$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/76d48b7b-0b72-3000-a9a4-f62f96a9ec81.roa File: 76d48b7b-0b72-3000-a9a4-f62f96a9ec81.roa (raw, json) Hash identifier: 6kn7/hgmqj+lyChPFFlpmxfram+kcaT3Vg3yZAMByMA= Subject key identifier: 86:C8:CE:BB:49:9C:3A:B0:12:42:A3:70:0D:A6:86:49:CE:00:33:36 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D158B24E6AC48C9F623C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/76d48b7b-0b72-3000-a9a4-f62f96a9ec81.roa Signing time: Thu 06 Mar 2025 13:19:52 +0000 ROA not before: Thu 06 Mar 2025 13:19:52 +0000 ROA not after: Wed 04 Jun 2025 12:19:52 +0000 asID: 207266 IP address blocks: 2001:500:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:15:8b:24:e6:ac:48:c9:f6:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:52 2025 GMT Not After : Jun 4 12:19:52 2025 GMT Subject: CN=7f587f81-2d05-4e49-a724-b08cc99d35fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:d6:4c:05:54:a5:a6:5b:17:4a:b4:48:80: e8:a0:60:02:80:c0:a9:be:a5:e9:70:ab:e3:ac:9a: c7:00:20:27:f8:f8:9b:74:f9:14:ce:a3:b3:a2:f3: 5a:be:ed:9d:06:c3:fd:a6:93:94:55:ea:66:ba:20: c3:e1:5b:62:33:43:c3:9a:fa:01:28:a9:07:36:10: 0c:92:c0:04:37:cd:8a:a8:2a:85:86:a8:f5:aa:2b: 3f:58:1a:e6:e2:ca:3f:bd:89:41:e6:be:89:17:8b: 26:52:2e:5f:2d:69:5c:f2:5e:95:5d:e1:9b:d3:39: 34:8e:bf:91:25:e4:fb:33:4e:6c:cf:67:9d:ca:89: f5:a7:38:5f:2f:46:57:ac:e4:d2:1c:4b:2a:63:5b: 69:4a:7a:8b:51:96:5e:6c:da:32:3c:a0:1e:22:c0: 13:c2:97:3f:56:2d:f0:ac:46:75:19:d2:e3:b4:ed: 57:74:51:18:41:78:c1:2d:9a:56:5a:ac:1b:45:54: ba:90:4b:7a:3f:e5:03:66:76:08:87:93:65:52:e5: 55:c3:9b:c6:45:51:69:a2:96:41:00:2f:e8:ac:c4: f9:40:31:50:db:c3:b8:83:3a:8c:a4:9c:f1:b3:6a: 3b:1f:d9:82:9a:3e:78:fe:2b:9a:12:2d:db:47:c4: 2f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C8:CE:BB:49:9C:3A:B0:12:42:A3:70:0D:A6:86:49:CE:00:33:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/76d48b7b-0b72-3000-a9a4-f62f96a9ec81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:51:c8:12:f5:b2:c6:3d:16:2e:51:d1:64:9b:93:df:71:90: 83:db:c4:0d:f9:9a:23:19:b5:9a:b5:92:0b:19:d2:e9:3c:0e: 40:88:f4:1d:6d:76:50:9a:3e:3f:e4:0f:91:4c:93:1c:23:50: 3e:02:74:78:6c:7a:b6:32:3d:7b:59:e6:6f:ab:74:e6:2a:a8: 96:38:f4:c1:11:d5:af:35:84:35:94:51:9f:69:94:ef:0a:1f: 7b:3a:46:ba:88:56:44:72:39:de:8c:dd:72:c9:60:a7:16:74: 5d:49:35:8d:de:ea:1e:aa:d5:53:78:83:f0:eb:38:27:3c:b3: c8:e3:8e:92:0d:f6:a9:86:f1:b5:7b:b8:8b:03:13:cd:22:3c: 3d:5a:84:3d:c3:05:b6:b5:fd:7d:45:f8:f0:08:0c:26:ae:fa: df:dd:73:1a:e9:e7:47:85:dc:9d:70:e1:2a:09:12:24:77:0a: 03:d8:0b:e4:05:64:7b:d2:35:b7:85:32:41:d1:3c:c4:4e:40: 9d:f4:02:c6:ee:8b:85:fa:30:44:6a:9a:86:72:6f:9e:cb:05: a2:0f:cc:31:1f:4e:20:4f:86:af:86:dc:98:6a:1e:c2:b6:8f: e4:ac:79:64:52:f9:ac:04:83:86:e8:29:48:ea:25:0e:b3:43: 6a:ac:81:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZLRWLJOasSMn2I8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1MloXDTI1MDYwNDEyMTk1MlowLzEtMCsGA1UEAxMk N2Y1ODdmODEtMmQwNS00ZTQ5LWE3MjQtYjA4Y2M5OWQzNWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlvWTAVUpaZbF0q0SIDooGACgMCpvqXpcKvj rJrHACAn+PibdPkUzqOzovNavu2dBsP9ppOUVepmuiDD4VtiM0PDmvoBKKkHNhAM ksAEN82KqCqFhqj1qis/WBrm4so/vYlB5r6JF4smUi5fLWlc8l6VXeGb0zk0jr+R JeT7M05sz2edyon1pzhfL0ZXrOTSHEsqY1tpSnqLUZZebNoyPKAeIsATwpc/Vi3w rEZ1GdLjtO1XdFEYQXjBLZpWWqwbRVS6kEt6P+UDZnYIh5NlUuVVw5vGRVFpopZB AC/orMT5QDFQ28O4gzqMpJzxs2o7H9mCmj54/iuaEi3bR8Qv5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIbIzrtJnDqwEkKjcA2mhknOADM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzZkNDhiN2ItMGI3Mi0z MDAwLWE5YTQtZjYyZjk2YTllYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAANRyBL1ssY9Fi5R0WSbk99xkIPbxA35miMZtZq1kgsZ0uk8DkCI 9B1tdlCaPj/kD5FMkxwjUD4CdHhserYyPXtZ5m+rdOYqqJY49MER1a81hDWUUZ9p lO8KH3s6RrqIVkRyOd6M3XLJYKcWdF1JNY3e6h6q1VN4g/DrOCc8s8jjjpIN9qmG 8bV7uIsDE80iPD1ahD3DBba1/X1F+PAIDCau+t/dcxrp50eF3J1w4SoJEiR3CgPY C+QFZHvSNbeFMkHRPMROQJ30Asbui4X6MERqmoZyb57LBaIPzDEfTiBPhq+G3Jhq HsK2j+SseWRS+awEg4boKUjqJQ6zQ2qsgTk= -----END CERTIFICATE-----Generated at Sat Mar 15 06:13:44 2025 by rpki-client