$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa File: 91a41c4e-b0c0-3279-9cb1-3434d5687478.roa (raw, json) Hash identifier: iwcAmZWSow7jDC9wL1//JHzDq7vFOE3bOsfeKeK+7Pk= Subject key identifier: 5D:7B:F6:CE:27:39:15:D3:8B:A6:CD:08:DD:DC:29:50:A9:0C:EF:60 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A43523F6C7F571A3D90E0500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa Signing time: Fri 25 Apr 2025 08:33:28 +0000 ROA not before: Fri 25 Apr 2025 08:33:28 +0000 ROA not after: Thu 24 Jul 2025 08:33:28 +0000 asID: 12041 IP address blocks: 2001:500:dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:35:23:f6:c7:f5:71:a3:d9:0e:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:33:28 2025 GMT Not After : Jul 24 08:33:28 2025 GMT Subject: CN=3cb5cf6b-584b-40d1-8746-705016d7d198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:df:c4:b9:bd:77:b8:4d:7f:39:66:6c:73: 80:f1:c7:f6:ab:c0:74:fb:ed:e4:ed:be:96:02:11: 45:8d:35:19:3f:2e:dc:ea:c4:1c:64:f6:fc:20:68: 76:4c:60:0e:a8:11:47:10:6b:a0:07:89:56:51:ce: bb:ce:81:cc:e5:c4:00:85:d9:6d:58:9c:8d:91:ca: 30:79:d6:44:27:ac:7b:77:14:ed:4b:15:13:e1:b9: 97:97:70:03:ab:bd:ad:ea:67:7a:93:57:d3:29:f9: c2:8a:a0:b3:cd:39:87:81:ef:35:49:4f:9f:b2:5f: a9:00:12:b5:ec:a6:aa:f5:07:23:74:ff:17:1b:2f: ee:64:84:f4:7c:b3:3d:fd:e3:86:c4:2c:a6:88:ea: 55:2c:c0:67:cb:1a:32:e7:fb:08:88:77:e7:7f:65: 13:2a:cf:b4:2b:dd:2d:10:51:8e:b5:70:6f:9f:fc: cb:f0:cf:20:5f:cf:e4:1d:4c:01:57:39:99:98:b3: ad:07:67:45:09:4d:bf:19:40:77:4d:55:78:2b:d1: a5:4b:50:e7:ba:7c:65:ec:6f:77:38:d9:88:ea:43: 09:5a:fa:49:c0:a2:78:8f:8f:09:30:2d:5b:2e:d3: a1:58:7b:42:4d:da:a9:46:fd:f0:b8:16:56:2b:8a: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7B:F6:CE:27:39:15:D3:8B:A6:CD:08:DD:DC:29:50:A9:0C:EF:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91a41c4e-b0c0-3279-9cb1-3434d5687478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:dc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:fb:b1:b8:6c:a4:8d:b9:17:55:b6:cd:7e:42:fe:3c:fd:8f: b6:10:28:9c:28:d7:7f:05:34:04:12:59:6b:e4:ae:40:a7:d4: 93:e9:8a:41:1d:2d:7f:1f:a4:c7:0f:0f:e0:56:df:ed:58:ff: 4f:10:60:6a:48:d5:48:3a:b7:87:41:18:52:3e:16:1d:bc:fc: 75:8e:ee:f6:56:c0:b0:e1:e4:79:d7:2d:24:2a:29:03:6f:61: a2:df:69:3a:d6:11:62:c8:04:12:4f:4c:41:e2:07:61:d9:7a: bf:0f:a4:26:59:2e:50:fa:ad:4e:61:61:f6:66:78:44:d6:08: f8:e8:9f:17:46:9d:32:d8:de:08:33:74:2d:dd:91:ee:e6:82: 52:23:a8:20:dc:d6:bb:f8:a0:d9:41:6a:5f:bf:7c:fe:bd:9b: 4e:ff:db:e7:fd:5b:51:a7:8c:bf:70:45:7d:26:82:35:9f:52: 41:35:57:09:78:0e:d4:e5:81:dc:51:7c:6f:ab:b6:9a:20:51: 15:db:0d:cc:e5:fa:2e:66:a6:13:b7:41:da:e4:ce:47:67:d0: 29:3d:18:9d:41:4f:b6:8a:c5:87:c6:79:c3:ea:fb:7f:2e:24: 71:26:fa:ac:53:ef:36:cb:af:97:56:7a:95:55:93:c9:d5:24: dd:07:ab:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNSP2x/Vxo9kOBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzMyOFoXDTI1MDcyNDA4MzMyOFowLzEtMCsGA1UEAxMk M2NiNWNmNmItNTg0Yi00MGQxLTg3NDYtNzA1MDE2ZDdkMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+vfxLm9d7hNfzlmbHOA8cf2q8B0++3k7b6W AhFFjTUZPy7c6sQcZPb8IGh2TGAOqBFHEGugB4lWUc67zoHM5cQAhdltWJyNkcow edZEJ6x7dxTtSxUT4bmXl3ADq72t6md6k1fTKfnCiqCzzTmHge81SU+fsl+pABK1 7Kaq9QcjdP8XGy/uZIT0fLM9/eOGxCymiOpVLMBnyxoy5/sIiHfnf2UTKs+0K90t EFGOtXBvn/zL8M8gX8/kHUwBVzmZmLOtB2dFCU2/GUB3TVV4K9GlS1Dnunxl7G93 ONmI6kMJWvpJwKJ4j48JMC1bLtOhWHtCTdqpRv3wuBZWK4r7RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF179s4nORXTi6bNCN3cKVCpDO9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTFhNDFjNGUtYjBjMC0z Mjc5LTljYjEtMzQzNGQ1Njg3NDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFX7sbhspI25F1W2zX5C/jz9j7YQKJwo138FNAQSWWvkrkCn1JPp ikEdLX8fpMcPD+BW3+1Y/08QYGpI1Ug6t4dBGFI+Fh28/HWO7vZWwLDh5HnXLSQq KQNvYaLfaTrWEWLIBBJPTEHiB2HZer8PpCZZLlD6rU5hYfZmeETWCPjonxdGnTLY 3ggzdC3dke7mglIjqCDc1rv4oNlBal+/fP69m07/2+f9W1GnjL9wRX0mgjWfUkE1 Vwl4DtTlgdxRfG+rtpogURXbDczl+i5mphO3Qdrkzkdn0Ck9GJ1BT7aKxYfGecPq +38uJHEm+qxT7zbLr5dWepVVk8nVJN0Hqy8= -----END CERTIFICATE-----Generated at Sat May 10 20:48:48 2025 by rpki-client