$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa File: a5e600de-f326-3392-a8c2-4489902db132.roa (raw, json) Hash identifier: lyp7h81kL2n3AeULeD/1siMzloJq+oCeujFYXg5rMqQ= Subject key identifier: F8:7A:C9:5A:3E:0E:BB:ED:10:38:23:50:37:33:A1:A6:CB:BB:46:53 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A23DF801A660EA51F0BBD530 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa Signing time: Thu 24 Apr 2025 15:39:38 +0000 ROA not before: Thu 24 Apr 2025 15:39:38 +0000 ROA not after: Wed 23 Jul 2025 15:39:38 +0000 asID: 207266 IP address blocks: 2001:500:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:3d:f8:01:a6:60:ea:51:f0:bb:d5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 15:39:38 2025 GMT Not After : Jul 23 15:39:38 2025 GMT Subject: CN=657557b9-6380-4be5-beb9-f78ca60db166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:bb:04:ce:43:24:bf:84:bd:ff:64:cc:6f: a7:58:48:b4:dd:61:b3:78:12:44:5e:79:72:e4:cd: 02:00:70:20:ae:e2:ae:b4:2b:c9:3f:bd:b1:81:68: d4:6a:8b:02:41:45:fb:34:e6:57:03:16:71:b9:f3: 1c:f6:f2:b1:e2:2a:b3:1d:e8:0a:17:4f:7b:8f:17: d9:dd:d3:c3:d4:4a:2a:ae:46:4d:8e:4f:79:8f:aa: 43:b1:6d:52:f4:f0:c9:91:93:f9:bb:e9:b9:09:50: 7d:9e:c2:1a:83:88:85:9a:c5:aa:e9:ea:2f:dd:0c: d1:a1:5e:6d:ae:da:5a:a9:b6:ab:90:e6:17:73:fd: f1:ad:6d:58:6a:3f:db:0b:cf:1d:f5:8e:00:3b:14: c6:1b:66:12:8c:13:00:33:2a:89:19:42:ae:6e:db: 78:44:87:3d:02:9e:2f:b7:21:2c:ec:a3:40:ae:c1: 43:a3:6f:13:22:7e:6b:e8:66:d2:8d:7d:cd:55:1f: b0:61:fc:95:de:9e:7a:92:c8:ad:31:a3:2f:dc:d4: 81:39:a7:f9:d1:32:e8:da:a0:ab:53:08:00:09:37: c8:fd:eb:31:b5:c5:64:19:55:0b:c1:58:27:4d:22: 3e:d4:ee:c5:16:88:4a:b0:cb:39:9d:fa:c2:50:a6: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7A:C9:5A:3E:0E:BB:ED:10:38:23:50:37:33:A1:A6:CB:BB:46:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a5e600de-f326-3392-a8c2-4489902db132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ec:9f:47:2a:64:a0:cf:09:2a:58:98:09:90:4e:bd:b9:57: 20:6e:47:5b:b0:27:46:bd:75:de:0e:73:8a:a6:33:cb:c8:f1: dd:e4:48:6a:f9:d9:8d:05:7b:ad:5a:c9:f7:7d:82:10:1a:a7: 33:67:ec:ae:90:cd:8a:f4:14:1c:e4:8a:f1:a4:75:2d:38:5f: 7b:a0:41:fb:ea:7a:c8:9d:36:2c:0b:4a:2f:12:ac:d3:97:aa: 2b:04:ad:9b:4f:36:81:a7:cb:13:61:64:6d:17:df:6c:d5:fd: ea:b0:a8:b6:87:08:ed:d5:27:de:13:7b:44:af:60:65:bb:d0: 6c:96:f7:16:19:24:07:59:6f:67:88:db:3a:d9:70:53:7f:33: d7:ef:f3:dd:d6:e3:c8:9b:84:5a:63:dc:67:9a:60:12:c6:42: 42:ae:48:7d:0a:ea:7b:77:db:0f:d2:b6:be:8a:ff:c4:01:90: 89:05:17:73:0c:98:07:1e:81:3b:4e:ad:e5:f3:ec:39:83:c2: 22:d8:06:de:c2:32:17:4f:6f:cc:f1:ce:9c:fd:df:f4:b7:fa: 1b:29:5c:8e:8f:99:f8:cd:f4:c8:79:73:63:62:4b:c8:2f:c9: b8:68:60:ea:62:1f:81:ae:b0:bc:29:a5:d9:a5:32:99:4d:e8: e1:01:71:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmiPfgBpmDqUfC71TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE1MzkzOFoXDTI1MDcyMzE1MzkzOFowLzEtMCsGA1UEAxMk NjU3NTU3YjktNjM4MC00YmU1LWJlYjktZjc4Y2E2MGRiMTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqi7BM5DJL+Evf9kzG+nWEi03WGzeBJEXnly 5M0CAHAgruKutCvJP72xgWjUaosCQUX7NOZXAxZxufMc9vKx4iqzHegKF097jxfZ 3dPD1EoqrkZNjk95j6pDsW1S9PDJkZP5u+m5CVB9nsIag4iFmsWq6eov3QzRoV5t rtpaqbarkOYXc/3xrW1Yaj/bC88d9Y4AOxTGG2YSjBMAMyqJGUKubtt4RIc9Ap4v tyEs7KNArsFDo28TIn5r6GbSjX3NVR+wYfyV3p56ksitMaMv3NSBOaf50TLo2qCr UwgACTfI/esxtcVkGVULwVgnTSI+1O7FFohKsMs5nfrCUKYXwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPh6yVo+DrvtEDgjUDczoabLu0ZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTVlNjAwZGUtZjMyNi0z MzkyLWE4YzItNDQ4OTkwMmRiMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIXsn0cqZKDPCSpYmAmQTr25VyBuR1uwJ0a9dd4Oc4qmM8vI8d3k SGr52Y0Fe61ayfd9ghAapzNn7K6QzYr0FBzkivGkdS04X3ugQfvqesidNiwLSi8S rNOXqisErZtPNoGnyxNhZG0X32zV/eqwqLaHCO3VJ94Te0SvYGW70GyW9xYZJAdZ b2eI2zrZcFN/M9fv893W48ibhFpj3GeaYBLGQkKuSH0K6nt32w/Str6K/8QBkIkF F3MMmAcegTtOreXz7DmDwiLYBt7CMhdPb8zxzpz93/S3+hspXI6PmfjN9Mh5c2Ni S8gvybhoYOpiH4GusLwppdmlMplN6OEBcSk= -----END CERTIFICATE-----Generated at Sat May 10 21:14:10 2025 by rpki-client