$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa File: 07137d18-ea2a-3814-9a59-8ee61677f7c2.roa (raw, json) Hash identifier: hNNPZWRoEW2DRGp4L8wZEStuYnuMdq7hnQJxgZWqBoM= Subject key identifier: 5E:F5:76:F2:75:E5:A5:68:2F:14:74:DC:8E:A4:5A:41:93:B1:AC:81 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849CE9A3537CAE88FB85BCCD180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 198260 IP address blocks: 2001:500:f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:35:37:ca:e8:8f:b8:5b:cc:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=a4d9092e-7345-499b-8626-37190fb5f788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:0a:d4:73:cf:1e:c6:a1:72:85:ba:b4:ac: 70:a6:e0:67:12:8c:0b:f7:67:ec:f9:6d:46:a5:df: 05:a0:48:36:2d:4d:f0:6c:3f:36:f2:1d:b0:43:4e: 17:23:5d:e8:62:91:06:16:f7:ac:2b:da:b9:59:9d: d3:21:94:32:90:78:de:82:12:4e:3d:ac:76:de:4c: e6:ac:3c:9b:47:c0:a9:06:8e:ee:8d:ff:b7:a1:e9: 7e:9f:19:ef:cf:a3:a2:d5:a2:63:4f:06:79:70:64: 9f:3f:f3:a3:77:aa:75:5c:af:77:85:30:6d:1a:69: 0b:6a:35:4f:a1:a1:ac:78:00:50:13:e7:9b:26:0c: ac:5e:03:7c:0f:7c:05:8f:86:53:c9:6b:c4:00:48: 18:04:f9:18:2a:10:ca:e2:fb:29:be:11:d2:74:3f: 30:f8:4f:3d:b3:3f:36:2e:81:a6:50:a2:81:ee:a7: c0:83:07:b1:20:7a:83:12:8f:47:24:40:37:f3:96: c4:c3:3b:bd:4c:b4:54:f1:8d:10:cb:03:15:a0:f3: f1:88:a5:c6:6e:3a:74:a5:6b:b9:44:e9:f8:bc:ab: 49:cb:6a:57:e9:66:5b:d6:32:aa:cf:6c:29:42:f6: 85:ec:2f:e4:34:a6:fc:ed:e4:0a:45:62:77:0f:c1: e5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F5:76:F2:75:E5:A5:68:2F:14:74:DC:8E:A4:5A:41:93:B1:AC:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/07137d18-ea2a-3814-9a59-8ee61677f7c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8b:dd:6e:cf:be:9b:5c:85:ce:2b:9a:c7:7b:a5:d2:61:97: a5:e1:40:22:ec:2b:c7:0d:a8:9c:a4:74:23:4b:e6:13:e1:26: f2:c3:fa:ad:ea:62:70:d8:5e:2d:38:8a:45:10:49:40:88:a4: bf:0a:10:b6:02:3a:c7:87:d8:da:76:ed:e0:2e:ca:c3:19:68: 04:3a:2c:44:58:f8:4a:05:82:7f:bd:2e:be:f4:d2:3c:af:35: 3d:ea:27:29:52:ae:23:5c:ad:b0:0a:1c:b1:4d:a4:97:fd:17: 5d:f7:a1:ed:9f:6e:9d:c8:da:b3:aa:9d:90:46:dd:84:82:dd: 2e:84:43:e2:6a:ef:f6:97:e9:01:77:58:0e:f1:71:b3:39:fc: ac:09:a4:82:10:86:24:d5:3f:3d:8b:68:f7:6c:76:94:c1:1b: de:41:58:6f:02:72:a3:02:d8:49:28:dc:48:35:fd:e2:8d:4a: 09:e4:11:18:f9:a1:ec:ec:04:72:58:1d:02:7a:1a:90:13:01: b4:51:85:a3:e3:ae:f0:eb:cf:03:dc:e3:11:f4:20:71:05:b2: 8b:69:ce:f5:41:ca:39:bb:b8:4d:a1:cf:ea:0c:01:fb:0c:d0: 82:54:6b:b0:d5:f2:99:08:82:19:f8:2e:76:eb:56:ec:86:c2: e5:ea:31:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmjU3yuiPuFvM0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YTRkOTA5MmUtNzM0NS00OTliLTg2MjYtMzcxOTBmYjVmNzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo0K1HPPHsahcoW6tKxwpuBnEowL92fs+W1G pd8FoEg2LU3wbD828h2wQ04XI13oYpEGFvesK9q5WZ3TIZQykHjeghJOPax23kzm rDybR8CpBo7ujf+3oel+nxnvz6Oi1aJjTwZ5cGSfP/Ojd6p1XK93hTBtGmkLajVP oaGseABQE+ebJgysXgN8D3wFj4ZTyWvEAEgYBPkYKhDK4vspvhHSdD8w+E89sz82 LoGmUKKB7qfAgwexIHqDEo9HJEA385bEwzu9TLRU8Y0QywMVoPPxiKXGbjp0pWu5 ROn4vKtJy2pX6WZb1jKqz2wpQvaF7C/kNKb87eQKRWJ3D8HlCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF71dvJ15aVoLxR03I6kWkGTsayBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDcxMzdkMTgtZWEyYS0z ODE0LTlhNTktOGVlNjE2NzdmN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACyL3W7Pvptchc4rmsd7pdJhl6XhQCLsK8cNqJykdCNL5hPhJvLD +q3qYnDYXi04ikUQSUCIpL8KELYCOseH2Np27eAuysMZaAQ6LERY+EoFgn+9Lr70 0jyvNT3qJylSriNcrbAKHLFNpJf9F133oe2fbp3I2rOqnZBG3YSC3S6EQ+Jq7/aX 6QF3WA7xcbM5/KwJpIIQhiTVPz2LaPdsdpTBG95BWG8CcqMC2Eko3Eg1/eKNSgnk ERj5oezsBHJYHQJ6GpATAbRRhaPjrvDrzwPc4xH0IHEFsotpzvVByjm7uE2hz+oM AfsM0IJUa7DV8pkIghn4LnbrVuyGwuXqMR4= -----END CERTIFICATE-----Generated at Sun May 11 02:09:10 2025 by rpki-client