$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7782cf5-d37a-3298-b0d3-2e4b037f5bc4.roa File: f7782cf5-d37a-3298-b0d3-2e4b037f5bc4.roa (raw, json) Hash identifier: llkZLcfGl7C+uAClgiOGEQZnXj/cd38uGVU18h9r+JM= Subject key identifier: C2:80:6C:F4:7C:89:A9:48:EF:1D:C4:B6:72:70:38:0F:1A:A9:87:8C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A42EBD1DBB5346F612C6EC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7782cf5-d37a-3298-b0d3-2e4b037f5bc4.roa Signing time: Fri 25 Apr 2025 08:20:34 +0000 ROA not before: Fri 25 Apr 2025 08:20:34 +0000 ROA not after: Thu 24 Jul 2025 08:20:34 +0000 asID: 12041 IP address blocks: 2001:500:a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:2e:bd:1d:bb:53:46:f6:12:c6:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:20:34 2025 GMT Not After : Jul 24 08:20:34 2025 GMT Subject: CN=7ca1dfbe-6d38-4ee6-bf1e-7df8148ffcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e4:f4:21:e6:1a:ce:8f:4f:4c:80:f4:25:9b: 25:55:5b:39:90:d1:18:12:62:87:2b:d2:14:95:28: bb:de:d5:ea:b1:38:b2:3f:ae:1f:60:4c:cf:8c:89: 9f:4f:b3:6e:fc:c5:8e:16:86:f2:42:78:ba:e8:fc: 6c:aa:41:bd:8a:77:8e:17:b8:4a:87:0e:f7:00:01: 7c:a1:35:d6:07:85:9d:04:8e:24:d2:36:3e:6a:4e: 4b:fa:a7:8c:7e:9b:d6:74:a8:b4:7b:13:7c:c5:5a: 5b:65:5b:55:c6:f3:86:e1:84:0d:86:83:91:42:86: ed:73:be:36:fa:0f:f9:fc:bd:d0:64:85:be:33:38: 11:e6:aa:93:a8:58:aa:de:0e:77:4b:41:75:a2:b0: 14:f4:0c:2b:67:6a:46:72:5f:72:c6:ac:7f:a7:98: fb:cc:fa:a9:08:0f:88:62:22:7d:25:68:a4:d2:88: 5c:09:4e:99:31:ef:50:ce:15:16:9a:0b:0e:7d:ce: 1b:25:7e:09:c1:19:ed:19:f4:ad:59:99:ef:b5:fe: 04:ec:55:5a:8a:2e:56:9f:87:b9:29:a2:df:4b:65: 7b:b1:d5:4b:a4:cc:96:d1:d0:1a:a4:8c:ad:f5:8a: 1d:7f:de:e6:96:76:90:04:38:33:59:6d:bc:78:53: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:80:6C:F4:7C:89:A9:48:EF:1D:C4:B6:72:70:38:0F:1A:A9:87:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f7782cf5-d37a-3298-b0d3-2e4b037f5bc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:48:ad:14:49:85:1b:21:39:97:e9:3b:9b:a5:cd:f6:ca:f3: 34:ca:e2:73:03:78:9e:6d:89:3e:a0:b3:cf:b9:24:4a:f2:63: b5:03:22:5a:1a:97:1f:b5:9d:28:b4:9c:76:33:2d:39:ba:76: df:04:67:7f:df:7b:39:e7:12:8e:83:d0:13:37:fb:16:f6:29: d4:e3:42:1d:c4:61:50:94:ff:c2:d8:7e:d8:3d:fd:55:ea:6c: 06:94:aa:b7:b8:ed:31:cc:9c:4d:ef:e4:20:81:f3:fc:01:6b: e1:a0:ab:2e:a9:f6:5f:08:f5:9f:78:32:1d:bc:7d:00:a3:78: 6c:37:22:41:1a:f2:2b:18:33:b3:25:f7:e0:27:79:f3:03:5d: e1:db:68:b7:7c:0f:c5:a2:6d:11:f8:75:e5:34:09:12:23:1e: 79:cb:62:da:a9:e0:c3:e2:88:4d:6b:f2:3a:25:f7:09:76:35: dc:f6:b3:a9:05:73:69:e5:f3:c4:78:85:fd:75:9e:00:8b:c0: 01:de:b0:a8:11:15:3a:92:9b:f5:6f:92:fa:47:6c:b8:2e:55: bc:6d:60:4e:58:93:88:94:0e:cd:93:c0:d8:e6:b0:d9:10:c3: 4c:a9:c1:ad:bc:cf:82:99:b7:61:1a:ee:53:00:b8:4b:7f:6c: a0:a4:64:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkLr0du1NG9hLG7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MjAzNFoXDTI1MDcyNDA4MjAzNFowLzEtMCsGA1UEAxMk N2NhMWRmYmUtNmQzOC00ZWU2LWJmMWUtN2RmODE0OGZmY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeT0IeYazo9PTID0JZslVVs5kNEYEmKHK9IU lSi73tXqsTiyP64fYEzPjImfT7Nu/MWOFobyQni66PxsqkG9ineOF7hKhw73AAF8 oTXWB4WdBI4k0jY+ak5L+qeMfpvWdKi0exN8xVpbZVtVxvOG4YQNhoORQobtc742 +g/5/L3QZIW+MzgR5qqTqFiq3g53S0F1orAU9AwrZ2pGcl9yxqx/p5j7zPqpCA+I YiJ9JWik0ohcCU6ZMe9QzhUWmgsOfc4bJX4JwRntGfStWZnvtf4E7FVaii5Wn4e5 KaLfS2V7sdVLpMyW0dAapIyt9Yodf97mlnaQBDgzWW28eFOVywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMKAbPR8ialI7x3EtnJwOA8aqYeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjc3ODJjZjUtZDM3YS0z Mjk4LWIwZDMtMmU0YjAzN2Y1YmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGJIrRRJhRshOZfpO5ulzfbK8zTK4nMDeJ5tiT6gs8+5JEryY7UD Iloalx+1nSi0nHYzLTm6dt8EZ3/feznnEo6D0BM3+xb2KdTjQh3EYVCU/8LYftg9 /VXqbAaUqre47THMnE3v5CCB8/wBa+Ggqy6p9l8I9Z94Mh28fQCjeGw3IkEa8isY M7Ml9+AnefMDXeHbaLd8D8WibRH4deU0CRIjHnnLYtqp4MPiiE1r8jol9wl2Ndz2 s6kFc2nl88R4hf11ngCLwAHesKgRFTqSm/VvkvpHbLguVbxtYE5Yk4iUDs2TwNjm sNkQw0ypwa28z4KZt2Ea7lMAuEt/bKCkZME= -----END CERTIFICATE-----Generated at Wed Apr 30 01:23:48 2025 by rpki-client