$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/71f7bc5a-3856-38a4-8bf0-0490691382b0.roa File: 71f7bc5a-3856-38a4-8bf0-0490691382b0.roa (raw, json) Hash identifier: 1EhV6+UL7PU81l90q5MQV4/V6HH8YrI9X+3mHJ81N2g= Subject key identifier: 96:B9:A0:7A:ED:8C:AF:B7:C8:00:27:BE:2A:3D:4F:D8:EF:28:E1:B0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D169E82F9FB203FFB7BE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/71f7bc5a-3856-38a4-8bf0-0490691382b0.roa Signing time: Thu 06 Mar 2025 13:19:53 +0000 ROA not before: Thu 06 Mar 2025 13:19:53 +0000 ROA not after: Wed 04 Jun 2025 12:19:53 +0000 asID: 207266 IP address blocks: 2001:500:a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:16:9e:82:f9:fb:20:3f:fb:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:53 2025 GMT Not After : Jun 4 12:19:53 2025 GMT Subject: CN=1bb424be-6c0a-4dc0-96cb-a38e08abf9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:73:fa:d4:b2:a9:74:33:97:85:f6:1b:e0:8e: fd:b3:78:7e:2a:2e:91:72:3a:9e:fe:7d:d6:83:f6: 90:12:db:f8:40:2a:6e:db:f6:ff:7e:5f:3a:80:4c: 26:f9:cc:9c:ae:b4:ac:74:09:9b:42:3c:69:99:2f: 82:c1:a4:23:2e:ea:8e:21:d7:b7:15:5a:f8:0b:39: 6d:9d:ce:5f:f4:78:1b:ae:e8:e3:4f:4d:41:e3:b0: ef:03:33:31:9f:97:fd:75:cf:04:be:c5:b8:f5:57: f7:b4:c9:d5:bf:96:fe:28:da:ae:c2:48:81:c7:45: 8f:62:c6:92:a0:c9:e9:f6:3a:55:bb:c8:31:1b:57: 5b:77:6d:76:1d:b3:75:86:62:02:4e:b1:69:c0:da: e1:a2:8c:d3:74:30:a2:e8:4a:5a:28:46:9f:a0:0c: e4:a5:0e:94:82:ca:27:91:8e:e5:0d:01:b2:66:66: 58:33:85:e9:39:72:70:d9:54:7f:c2:03:b5:46:78: 71:6b:c6:72:a0:c8:1a:f4:26:a8:dd:3a:83:e1:19: 40:e2:8d:56:75:c6:0b:16:86:61:9a:f3:94:2c:ea: d3:04:2c:04:ae:46:88:b4:6f:d9:d2:97:76:ec:a7: 09:cf:c9:6e:41:38:86:1d:99:58:c7:48:0c:11:a6: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B9:A0:7A:ED:8C:AF:B7:C8:00:27:BE:2A:3D:4F:D8:EF:28:E1:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/71f7bc5a-3856-38a4-8bf0-0490691382b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:65:f1:64:a9:39:41:1b:97:20:10:9d:ff:d6:1f:fc:b3:0b: 70:88:75:eb:09:9a:4a:d1:4b:ee:5c:7e:10:d8:fa:6a:1c:9e: e6:6e:8a:cc:8e:8c:96:a9:a4:54:7f:3a:94:4b:bb:55:9b:c3: 5e:d9:75:c5:5c:76:d4:5b:89:ee:6c:08:d0:3a:b4:04:fa:5d: d4:44:dc:81:62:b5:28:a4:25:ea:ae:89:f0:0a:4e:a9:f1:91: 50:cf:dc:5f:e9:fa:7e:d9:0d:04:97:6c:a5:c3:55:6f:3d:cb: 6d:32:cc:25:f9:2f:d1:9e:b3:90:a6:1a:b8:b3:8c:a3:e5:62: 66:64:17:c5:10:3b:25:5b:66:2d:b2:45:70:b4:1f:84:22:39: 53:fd:14:fd:23:72:89:95:cc:ca:b0:57:19:31:cc:85:e1:e8: 1d:e6:45:b1:fa:83:8b:64:0f:b7:9f:c3:3c:84:97:25:1b:8f: 71:63:cd:da:21:3e:66:1c:29:d5:e5:03:db:ab:1c:8a:bb:24: 61:73:fe:f2:64:12:04:c6:dd:43:d1:32:06:c6:41:cf:35:be: 1c:7c:d0:1a:0a:c6:4b:62:af:61:5c:92:37:63:b5:30:09:41: c5:16:4e:6d:0b:d2:06:4d:23:9a:0c:e8:78:0d:bd:22:31:62: 5a:28:7b:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZLRaegvn7ID/7e+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1M1oXDTI1MDYwNDEyMTk1M1owLzEtMCsGA1UEAxMk MWJiNDI0YmUtNmMwYS00ZGMwLTk2Y2ItYTM4ZTA4YWJmOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnP61LKpdDOXhfYb4I79s3h+Ki6Rcjqe/n3W g/aQEtv4QCpu2/b/fl86gEwm+cycrrSsdAmbQjxpmS+CwaQjLuqOIde3FVr4Czlt nc5f9HgbrujjT01B47DvAzMxn5f9dc8EvsW49Vf3tMnVv5b+KNquwkiBx0WPYsaS oMnp9jpVu8gxG1dbd212HbN1hmICTrFpwNrhoozTdDCi6EpaKEafoAzkpQ6Ugson kY7lDQGyZmZYM4XpOXJw2VR/wgO1Rnhxa8ZyoMga9Cao3TqD4RlA4o1WdcYLFoZh mvOULOrTBCwErkaItG/Z0pd27KcJz8luQTiGHZlYx0gMEaaDbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJa5oHrtjK+3yAAnvio9T9jvKOGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzFmN2JjNWEtMzg1Ni0z OGE0LThiZjAtMDQ5MDY5MTM4MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFl8WSpOUEblyAQnf/WH/yzC3CIdesJmkrRS+5cfhDY+mocnuZu isyOjJappFR/OpRLu1Wbw17ZdcVcdtRbie5sCNA6tAT6XdRE3IFitSikJequifAK TqnxkVDP3F/p+n7ZDQSXbKXDVW89y20yzCX5L9Ges5CmGrizjKPlYmZkF8UQOyVb Zi2yRXC0H4QiOVP9FP0jcomVzMqwVxkxzIXh6B3mRbH6g4tkD7efwzyElyUbj3Fj zdohPmYcKdXlA9urHIq7JGFz/vJkEgTG3UPRMgbGQc81vhx80BoKxktir2Fckjdj tTAJQcUWTm0L0gZNI5oM6HgNvSIxYlooe9E= -----END CERTIFICATE-----Generated at Sat Mar 15 06:18:44 2025 by rpki-client