$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80a7a36d-b66e-394e-9156-33e7cbc1b7e0.roa File: 80a7a36d-b66e-394e-9156-33e7cbc1b7e0.roa (raw, json) Hash identifier: hEsvDh+bExWFVJ+vjYQb/Qu2jM7Pbh18lXFVQs2HZ0A= Subject key identifier: 0C:75:5C:83:84:FE:A9:5C:AA:53:4B:55:0B:5A:09:1A:A8:CF:BA:C7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D164E459DCE443544A880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80a7a36d-b66e-394e-9156-33e7cbc1b7e0.roa Signing time: Thu 06 Mar 2025 13:19:53 +0000 ROA not before: Thu 06 Mar 2025 13:19:53 +0000 ROA not after: Wed 04 Jun 2025 12:19:53 +0000 asID: 207266 IP address blocks: 2001:500:4d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:16:4e:45:9d:ce:44:35:44:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:53 2025 GMT Not After : Jun 4 12:19:53 2025 GMT Subject: CN=b83eb36a-df87-49e4-a542-a73584694dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:8c:7c:03:ce:d8:92:df:77:a1:48:cf:9a: 46:d4:27:1a:27:21:6d:73:12:43:0a:e9:59:76:90: 5a:a8:04:9f:d7:53:51:4b:1f:26:88:ca:61:c0:4e: c5:0e:63:a4:2f:0b:ec:36:c8:32:a8:2a:be:cc:d3: 21:70:8c:b4:8d:cf:2f:d4:b0:46:c8:ce:95:3c:c0: db:b2:eb:e4:02:48:aa:75:1b:67:0f:07:5b:8f:15: 80:de:13:4d:f4:6b:ac:7c:5e:3d:09:3a:b2:d4:87: 42:39:b5:1b:37:4a:66:2c:67:01:58:6c:ae:83:1e: 9c:4b:db:7d:9c:83:53:0a:e6:5c:d0:e1:35:b9:c1: 46:f0:f1:ac:fa:70:df:fb:ee:1c:25:15:0a:8a:63: ed:42:33:23:67:2e:1b:50:54:f9:2d:46:29:3b:0f: 07:cd:f3:a8:f8:41:77:8b:60:35:0b:fa:08:f5:70: 18:fa:3b:bf:28:6b:ec:09:9a:80:93:68:63:b3:a8: fd:06:f6:e1:20:19:91:d8:6b:1e:2e:1b:f4:40:39: 48:e1:53:2f:e3:30:48:8f:c2:0e:17:72:0d:33:bf: fe:b1:32:86:72:97:2e:39:a6:4b:45:90:08:90:8c: 89:9a:1b:05:8a:a0:01:83:56:fc:f8:ea:28:fc:99: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:75:5C:83:84:FE:A9:5C:AA:53:4B:55:0B:5A:09:1A:A8:CF:BA:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/80a7a36d-b66e-394e-9156-33e7cbc1b7e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f5:f8:fa:76:59:a2:f5:72:4d:cc:9e:e7:7a:17:06:40:f4: e6:18:5f:25:02:af:56:64:62:9e:d3:0f:f6:b3:81:01:d1:79: f5:c3:b7:4a:26:55:12:65:cd:dc:6d:4a:f1:e7:76:ba:9f:e4: 5b:5e:1c:bc:d9:3b:a1:a7:83:9a:c7:d0:d6:fb:a4:d8:4e:db: f2:a8:c5:af:b3:db:cc:a6:24:7d:46:d3:7f:90:01:c7:02:cb: fe:3a:4b:b9:59:83:b1:19:b3:ff:5e:31:1c:84:b4:03:2f:47: ec:e3:d1:52:1e:07:f2:a9:e8:ad:2b:04:f4:cd:c8:75:2e:98: c4:b3:89:cb:f5:08:a8:e5:b7:20:4f:ca:d5:82:5f:f6:c2:bf: ab:5a:01:3a:a2:f3:69:40:fc:98:91:cc:f2:a3:63:da:2c:af: c3:84:06:f5:f2:c1:f6:64:08:8f:cd:bf:ff:d3:cf:f5:a1:63: ae:42:a6:ce:72:07:59:85:93:e2:b5:85:48:6c:52:f3:b8:ae: 34:4f:35:58:08:be:49:d2:24:3c:b8:bb:2a:ff:b3:9a:89:a6: d6:52:c5:c7:f0:b2:32:02:2d:75:e6:62:71:62:d9:a2:77:06: 6b:8f:53:47:e9:cd:7d:cb:a4:1d:68:0c:cb:4f:e7:4a:5a:f8: 2c:cf:ee:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZLRZORZ3ORDVEqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1M1oXDTI1MDYwNDEyMTk1M1owLzEtMCsGA1UEAxMk YjgzZWIzNmEtZGY4Ny00OWU0LWE1NDItYTczNTg0Njk0ZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLuMfAPO2JLfd6FIz5pG1CcaJyFtcxJDCulZ dpBaqASf11NRSx8miMphwE7FDmOkLwvsNsgyqCq+zNMhcIy0jc8v1LBGyM6VPMDb suvkAkiqdRtnDwdbjxWA3hNN9GusfF49CTqy1IdCObUbN0pmLGcBWGyugx6cS9t9 nINTCuZc0OE1ucFG8PGs+nDf++4cJRUKimPtQjMjZy4bUFT5LUYpOw8HzfOo+EF3 i2A1C/oI9XAY+ju/KGvsCZqAk2hjs6j9BvbhIBmR2GseLhv0QDlI4VMv4zBIj8IO F3INM7/+sTKGcpcuOaZLRZAIkIyJmhsFiqABg1b8+Ooo/JkFIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAx1XIOE/qlcqlNLVQtaCRqoz7rHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODBhN2EzNmQtYjY2ZS0z OTRlLTkxNTYtMzNlN2NiYzFiN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABX1+Pp2WaL1ck3Mnud6FwZA9OYYXyUCr1ZkYp7TD/azgQHRefXD t0omVRJlzdxtSvHndrqf5FteHLzZO6Gng5rH0Nb7pNhO2/Koxa+z28ymJH1G03+Q AccCy/46S7lZg7EZs/9eMRyEtAMvR+zj0VIeB/Kp6K0rBPTNyHUumMSzicv1CKjl tyBPytWCX/bCv6taATqi82lA/JiRzPKjY9osr8OEBvXywfZkCI/Nv//Tz/WhY65C ps5yB1mFk+K1hUhsUvO4rjRPNVgIvknSJDy4uyr/s5qJptZSxcfwsjICLXXmYnFi 2aJ3BmuPU0fpzX3LpB1oDMtP50pa+CzP7k4= -----END CERTIFICATE-----Generated at Sat Mar 15 06:20:00 2025 by rpki-client