$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa File: 7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa (raw, json) Hash identifier: 8ys6xrOSRwjXA3gsmdxYZJT9DExt2pdHTEYb8lhggH8= Subject key identifier: 13:34:C1:A0:83:80:69:1F:C4:1E:DB:10:9E:3B:B9:ED:1E:2F:82:E0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A434D7BA928A956CCB59E580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa Signing time: Fri 25 Apr 2025 08:32:52 +0000 ROA not before: Fri 25 Apr 2025 08:32:52 +0000 ROA not after: Thu 24 Jul 2025 08:32:52 +0000 asID: 12041 IP address blocks: 2001:500:cf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:34:d7:ba:92:8a:95:6c:cb:59:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:32:52 2025 GMT Not After : Jul 24 08:32:52 2025 GMT Subject: CN=361d6b97-5ebc-4583-aca6-de93c6fa584a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ae:de:2f:9e:5c:9c:08:a6:71:de:2b:85:dd: b7:bd:0f:b3:0d:ac:a0:2e:a8:2a:aa:ab:c9:4a:96: c1:13:7f:05:85:ac:1c:0b:c9:2b:4e:f2:c8:d9:7b: 0f:60:d0:12:f3:0f:1f:ef:26:a1:ac:24:87:ba:ee: e8:4d:87:b7:8e:a1:4d:15:9b:22:a2:b5:fd:5e:4e: 8f:fd:05:ec:d9:4d:61:38:35:61:d0:d2:c3:4a:de: d0:82:1f:ff:f9:56:d2:f1:01:b2:e0:cf:00:04:cb: 5f:18:d8:5d:9c:26:31:3f:96:91:4f:c4:20:53:12: 79:ba:93:26:d9:c6:72:8c:d6:45:88:12:71:63:af: ad:41:8d:75:3e:79:c4:03:05:2e:28:17:2d:09:f3: 13:4e:f4:b3:30:eb:ec:ed:bb:1d:de:41:dd:19:c4: 4f:35:38:16:0e:37:d1:2f:1a:d5:75:c8:6b:72:77: 53:52:6a:3a:b6:89:e9:ae:2d:29:b1:f1:83:54:fd: 47:ae:37:fc:b7:48:8c:c9:71:ee:5d:c6:47:c9:92: 42:86:da:18:d2:05:4e:79:5e:6c:99:26:ed:70:c1: ee:69:44:0d:79:ad:34:97:4d:9e:b1:70:c6:42:62: 48:30:81:6e:ef:25:ee:7d:38:50:05:75:34:66:78: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:34:C1:A0:83:80:69:1F:C4:1E:DB:10:9E:3B:B9:ED:1E:2F:82:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7439d1a1-941b-3e0f-b4bf-e3267db2055b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:cf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3e:90:6c:9b:c9:7d:67:82:b0:60:44:f0:c7:c8:fa:d8:ff: 21:46:79:e5:36:92:8b:77:50:42:4e:41:63:f1:23:28:58:8d: 00:61:bd:b8:15:1f:e4:e7:7a:b0:83:cb:fd:2d:e9:39:47:be: 6a:db:f3:c6:2d:9d:f7:3e:1e:70:a4:0c:56:a9:86:2c:9f:53: 02:d2:7b:38:d5:ca:77:d6:63:50:5e:7e:fe:c8:38:8d:9a:92: 7c:c1:44:cc:7d:02:c9:84:42:ee:4c:e9:32:50:f6:57:b4:dd: 5b:e4:74:0b:12:4d:5b:c4:91:fa:be:af:ba:6a:27:4c:b9:ff: 05:ce:8e:96:58:24:e3:84:70:85:9d:e0:25:a1:cc:4d:9b:10: 41:47:cd:31:12:34:bd:45:cb:f6:62:69:8d:67:db:02:85:56: 12:32:e7:02:15:77:ec:7a:d8:85:4a:3d:cb:8a:21:0a:7e:ef: 01:0e:c0:9c:57:2b:9b:37:b8:e5:b6:ae:9f:ab:c9:54:0d:98: b1:37:04:36:6e:fb:97:12:ec:48:39:0c:db:aa:e1:4a:b7:52: b0:58:56:db:2d:7d:9b:7c:08:32:66:1b:c6:6f:59:aa:03:59: eb:15:fd:31:36:12:36:b7:75:a3:77:57:81:c1:b8:66:e3:6d: 46:c5:3e:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNNe6koqVbMtZ5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzI1MloXDTI1MDcyNDA4MzI1MlowLzEtMCsGA1UEAxMk MzYxZDZiOTctNWViYy00NTgzLWFjYTYtZGU5M2M2ZmE1ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga7eL55cnAimcd4rhd23vQ+zDaygLqgqqqvJ SpbBE38FhawcC8krTvLI2XsPYNAS8w8f7yahrCSHuu7oTYe3jqFNFZsiorX9Xk6P /QXs2U1hODVh0NLDSt7Qgh//+VbS8QGy4M8ABMtfGNhdnCYxP5aRT8QgUxJ5upMm 2cZyjNZFiBJxY6+tQY11PnnEAwUuKBctCfMTTvSzMOvs7bsd3kHdGcRPNTgWDjfR LxrVdchrcndTUmo6tonpri0psfGDVP1Hrjf8t0iMyXHuXcZHyZJChtoY0gVOeV5s mSbtcMHuaUQNea00l02esXDGQmJIMIFu7yXufThQBXU0ZnjLpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBM0waCDgGkfxB7bEJ47ue0eL4LgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzQzOWQxYTEtOTQxYi0z ZTBmLWI0YmYtZTMyNjdkYjIwNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEo+kGybyX1ngrBgRPDHyPrY/yFGeeU2kot3UEJOQWPxIyhYjQBh vbgVH+TnerCDy/0t6TlHvmrb88Ytnfc+HnCkDFaphiyfUwLSezjVynfWY1Befv7I OI2aknzBRMx9AsmEQu5M6TJQ9le03VvkdAsSTVvEkfq+r7pqJ0y5/wXOjpZYJOOE cIWd4CWhzE2bEEFHzTESNL1Fy/ZiaY1n2wKFVhIy5wIVd+x62IVKPcuKIQp+7wEO wJxXK5s3uOW2rp+ryVQNmLE3BDZu+5cS7Eg5DNuq4Uq3UrBYVtstfZt8CDJmG8Zv WaoDWesV/TE2Eja3daN3V4HBuGbjbUbFPpY= -----END CERTIFICATE-----Generated at Fri May 9 18:47:07 2025 by rpki-client