$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e54b960f-f08b-362f-b430-187955fdce20.roa File: e54b960f-f08b-362f-b430-187955fdce20.roa (raw, json) Hash identifier: IXOUTwttlee9k+BMBLUw8jrDE4NLzTCHvpIH8YWPTn0= Subject key identifier: 30:06:CD:9D:66:94:BB:6C:9E:6F:AF:E7:8E:38:12:97:43:0F:B7:0C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A434B6EC5DB8E08166D95080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e54b960f-f08b-362f-b430-187955fdce20.roa Signing time: Fri 25 Apr 2025 08:32:36 +0000 ROA not before: Fri 25 Apr 2025 08:32:36 +0000 ROA not after: Thu 24 Jul 2025 08:32:36 +0000 asID: 12041 IP address blocks: 2001:500:c9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:34:b6:ec:5d:b8:e0:81:66:d9:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:32:36 2025 GMT Not After : Jul 24 08:32:36 2025 GMT Subject: CN=24604fcd-3401-45a7-85ee-41f93e3bd7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8c:bf:37:e8:c7:65:ea:9c:23:c7:ef:d3:fe: 7b:7d:c4:ae:bf:bf:7d:2a:e0:77:c9:46:ac:75:02: 14:e2:0c:2b:94:6c:33:32:8d:a6:b0:d7:5b:30:f8: 2e:58:76:21:71:68:31:02:6d:75:be:7d:2d:3c:c7: af:c9:25:1c:31:02:f1:8f:d5:a0:aa:1c:25:55:85: 20:b8:6c:ad:a3:4b:7d:04:30:44:f2:95:22:d1:db: b3:c9:74:a4:f1:b4:c7:e7:b5:ca:6d:b3:96:e6:1e: ed:f0:3e:06:e7:d3:cc:b6:bf:c3:76:e6:8b:39:6c: 72:c3:35:22:b9:c4:18:ed:dc:b5:d7:ec:5b:17:09: a4:2b:e8:f3:7c:1b:c5:35:76:08:33:c0:9f:9e:aa: 3d:a6:ed:24:b7:5f:76:f4:4c:a8:af:16:c2:f1:26: 0e:62:c1:89:da:37:90:96:d4:ed:f0:77:1c:e0:96: d6:73:32:52:c6:3c:b5:1d:c7:61:97:62:b6:f7:8e: 45:a7:d7:38:65:9d:14:61:12:eb:b4:3b:f1:0e:a4: 80:b7:2b:88:08:48:95:7c:6a:b5:51:52:da:e1:7c: d4:a4:30:1f:f3:c2:2c:19:ce:b0:56:06:a5:28:e6: 47:4f:a8:a7:d2:6a:99:5e:46:85:03:0e:bf:8b:d4: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:06:CD:9D:66:94:BB:6C:9E:6F:AF:E7:8E:38:12:97:43:0F:B7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e54b960f-f08b-362f-b430-187955fdce20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:27:18:fb:3d:30:2e:8f:e2:a8:88:b6:3f:35:bc:84:64:6c: 5a:b8:63:10:25:97:dd:a6:a4:c1:28:98:3e:36:65:c9:dd:9a: cc:61:cf:fd:78:85:a6:d7:c7:ba:b5:33:b6:51:b3:61:2b:e6: 54:b8:33:e1:eb:f6:3f:ee:00:6f:65:c0:e7:95:9f:5c:52:91: d8:42:25:d7:8f:12:e6:c3:be:87:6c:49:5e:bf:d3:ce:f9:70: e3:df:93:a8:d3:0d:2f:b7:fa:b0:00:48:16:5b:2b:0d:1c:ad: 1d:6a:ab:20:c9:4a:50:fa:19:05:00:bf:fb:a7:71:55:1b:80: 5e:de:89:9a:01:82:0e:f4:0e:b1:38:3f:89:28:97:1a:55:bd: 74:d0:36:0e:60:89:30:62:a8:97:4f:26:0a:2d:af:23:e7:d8: 6f:97:30:86:3c:bb:93:28:d5:6b:f6:e9:4d:40:96:8f:9f:97: c8:db:d7:37:40:a1:c3:5f:c8:6a:31:c2:6f:fa:94:83:ee:e1: f6:47:08:f0:3b:8b:07:df:96:d5:76:4e:78:4c:8f:6a:ed:b5: 62:84:8f:e8:52:8b:cf:76:74:71:1b:16:52:e1:08:14:1b:52: bf:e5:5c:4f:a1:a0:03:3b:3d:22:9f:73:e5:ee:e0:58:b3:46: 2b:48:db:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNLbsXbjggWbZUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MzIzNloXDTI1MDcyNDA4MzIzNlowLzEtMCsGA1UEAxMk MjQ2MDRmY2QtMzQwMS00NWE3LTg1ZWUtNDFmOTNlM2JkN2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoy/N+jHZeqcI8fv0/57fcSuv799KuB3yUas dQIU4gwrlGwzMo2msNdbMPguWHYhcWgxAm11vn0tPMevySUcMQLxj9WgqhwlVYUg uGyto0t9BDBE8pUi0duzyXSk8bTH57XKbbOW5h7t8D4G59PMtr/DduaLOWxywzUi ucQY7dy11+xbFwmkK+jzfBvFNXYIM8Cfnqo9pu0kt1929EyorxbC8SYOYsGJ2jeQ ltTt8Hcc4JbWczJSxjy1Hcdhl2K2945Fp9c4ZZ0UYRLrtDvxDqSAtyuICEiVfGq1 UVLa4XzUpDAf88IsGc6wVgalKOZHT6in0mqZXkaFAw6/i9RVCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDAGzZ1mlLtsnm+v5444EpdDD7cMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTU0Yjk2MGYtZjA4Yi0z NjJmLWI0MzAtMTg3OTU1ZmRjZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAConGPs9MC6P4qiItj81vIRkbFq4YxAll92mpMEomD42Zcndmsxh z/14habXx7q1M7ZRs2Er5lS4M+Hr9j/uAG9lwOeVn1xSkdhCJdePEubDvodsSV6/ 0875cOPfk6jTDS+3+rAASBZbKw0crR1qqyDJSlD6GQUAv/uncVUbgF7eiZoBgg70 DrE4P4kolxpVvXTQNg5giTBiqJdPJgotryPn2G+XMIY8u5Mo1Wv26U1Alo+fl8jb 1zdAocNfyGoxwm/6lIPu4fZHCPA7iwffltV2TnhMj2rttWKEj+hSi892dHEbFlLh CBQbUr/lXE+hoAM7PSKfc+Xu4FizRitI2xI= -----END CERTIFICATE-----Generated at Thu May 8 16:55:18 2025 by rpki-client