$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa File: 309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa (raw, json) Hash identifier: 7UsIQbfxzh1w/LDollyVHQz9LoVO7dqqNU3iasMoFD4= Subject key identifier: 7E:EC:8C:0D:92:2C:99:87:B0:5B:40:13:C4:54:67:B1:2C:81:F8:A1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4369F823ED71DF80EFD3E80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa Signing time: Fri 25 Apr 2025 08:36:27 +0000 ROA not before: Fri 25 Apr 2025 08:36:27 +0000 ROA not after: Thu 24 Jul 2025 08:36:27 +0000 asID: 12041 IP address blocks: 2001:500:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:9f:82:3e:d7:1d:f8:0e:fd:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:36:27 2025 GMT Not After : Jul 24 08:36:27 2025 GMT Subject: CN=52f12fbb-fd08-4f85-8bc2-5aa6b5b42776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a9:a2:ac:0e:28:d1:ba:7e:b5:04:47:a0:81: 3c:37:c9:4d:28:57:15:a5:89:43:af:43:b6:2f:81: 25:fd:2f:67:0a:60:ec:fe:85:8a:16:bd:53:54:d1: f2:83:e5:76:da:d9:17:34:44:09:8b:d5:ef:04:64: 1f:9c:7c:79:d6:7c:c2:b0:13:4f:58:f9:7d:87:86: f5:2b:c1:3f:70:2f:18:a7:fe:c8:18:43:f4:00:d3: c5:6c:de:c6:10:43:83:21:50:c3:55:24:07:74:03: 51:9e:ef:2e:7b:db:bb:85:01:6b:c9:c8:5b:70:88: f0:3b:2c:ce:b4:fb:1b:43:ba:51:00:39:e1:aa:6f: b0:12:04:83:24:e7:e1:8b:41:ed:88:50:88:42:d7: b8:f5:60:fa:ce:b4:12:a2:fe:2e:6d:88:87:fd:19: 63:e2:bf:3c:c9:ba:be:de:e3:0f:0e:be:92:51:e1: 44:c4:a4:de:d2:ce:f9:a4:35:35:5c:b3:aa:49:e0: 6b:57:af:5b:0c:09:9e:98:81:ed:0b:3b:2a:a5:9f: c7:6b:43:cf:11:a2:a8:15:0e:aa:f7:95:27:81:8b: 87:ee:eb:71:cb:c4:15:4d:34:c2:35:67:09:56:fc: 84:6a:84:70:67:62:9f:9e:e7:bb:82:a8:af:09:9e: fd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EC:8C:0D:92:2C:99:87:B0:5B:40:13:C4:54:67:B1:2C:81:F8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/309c9099-3b00-38c6-b2b4-2bdbf5e79a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:46::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ef:c2:0a:55:cc:a3:fe:c1:fc:74:d7:1a:e2:0e:77:9e:45: dd:43:75:63:02:3a:94:c4:b7:31:d9:a1:25:b6:94:90:5b:5b: 72:00:5f:c9:15:16:28:10:96:10:f1:38:d6:7d:aa:1b:78:09: 00:63:53:b6:4d:31:06:ea:87:5a:3e:f9:35:6a:fc:94:62:8c: 14:e3:c2:b0:ba:ec:a7:db:98:9c:dd:bb:11:56:f1:bd:97:b3: 9d:b6:e5:62:db:8e:9c:22:b1:12:48:a1:9a:59:3b:25:1d:8a: 26:2a:22:cb:6e:b7:bf:7d:5a:4f:5c:41:75:a8:84:27:91:15: c7:7f:39:b3:31:1f:f9:5c:45:f1:4b:2b:ad:50:b8:e1:d2:dc: 4c:5c:3b:66:db:1f:cd:93:10:62:48:9c:ee:dc:f0:2b:cf:ca: 5e:55:5b:ff:67:b9:ce:16:12:0a:a6:15:fb:fd:dc:3e:ae:1a: 87:17:06:eb:56:a3:30:b8:31:13:02:73:c2:e3:f1:91:36:ef: d4:8d:77:8a:4a:d9:d5:41:12:e3:de:b2:ab:af:83:ee:75:9e: 58:a8:f6:e1:12:7f:8a:07:fd:ca:73:3d:dd:d9:63:e2:af:3e: 45:a4:c6:fd:19:92:a8:94:11:41:02:7f:cc:cf:1a:e4:5a:3a: c4:cf:a1:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNp+CPtcd+A79PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzYyN1oXDTI1MDcyNDA4MzYyN1owLzEtMCsGA1UEAxMk NTJmMTJmYmItZmQwOC00Zjg1LThiYzItNWFhNmI1YjQyNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6mirA4o0bp+tQRHoIE8N8lNKFcVpYlDr0O2 L4El/S9nCmDs/oWKFr1TVNHyg+V22tkXNEQJi9XvBGQfnHx51nzCsBNPWPl9h4b1 K8E/cC8Yp/7IGEP0ANPFbN7GEEODIVDDVSQHdANRnu8ue9u7hQFrychbcIjwOyzO tPsbQ7pRADnhqm+wEgSDJOfhi0HtiFCIQte49WD6zrQSov4ubYiH/Rlj4r88ybq+ 3uMPDr6SUeFExKTe0s75pDU1XLOqSeBrV69bDAmemIHtCzsqpZ/Ha0PPEaKoFQ6q 95UngYuH7utxy8QVTTTCNWcJVvyEaoRwZ2Kfnue7gqivCZ79jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH7sjA2SLJmHsFtAE8RUZ7EsgfihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzA5YzkwOTktM2IwMC0z OGM2LWIyYjQtMmJkYmY1ZTc5YTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3vwgpVzKP+wfx01xriDneeRd1DdWMCOpTEtzHZoSW2lJBbW3IA X8kVFigQlhDxONZ9qht4CQBjU7ZNMQbqh1o++TVq/JRijBTjwrC67KfbmJzduxFW 8b2Xs5225WLbjpwisRJIoZpZOyUdiiYqIstut799Wk9cQXWohCeRFcd/ObMxH/lc RfFLK61QuOHS3ExcO2bbH82TEGJInO7c8CvPyl5VW/9nuc4WEgqmFfv93D6uGocX ButWozC4MRMCc8Lj8ZE279SNd4pK2dVBEuPesquvg+51nlio9uESf4oH/cpzPd3Z Y+KvPkWkxv0ZkqiUEUECf8zPGuRaOsTPoe4= -----END CERTIFICATE-----Generated at Sat May 10 06:58:31 2025 by rpki-client