$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa File: 4546c97d-ce09-36b4-ab62-95f581ad6db4.roa (raw, json) Hash identifier: vQgP8quOzddWhkxHZq5L46pCidbzIvN57jQ+W5gLCsg= Subject key identifier: 95:FD:B2:56:AE:47:82:21:9C:56:2E:51:B2:83:82:55:8E:43:ED:B3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A4365D73EE64A9397C2CC780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa Signing time: Fri 25 Apr 2025 08:35:56 +0000 ROA not before: Fri 25 Apr 2025 08:35:56 +0000 ROA not after: Thu 24 Jul 2025 08:35:56 +0000 asID: 12041 IP address blocks: 2001:500:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:36:5d:73:ee:64:a9:39:7c:2c:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:35:56 2025 GMT Not After : Jul 24 08:35:56 2025 GMT Subject: CN=a24fb2dc-cf23-403d-80a7-025daa6244b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:70:c2:b7:09:f0:06:84:58:bd:04:f7:29: b2:15:96:c0:7f:8b:da:fd:53:d4:41:6d:1c:29:34: 98:fb:2f:e1:4a:62:98:a3:12:b1:95:16:9d:93:15: 17:5a:ef:00:8e:53:7a:5b:94:75:c1:ae:4d:fe:74: ba:ea:b9:7c:f1:af:b4:ce:5d:9b:f0:72:13:02:54: 97:a4:9e:ad:64:a3:1f:a6:00:4e:ee:77:bd:79:88: b0:d6:e5:c5:95:53:03:6d:a8:cd:86:fb:34:0e:e4: f8:f6:ac:b4:6e:bd:8c:41:c0:13:de:1a:85:49:78: 9f:7e:85:50:5b:ba:ff:ad:6b:54:3e:65:d6:ad:33: 03:d1:26:cb:65:5b:8d:2a:54:58:5b:7c:b4:0b:12: 1f:f2:74:a5:fa:b5:a2:ca:12:1b:11:f2:ab:27:7d: 1a:f1:ac:9d:e4:73:bf:9e:10:f7:aa:70:3a:82:1e: 00:94:93:82:ab:73:f7:53:30:46:dd:cc:ea:85:6c: 87:50:a8:29:99:e0:f1:7f:a8:e7:86:42:b6:df:77: f3:12:88:27:af:c8:20:08:28:9f:26:57:c2:25:1d: ac:ac:c9:6d:d8:05:82:53:60:68:04:01:7e:bb:4a: 01:7e:23:a4:b6:0b:7f:0d:f7:6b:e9:bd:b5:50:6a: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FD:B2:56:AE:47:82:21:9C:56:2E:51:B2:83:82:55:8E:43:ED:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4546c97d-ce09-36b4-ab62-95f581ad6db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:26::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ea:82:f1:93:d4:b7:2f:3d:a1:95:70:bd:79:82:95:14:29: 55:4c:85:29:2d:9f:f4:00:71:43:b6:cf:c2:4f:49:d0:9e:fc: b2:fa:53:7d:d9:eb:12:26:0e:be:24:18:4f:76:77:5d:b3:5e: a2:ed:09:9b:32:a8:53:d8:a1:a9:5e:85:50:db:28:61:c5:41: 84:50:6b:7a:e6:d2:34:f8:76:78:0a:cf:ca:74:0c:e9:22:fc: 70:8b:19:a5:f0:51:84:aa:d2:e0:4b:13:e2:cf:b9:0d:f0:57: ea:3b:4f:e9:e9:fb:3e:ac:32:40:4b:3c:ff:d9:6c:0b:d3:2a: 42:2c:60:c1:78:f2:d0:4c:92:f8:a9:23:e7:58:b9:ba:6d:7b: 6d:a2:ea:54:67:ac:d5:77:fc:1e:e2:25:c4:d2:ad:4b:61:c8: 4d:81:cc:10:e9:c4:3b:0f:fe:f7:21:d8:b5:c4:95:cf:06:e2: 41:c3:c6:a3:b0:9a:61:e4:5e:35:6e:71:6f:0c:b3:6c:53:95: 75:50:96:a0:38:4f:1d:34:47:95:f3:9d:58:12:2b:49:dc:22: 35:23:79:8c:86:4b:e6:12:02:17:c2:42:5d:ec:73:c4:df:8b: ea:17:3b:13:ba:8c:2a:66:f7:2d:0b:fe:0a:fd:63:d8:47:92: 41:fe:34:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNl1z7mSpOXwsx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzU1NloXDTI1MDcyNDA4MzU1NlowLzEtMCsGA1UEAxMk YTI0ZmIyZGMtY2YyMy00MDNkLTgwYTctMDI1ZGFhNjI0NGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIVwwrcJ8AaEWL0E9ymyFZbAf4va/VPUQW0c KTSY+y/hSmKYoxKxlRadkxUXWu8AjlN6W5R1wa5N/nS66rl88a+0zl2b8HITAlSX pJ6tZKMfpgBO7ne9eYiw1uXFlVMDbajNhvs0DuT49qy0br2MQcAT3hqFSXiffoVQ W7r/rWtUPmXWrTMD0SbLZVuNKlRYW3y0CxIf8nSl+rWiyhIbEfKrJ30a8ayd5HO/ nhD3qnA6gh4AlJOCq3P3UzBG3czqhWyHUKgpmeDxf6jnhkK233fzEognr8ggCCif JlfCJR2srMlt2AWCU2BoBAF+u0oBfiOktgt/Dfdr6b21UGr0mQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJX9slauR4IhnFYuUbKDglWOQ+2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDU0NmM5N2QtY2UwOS0z NmI0LWFiNjItOTVmNTgxYWQ2ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEjqgvGT1LcvPaGVcL15gpUUKVVMhSktn/QAcUO2z8JPSdCe/LL6 U33Z6xImDr4kGE92d12zXqLtCZsyqFPYoalehVDbKGHFQYRQa3rm0jT4dngKz8p0 DOki/HCLGaXwUYSq0uBLE+LPuQ3wV+o7T+np+z6sMkBLPP/ZbAvTKkIsYMF48tBM kvipI+dYubpte22i6lRnrNV3/B7iJcTSrUthyE2BzBDpxDsP/vch2LXElc8G4kHD xqOwmmHkXjVucW8Ms2xTlXVQlqA4Tx00R5XznVgSK0ncIjUjeYyGS+YSAhfCQl3s c8Tfi+oXOxO6jCpm9y0L/gr9Y9hHkkH+NB4= -----END CERTIFICATE-----Generated at Sat May 10 10:15:40 2025 by rpki-client