$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fcc6c6b5-77f6-31ec-9613-3fe17b0dca0d.roa File: fcc6c6b5-77f6-31ec-9613-3fe17b0dca0d.roa (raw, json) Hash identifier: P3VKBU8KeiGq+cUPVPmMVTwA81mbHTbd4nhZ6vLg51A= Subject key identifier: E8:D4:ED:CC:FF:D8:4C:FB:14:A1:05:C1:34:C5:96:0B:C4:48:B3:00 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A42EE123F1514EEECBF18640 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fcc6c6b5-77f6-31ec-9613-3fe17b0dca0d.roa Signing time: Fri 25 Apr 2025 08:20:51 +0000 ROA not before: Fri 25 Apr 2025 08:20:51 +0000 ROA not after: Thu 24 Jul 2025 08:20:51 +0000 asID: 12041 IP address blocks: 2001:500:c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:2e:e1:23:f1:51:4e:ee:cb:f1:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 25 08:20:51 2025 GMT Not After : Jul 24 08:20:51 2025 GMT Subject: CN=576502fe-0a3c-4615-8dc1-43d74875eba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:be:c4:fa:b9:6d:39:70:b6:4b:d9:70:a1: e5:db:b8:1c:37:ce:d2:f9:0f:b7:ae:aa:53:d9:b8: 06:94:60:a0:d8:5e:d0:53:b2:aa:b8:ef:9a:04:b3: f1:cd:de:e7:dc:7a:4f:6d:96:aa:6e:2d:e7:c2:b5: dc:9a:1d:a0:22:8b:58:bf:6f:df:6a:5e:8e:33:3d: 53:c3:c6:e1:4b:dc:3e:98:72:91:f3:af:ea:9b:ab: ef:e5:e5:e1:a5:31:ae:99:eb:59:c5:1c:b7:a9:b1: 51:e5:d6:d3:e4:32:54:26:34:7b:41:38:88:73:13: 58:04:6b:48:22:b5:8d:0b:c3:53:37:d8:d7:00:3a: 74:88:3c:b1:65:cd:7a:da:43:e8:6a:8a:ae:e1:20: 9c:1d:90:fa:f1:ad:0c:21:01:1f:6d:a3:82:b8:9d: 59:c9:c1:9f:04:ff:0f:0d:b2:b3:d7:c1:1c:8a:24: 5c:d3:17:d0:c6:35:91:5a:9e:23:34:e7:d9:65:26: 4c:06:36:db:0b:c8:0f:93:d9:59:e9:4e:bb:16:38: 6f:cf:f3:1d:53:80:32:e9:26:07:af:ab:1f:2a:d5: 5c:20:b8:1c:1e:ec:31:f9:50:0d:1e:11:35:c6:1d: e4:bf:73:4b:11:33:81:ee:52:df:a2:0c:71:c1:6a: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D4:ED:CC:FF:D8:4C:FB:14:A1:05:C1:34:C5:96:0B:C4:48:B3:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fcc6c6b5-77f6-31ec-9613-3fe17b0dca0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:57:60:ac:71:39:69:2a:8d:0f:6f:18:4c:36:62:0e:e0:6d: 7b:40:2b:89:71:2c:fd:cb:4a:c0:a4:c2:b7:f0:5a:1b:08:86: d0:27:59:89:ef:12:dc:a1:70:55:c0:26:54:ab:ba:74:57:b9: ef:52:0f:07:4e:63:0c:3d:be:04:fa:d5:9b:82:4a:b0:31:85: aa:55:01:e0:ee:b3:ac:c1:2b:24:4d:ba:8b:da:60:b3:f0:96: 21:04:1f:e1:88:3c:71:f0:24:de:c8:ee:27:fd:e1:84:39:88: 25:c0:80:50:94:31:d1:88:c8:4a:d4:a4:e8:3a:69:c5:b8:77: f5:eb:e2:91:b9:ad:77:6f:07:b2:08:9e:3b:1b:26:05:2e:32: 91:18:1f:13:ef:d9:da:86:97:5b:a3:d0:85:15:9f:00:fd:dc: 79:d0:e1:cc:2d:ad:a3:0b:7a:5c:00:4f:82:ea:45:3f:ab:43: a9:22:19:b2:18:0b:28:c0:3d:88:95:51:21:3c:3c:7e:5b:67: 01:49:f4:ab:48:6f:42:25:e3:a0:70:4b:b6:25:f3:6f:ae:24: 7d:f9:00:55:b1:88:13:4e:5a:c9:56:c9:8e:c6:9c:18:ce:e5: bc:2a:61:06:9f:16:9d:18:ca:96:d9:33:be:d0:c8:04:43:27: 44:49:ac:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkLuEj8VFO7svxhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNTA4MjA1MVoXDTI1MDcyNDA4MjA1MVowLzEtMCsGA1UEAxMk NTc2NTAyZmUtMGEzYy00NjE1LThkYzEtNDNkNzQ4NzVlYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDq+xPq5bTlwtkvZcKHl27gcN87S+Q+3rqpT 2bgGlGCg2F7QU7KquO+aBLPxzd7n3HpPbZaqbi3nwrXcmh2gIotYv2/fal6OMz1T w8bhS9w+mHKR86/qm6vv5eXhpTGumetZxRy3qbFR5dbT5DJUJjR7QTiIcxNYBGtI IrWNC8NTN9jXADp0iDyxZc162kPoaoqu4SCcHZD68a0MIQEfbaOCuJ1ZycGfBP8P DbKz18EciiRc0xfQxjWRWp4jNOfZZSZMBjbbC8gPk9lZ6U67Fjhvz/MdU4Ay6SYH r6sfKtVcILgcHuwx+VANHhE1xh3kv3NLETOB7lLfogxxwWo3swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOjU7cz/2Ez7FKEFwTTFlgvESLMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmNjNmM2YjUtNzdmNi0z MWVjLTk2MTMtM2ZlMTdiMGRjYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNXYKxxOWkqjQ9vGEw2Yg7gbXtAK4lxLP3LSsCkwrfwWhsIhtAn WYnvEtyhcFXAJlSrunRXue9SDwdOYww9vgT61ZuCSrAxhapVAeDus6zBKyRNuova YLPwliEEH+GIPHHwJN7I7if94YQ5iCXAgFCUMdGIyErUpOg6acW4d/Xr4pG5rXdv B7IInjsbJgUuMpEYHxPv2dqGl1uj0IUVnwD93HnQ4cwtraMLelwAT4LqRT+rQ6ki GbIYCyjAPYiVUSE8PH5bZwFJ9KtIb0Il46BwS7Yl82+uJH35AFWxiBNOWslWyY7G nBjO5bwqYQafFp0YypbZM77QyARDJ0RJrOk= -----END CERTIFICATE-----Generated at Fri May 9 03:01:28 2025 by rpki-client