$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/618531f5-466c-3d4f-b887-28413c23e552.roa File: 618531f5-466c-3d4f-b887-28413c23e552.roa (raw, json) Hash identifier: mPvzbvCWTI4SSH0ooBo9/VWZVrdFgMkGpLiobBSeV8s= Subject key identifier: 4F:1A:B3:6D:77:48:67:F5:63:79:5C:A6:DB:C0:96:78:05:D6:84:CC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A43544DE7851792A9EFD2100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/618531f5-466c-3d4f-b887-28413c23e552.roa Signing time: Fri 25 Apr 2025 08:33:43 +0000 ROA not before: Fri 25 Apr 2025 08:33:43 +0000 ROA not after: Thu 24 Jul 2025 08:33:43 +0000 asID: 12041 IP address blocks: 2001:500:e2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:44:de:78:51:79:2a:9e:fd:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:43 2025 GMT Not After : Jul 24 08:33:43 2025 GMT Subject: CN=5d7aba88-e270-4f64-9e27-a51ca16970ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:a3:ae:4e:b0:a4:f4:c1:0a:21:19:f4:2d: 28:a9:b0:fa:5b:3e:1e:a0:60:4b:3a:24:f0:40:53: 78:db:8c:29:7c:8a:ec:38:5c:06:c3:11:8c:4e:58: 1e:c6:6a:b0:7b:c2:b7:71:4c:d8:a1:50:fd:4d:06: 3a:76:31:a4:f6:b1:64:b4:3c:25:3e:e5:ff:df:02: 1b:c4:62:f8:ca:1a:a5:41:00:55:2b:f1:60:7a:94: 59:0f:36:75:97:2d:a6:69:4d:62:e4:31:9c:46:a5: 83:87:87:86:9e:7d:99:40:ed:db:96:b7:9a:d5:b1: 85:97:18:89:e6:b4:e8:79:6d:0f:1d:03:17:0d:9b: 95:2e:a5:83:a3:42:0b:66:67:0c:d4:4a:23:4b:6c: ba:9e:38:cd:94:23:67:c9:ce:33:c7:e7:e3:65:e1: 58:43:63:7e:93:5f:7c:65:7a:33:d2:e8:9c:a0:d5: 7a:6c:0f:e0:f6:7c:79:06:5d:c5:09:38:65:d2:68: 28:ed:f8:37:6e:43:e0:a5:a5:66:ac:e4:75:99:6f: 9b:b1:33:64:0c:05:ae:82:a5:bc:1f:7e:1a:f6:ad: ea:c4:8c:f0:97:21:7b:a4:ce:f6:82:da:e4:99:47: 5e:60:52:28:7b:0d:28:57:95:b4:3b:90:d0:bf:c4: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1A:B3:6D:77:48:67:F5:63:79:5C:A6:DB:C0:96:78:05:D6:84:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/618531f5-466c-3d4f-b887-28413c23e552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:e2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7f:62:c8:d1:ea:d6:ce:8b:7a:26:e9:2e:9f:e4:ec:ad:33: 09:79:21:dd:e2:29:57:21:11:cb:8e:29:d5:c1:58:a0:1d:db: f9:8b:1b:1d:da:05:bb:6d:f2:5f:08:67:b6:de:a7:b0:4c:67: d6:bb:cd:44:fb:28:76:1f:82:a3:7d:6b:74:98:db:b9:39:cb: 8d:5f:6a:9b:38:a4:d0:cb:55:02:ea:70:f5:d2:e6:4b:c9:8b: a3:28:fb:2f:e9:06:f9:3b:d2:fc:62:56:72:d8:29:f8:39:85: 2c:3d:81:53:52:9f:15:f3:6a:88:33:bc:eb:58:cb:05:3c:c5: e0:f9:e9:60:4d:0e:79:5e:34:b8:cc:43:64:6a:15:37:ed:bf: 01:93:f6:8b:19:10:bd:6d:c9:08:d8:c4:d2:d0:9a:24:13:1f: cf:39:2a:c5:1c:16:aa:4f:5d:a4:bb:1a:0e:38:32:62:bc:66: 29:04:fe:62:46:bb:49:76:a5:cb:c7:a5:b5:29:9f:1a:ef:2a: c4:cb:92:3b:53:6e:5b:60:3b:a7:cc:74:45:27:17:5b:fc:3d: 4b:0e:d8:50:ab:5f:e3:79:ff:43:4c:27:7d:f2:71:65:12:cc: 3e:02:0c:c1:d2:c3:8e:1b:ca:c0:c4:ab:27:5f:e7:8c:61:a7: 20:e8:59:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNUTeeFF5Kp79IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzM0M1oXDTI1MDcyNDA4MzM0M1owLzEtMCsGA1UEAxMk NWQ3YWJhODgtZTI3MC00ZjY0LTllMjctYTUxY2ExNjk3MGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP6jrk6wpPTBCiEZ9C0oqbD6Wz4eoGBLOiTw QFN424wpfIrsOFwGwxGMTlgexmqwe8K3cUzYoVD9TQY6djGk9rFktDwlPuX/3wIb xGL4yhqlQQBVK/FgepRZDzZ1ly2maU1i5DGcRqWDh4eGnn2ZQO3blrea1bGFlxiJ 5rToeW0PHQMXDZuVLqWDo0ILZmcM1EojS2y6njjNlCNnyc4zx+fjZeFYQ2N+k198 ZXoz0uicoNV6bA/g9nx5Bl3FCThl0mgo7fg3bkPgpaVmrOR1mW+bsTNkDAWugqW8 H34a9q3qxIzwlyF7pM72gtrkmUdeYFIoew0oV5W0O5DQv8S+pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE8as213SGf1Y3lcptvAlngF1oTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjE4NTMxZjUtNDY2Yy0z ZDRmLWI4ODctMjg0MTNjMjNlNTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHd/YsjR6tbOi3om6S6f5OytMwl5Id3iKVchEcuOKdXBWKAd2/mL Gx3aBbtt8l8IZ7bep7BMZ9a7zUT7KHYfgqN9a3SY27k5y41faps4pNDLVQLqcPXS 5kvJi6Mo+y/pBvk70vxiVnLYKfg5hSw9gVNSnxXzaogzvOtYywU8xeD56WBNDnle NLjMQ2RqFTftvwGT9osZEL1tyQjYxNLQmiQTH885KsUcFqpPXaS7Gg44MmK8ZikE /mJGu0l2pcvHpbUpnxrvKsTLkjtTbltgO6fMdEUnF1v8PUsO2FCrX+N5/0NMJ33y cWUSzD4CDMHSw44bysDEqydf54xhpyDoWSw= -----END CERTIFICATE-----Generated at Sat May 10 01:33:52 2025 by rpki-client