:a6:26:a8:6f:8d:a5:77:82:fa:d5:3c:91:78:3c:74:fc:a3: c0:33:da:ec:97:fa:31:f4:3f:17:73:03:5b:42:d5:6d:40:d4: 4e:d6:43:2e:ee:de:b9:bc:2c:bf:a2:f6:88:0a:d6:2d:f7:63: 27:04:0f:4d:9a:ee:a9:65:4e:9d:12:a7:95:1b:0e:a9:a8:7c: 5a:25:ca:2b:e5:b8:e2:6d:59:32:33:2b:7e:4c:02:05:21:e5: 9c:f4:d5:90:a0:d1:6b:8a:95:09:92:56:66:b5:a5:ec:83:76: e2:82:58:1e:e8:aa:fd:1a:97:72:53:1f:14:83:83:31:2d:c5: 4d:24:61:f6:68:b0:58:38:ba:e5:32:95:fd:d1:07:ca:3a:62: b6:09:ca:1a:a7:43:b8:0f:04:3c:92:e5:f5:e0:f9:e2:e8:5e: 86:12:f5:23:43:f0:4f:07:35:e2:be:91:d2:0d:85:fa:76:a8: 09:37:ce:0a:a0:54:1c:96:20:65:74:bf:64:1a:70:c2:17:cf: 1c:b1:67:b7:58:0a:c5:07:4c:4c:cc:55:bd:d8:88:68:0b:53: d8:ae:c1:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjuyiKzsEAlU80vTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDIxOTA4NTYzM1oXDTI1MDUyMDA3NTYzM1owLzEtMCsGA1UEAxMk NzYwMWY5MTYtY2Y3MC00YzEyLWI4MGEtMTIwMDMwMDdiNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmeInMG9bO5FIp/LVu18SPHKN/0LZZWJ2eci A/EMfbqHE87Mlpd/rG+q8Z4btdDA9ZRpiHDKEoTuGeqqpCgIPpMv1HtRpbt3ntIX sXY6Gm5t9+TjQUawZsP7SorySgqvdpc0yuovj0ZH8gGPCmU2JOqp8um+CFp/KBlt WpjDiZOSyPnuQLcFI69D0Zg62Yt1qvIMfBuKKnQnisPmhGdsr/OhqYwynxeUXvrN NQ4h+NXlO8QLrfloygSiXmD1ENc64Gl0GKl/AepFRAuEAqCLYh96J6srzmFkdYVg az33JMH/m2cWI63mbY0x0ip/RHxL96ouXk2+Vhup7IMB+lmJOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEmZpZLLB3wkzZWt9+WTc/udtILrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjBhNjQyNjYtZmFmZS0z NTUzLThiYjEtODliYjljMWE3M2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE3qpU14IHu7CpAnE3Poh1tstR4J5TW1u1arQsW3brjscECBX1im JqhvjaV3gvrVPJF4PHT8o8Az2uyX+jH0PxdzA1tC1W1A1E7WQy7u3rm8LL+i9ogK 1i33YycED02a7qllTp0Sp5UbDqmofFolyivluOJtWTIzK35MAgUh5Zz01ZCg0WuK lQmSVma1peyDduKCWB7oqv0al3JTHxSDgzEtxU0kYfZosFg4uuUylf3RB8o6YrYJ yhqnQ7gPBDyS5fXg+eLoXoYS9SND8E8HNeK+kdINhfp2qAk3zgqgVByWIGV0v2Qa cMIXzxyxZ7dYCsUHTEzMVb3YiGgLU9iuwUc= -----END CERTIFICATE-----Generated at Tue Apr 29 21:07:02 2025 by rpki-client