$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa File: 1c886de0-6a95-394f-b0ec-798264a9c720.roa (raw, json) Hash identifier: hsWE3ZLD2JiF5BFqDY74kh3cvzaMMmAJagXKq2BIIUc= Subject key identifier: D1:CE:A0:54:44:89:19:12:0B:ED:9B:2F:2C:21:E2:E0:69:39:1E:CA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A42EF777D490FF27B9338E00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa Signing time: Fri 25 Apr 2025 08:21:02 +0000 ROA not before: Fri 25 Apr 2025 08:21:02 +0000 ROA not after: Thu 24 Jul 2025 08:21:02 +0000 asID: 12041 IP address blocks: 2001:500:c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:2e:f7:77:d4:90:ff:27:b9:33:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:21:02 2025 GMT Not After : Jul 24 08:21:02 2025 GMT Subject: CN=8013b215-6a59-45eb-b6a6-0aafe4bc1dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:4d:4a:54:f8:4b:95:82:54:24:28:5e:45: 47:a5:08:ac:dc:9a:a9:f7:7e:9d:7a:67:fa:29:33: 28:bb:2e:19:79:52:96:89:da:0c:b4:7d:2c:73:11: 6f:8a:5f:f3:3c:a2:a2:d5:a1:4e:93:d4:74:6b:34: 99:c5:a3:fa:6c:53:c7:fd:a3:22:1c:c2:57:8f:07: 01:49:d0:0a:84:cf:92:dc:98:2b:88:2e:30:99:4a: 21:fd:cc:3b:e3:d9:c4:60:b0:fd:61:64:1d:4b:ff: 87:ab:a7:4e:81:a5:d3:fb:44:c1:6d:48:1a:21:be: 18:17:5c:4f:ac:78:b1:af:44:e2:cc:03:35:ce:b1: d1:73:83:32:8f:e4:20:70:98:03:f4:f3:c1:6f:2e: 0f:af:86:a3:91:d5:67:f1:41:af:b1:3c:88:d9:87: 1e:cb:98:bd:9c:f2:24:50:c2:33:7d:d5:1f:c0:61: ec:d9:1b:14:a0:5e:2f:46:4a:b5:9c:5a:8a:9d:1e: 95:a7:b0:1e:84:34:23:cb:aa:e1:d6:46:60:ce:a1: b6:81:dc:bc:d9:04:04:55:41:bf:35:9c:e0:a9:ab: 96:18:31:26:5b:c2:2f:a7:46:d6:d7:f6:fb:8a:f3: 56:3c:eb:7b:69:92:c5:96:03:5c:98:84:14:fa:30: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CE:A0:54:44:89:19:12:0B:ED:9B:2F:2C:21:E2:E0:69:39:1E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:bd:14:29:d8:53:91:7c:8c:db:f7:b6:c4:cc:7c:be:63:4f: 08:4a:72:78:87:34:36:29:31:17:92:40:3e:c3:4f:4f:2f:d4: f7:6b:ce:36:7c:fd:a1:79:79:7c:6d:3e:b7:41:db:a8:91:c0: e8:33:2f:96:45:0a:65:18:4d:67:47:96:6c:bf:5a:06:8c:11: 17:07:76:9a:5d:b3:ec:6a:04:b4:40:88:6b:43:dc:78:b4:60: 08:02:cd:db:be:96:50:fc:6f:ac:a5:7e:1d:3f:38:c2:ea:71: 3f:54:58:bd:5c:da:82:29:bf:71:cd:7e:1b:60:9e:00:b1:f0: 4c:d2:83:ae:e8:a6:43:cf:83:57:2c:18:12:b8:40:d8:a2:27: 13:3c:d8:2d:c1:c9:17:f1:2b:1a:d7:f1:5b:8d:fb:6a:d7:ce: fd:64:8b:fc:81:e7:44:0f:16:a0:6e:de:9b:3a:d3:a9:ab:c8: 08:4f:dd:2a:8b:b8:a2:ca:c4:00:b5:0b:24:34:90:d2:17:78: 83:d8:a4:77:38:80:c7:5e:1e:9f:4c:2d:4a:32:37:34:a6:62: 78:e1:75:31:b4:cd:9a:63:08:75:03:4b:ce:e8:11:33:59:d4: 78:f0:ab:ee:77:06:6a:ff:40:fa:1f:e6:e8:97:4b:76:f7:43: c8:ec:67:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkLvd31JD/J7kzjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MjEwMloXDTI1MDcyNDA4MjEwMlowLzEtMCsGA1UEAxMk ODAxM2IyMTUtNmE1OS00NWViLWI2YTYtMGFhZmU0YmMxZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv9NSlT4S5WCVCQoXkVHpQis3Jqp936demf6 KTMouy4ZeVKWidoMtH0scxFvil/zPKKi1aFOk9R0azSZxaP6bFPH/aMiHMJXjwcB SdAKhM+S3JgriC4wmUoh/cw749nEYLD9YWQdS/+Hq6dOgaXT+0TBbUgaIb4YF1xP rHixr0TizAM1zrHRc4Myj+QgcJgD9PPBby4Pr4ajkdVn8UGvsTyI2Ycey5i9nPIk UMIzfdUfwGHs2RsUoF4vRkq1nFqKnR6Vp7AehDQjy6rh1kZgzqG2gdy82QQEVUG/ NZzgqauWGDEmW8Ivp0bW1/b7ivNWPOt7aZLFlgNcmIQU+jC1+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNHOoFREiRkSC+2bLywh4uBpOR7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWM4ODZkZTAtNmE5NS0z OTRmLWIwZWMtNzk4MjY0YTljNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFK9FCnYU5F8jNv3tsTMfL5jTwhKcniHNDYpMReSQD7DT08v1Pdr zjZ8/aF5eXxtPrdB26iRwOgzL5ZFCmUYTWdHlmy/WgaMERcHdppds+xqBLRAiGtD 3Hi0YAgCzdu+llD8b6ylfh0/OMLqcT9UWL1c2oIpv3HNfhtgngCx8EzSg67opkPP g1csGBK4QNiiJxM82C3ByRfxKxrX8VuN+2rXzv1ki/yB50QPFqBu3ps606mryAhP 3SqLuKLKxAC1CyQ0kNIXeIPYpHc4gMdeHp9MLUoyNzSmYnjhdTG0zZpjCHUDS87o ETNZ1Hjwq+53Bmr/QPof5uiXS3b3Q8jsZ2o= -----END CERTIFICATE-----Generated at Sat May 10 10:32:26 2025 by rpki-client