$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa File: f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa (raw, json) Hash identifier: cPIuQoo+QzuK/rPbdkRnjzpe9RZ9p5NjPk3noNxQ42M= Subject key identifier: E2:F0:B7:9B:05:C3:B5:87:7E:C8:9F:75:F0:6B:3C:B9:06:7A:2B:20 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A23E1FEE6D5B8F974F505700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa Signing time: Thu 24 Apr 2025 15:39:57 +0000 ROA not before: Thu 24 Apr 2025 15:39:57 +0000 ROA not after: Wed 23 Jul 2025 15:39:57 +0000 asID: 207266 IP address blocks: 2001:500:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:3e:1f:ee:6d:5b:8f:97:4f:50:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 15:39:57 2025 GMT Not After : Jul 23 15:39:57 2025 GMT Subject: CN=22f56441-b886-4d4a-922f-058d5d9cdfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:23:18:01:9c:12:e0:71:53:84:1d:0c:0f:a6: 81:c9:a8:c9:c2:97:b5:08:65:c8:a5:38:91:d1:10: e0:3c:73:0a:36:92:c3:8b:9e:c3:fb:22:23:db:9c: 70:6e:87:72:3d:cc:5f:77:35:4b:b5:41:be:20:61: 9b:eb:80:09:f8:50:7a:3b:92:6d:9d:35:d0:b3:c5: 27:56:e7:7a:18:4c:a1:a1:27:0f:00:dc:a9:03:d3: c4:4e:55:0a:ba:6e:b2:b9:af:d7:04:19:07:d3:68: ca:48:c5:d8:9d:4d:f5:40:11:93:0d:06:1d:29:ee: d9:6a:a2:71:ca:b6:35:0f:4d:7f:83:d4:7e:59:fe: a6:84:2f:53:f4:46:1d:89:b8:41:6b:af:80:07:58: 9e:e6:6c:5b:4a:c2:2a:95:c5:a8:cd:a8:f5:e8:51: 4a:70:56:2a:b0:92:54:94:b8:7b:c7:69:b1:b6:66: 88:82:48:94:e6:26:58:1e:5b:16:4d:67:03:2d:a7: 87:4a:60:d6:96:47:a6:44:05:9e:e0:d5:2a:a8:4c: 22:a9:98:87:5d:23:f4:bf:37:8e:a1:6c:3c:4f:4a: 9e:29:7e:f6:6f:f3:bd:ed:c5:24:8b:da:e5:b3:15: 6d:f0:13:48:01:1e:bc:dd:dd:31:80:57:c1:ca:9a: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F0:B7:9B:05:C3:B5:87:7E:C8:9F:75:F0:6B:3C:B9:06:7A:2B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f126f3a1-b5c0-3b08-8401-e8877c7879a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ba:11:f4:45:4a:0c:dd:83:b5:43:5f:3e:06:ad:18:3b:a0: ed:c9:3e:46:19:50:a8:ac:68:4d:41:b0:ef:2a:de:b4:ec:5d: 1c:4d:85:98:33:b4:1f:da:1e:a5:f0:aa:08:23:98:23:6f:5a: d9:3d:b9:55:a0:15:f9:f8:5e:df:b2:d1:4f:b9:99:34:b0:84: 52:dc:57:0c:f5:c1:cc:8a:31:4f:83:59:d3:01:e3:e2:8e:90: 8d:56:aa:73:29:1e:5e:6e:83:fb:7d:d1:88:5f:49:ea:a4:61: 82:b1:02:ae:3a:a9:5d:cf:3c:49:d8:41:b3:79:6a:28:08:60: 7b:fd:e0:14:94:f3:ba:63:3a:b7:fa:82:af:db:4a:64:37:ba: 81:84:e3:20:d7:76:4d:97:ef:b6:6b:e3:79:0d:d8:82:b3:87: e9:1d:65:f2:71:3e:b0:fb:02:f0:75:7e:c6:bd:be:6f:9a:61: 6c:84:09:e0:83:b7:de:96:89:64:4e:4f:a8:ae:6e:33:fa:61: dc:24:2f:5d:ca:37:dd:9d:12:8f:d5:5c:8f:02:7d:a8:b4:cc: c8:6f:73:5a:1a:e1:4c:de:af:51:22:b7:5f:2a:c9:c9:94:0d: 65:dc:87:7b:74:99:af:e2:77:b7:43:07:e8:e8:5e:f8:8d:13: a3:79:46:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmiPh/ubVuPl09QVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE1Mzk1N1oXDTI1MDcyMzE1Mzk1N1owLzEtMCsGA1UEAxMk MjJmNTY0NDEtYjg4Ni00ZDRhLTkyMmYtMDU4ZDVkOWNkZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CMYAZwS4HFThB0MD6aByajJwpe1CGXIpTiR 0RDgPHMKNpLDi57D+yIj25xwbodyPcxfdzVLtUG+IGGb64AJ+FB6O5JtnTXQs8Un Vud6GEyhoScPANypA9PETlUKum6yua/XBBkH02jKSMXYnU31QBGTDQYdKe7ZaqJx yrY1D01/g9R+Wf6mhC9T9EYdibhBa6+AB1ie5mxbSsIqlcWozaj16FFKcFYqsJJU lLh7x2mxtmaIgkiU5iZYHlsWTWcDLaeHSmDWlkemRAWe4NUqqEwiqZiHXSP0vzeO oWw8T0qeKX72b/O97cUki9rlsxVt8BNIAR683d0xgFfByppZuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLwt5sFw7WHfsifdfBrPLkGeisgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjEyNmYzYTEtYjVjMC0z YjA4LTg0MDEtZTg4NzdjNzg3OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADm6EfRFSgzdg7VDXz4GrRg7oO3JPkYZUKisaE1BsO8q3rTsXRxN hZgztB/aHqXwqggjmCNvWtk9uVWgFfn4Xt+y0U+5mTSwhFLcVwz1wcyKMU+DWdMB 4+KOkI1WqnMpHl5ug/t90YhfSeqkYYKxAq46qV3PPEnYQbN5aigIYHv94BSU87pj Orf6gq/bSmQ3uoGE4yDXdk2X77Zr43kN2IKzh+kdZfJxPrD7AvB1fsa9vm+aYWyE CeCDt96WiWROT6iubjP6YdwkL13KN92dEo/VXI8Cfai0zMhvc1oa4Uzer1Eit18q ycmUDWXch3t0ma/id7dDB+joXviNE6N5Rvk= -----END CERTIFICATE-----Generated at Tue Apr 29 21:05:36 2025 by rpki-client