$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a63b594a-42ee-34c6-93ed-04314b3d054d.roa File: a63b594a-42ee-34c6-93ed-04314b3d054d.roa (raw, json) Hash identifier: jSdyzj++rfZgn6ZANiHAp7bvKYoKPeAebvEzPc7fTLs= Subject key identifier: 2B:5D:18:56:41:55:D5:D1:19:07:B3:E4:8A:85:7D:87:56:3B:39:7A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D160C29342CA486E6EE00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a63b594a-42ee-34c6-93ed-04314b3d054d.roa Signing time: Thu 06 Mar 2025 13:19:53 +0000 ROA not before: Thu 06 Mar 2025 13:19:53 +0000 ROA not after: Wed 04 Jun 2025 12:19:53 +0000 asID: 207266 IP address blocks: 2001:500:49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:16:0c:29:34:2c:a4:86:e6:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:53 2025 GMT Not After : Jun 4 12:19:53 2025 GMT Subject: CN=90adcb04-68f2-4ab2-8222-bd22ebd8142d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:e3:5a:e1:61:ac:fb:87:3f:ba:c2:2f:7f: eb:24:15:e3:ba:af:37:3c:e3:21:1f:d7:c4:d7:bf: ee:4c:27:46:7a:94:29:64:3f:b0:b8:c9:ce:dd:52: 45:4b:1a:66:f7:52:e4:11:f8:d0:43:9a:ec:04:b7: 7e:4a:1a:d6:0e:65:b4:7f:e4:05:61:12:cf:db:55: 2e:a1:93:cb:c1:e8:11:57:e0:f9:c7:06:78:a0:21: 32:5c:ee:ac:b3:c7:c1:48:98:ae:f8:7f:3e:06:8d: 49:c9:e5:20:46:da:de:2f:3f:ec:d7:04:f4:91:40: 78:af:28:c8:d5:bf:3c:4d:cf:f3:76:4f:fd:c8:ac: 68:f8:af:aa:89:bd:0a:09:a5:c6:72:aa:75:e6:a7: b4:94:2f:8f:6c:cc:6e:5b:c2:c7:85:ce:88:36:d9: 27:94:02:c3:70:f6:fb:98:4a:b8:58:b7:99:61:fa: 0a:10:91:0d:e4:8e:5e:53:94:7c:d3:0f:5d:6f:52: b3:96:53:c7:0e:5d:bf:1d:70:2c:97:be:af:b0:1a: c6:d7:ff:f4:d6:38:75:f5:a6:e3:3a:15:d4:5c:9d: a6:97:a0:96:fc:cc:b0:0a:4a:ed:72:ed:63:b7:40: 92:9f:5b:85:7a:b3:47:2f:e5:01:50:8c:92:e1:4e: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5D:18:56:41:55:D5:D1:19:07:B3:E4:8A:85:7D:87:56:3B:39:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a63b594a-42ee-34c6-93ed-04314b3d054d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:49::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ea:76:13:da:75:0d:9a:80:ae:f1:26:c8:ce:e7:73:40:63: ba:63:a5:22:a4:2e:3d:e9:d7:bb:18:84:fe:a4:c3:a5:6f:cc: 09:1a:c0:70:c0:3b:04:be:c4:22:6e:ab:3f:27:04:ff:63:93: 87:0a:cb:76:be:82:f6:da:b1:b6:09:54:6f:bd:8f:43:19:f6: b9:80:ac:ab:a4:a1:7a:67:37:ac:f8:9d:75:83:00:62:db:e0: 07:ad:73:fc:e9:bf:77:40:4d:0a:b0:0b:4c:49:e2:c6:75:e8: 58:1f:41:07:e2:cb:3a:25:19:6f:cc:96:1f:76:15:d2:f9:06: 8d:13:78:bf:ec:a4:3e:f8:45:2c:0a:22:a9:50:82:a8:c9:24: de:2d:ff:54:20:b2:82:ab:64:03:69:df:14:75:46:8d:0e:4a: 1e:cc:1c:38:e0:52:83:f4:4e:c1:93:be:a1:73:b7:e4:b7:b1: 73:bd:67:20:96:4d:13:59:9d:1f:0f:58:0e:b2:3b:51:43:3d: 77:b4:34:46:26:13:04:46:8d:49:ad:cb:d3:1f:6a:66:aa:2d: 7a:a1:d6:89:57:7f:67:d7:89:94:79:c4:9b:22:ed:75:3a:2e: ad:fd:6b:77:ba:49:58:98:60:ee:1b:f2:ea:4b:16:21:bf:9e: 74:2f:88:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZLRYMKTQspIbm7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1M1oXDTI1MDYwNDEyMTk1M1owLzEtMCsGA1UEAxMk OTBhZGNiMDQtNjhmMi00YWIyLTgyMjItYmQyMmViZDgxNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/bjWuFhrPuHP7rCL3/rJBXjuq83POMhH9fE 17/uTCdGepQpZD+wuMnO3VJFSxpm91LkEfjQQ5rsBLd+ShrWDmW0f+QFYRLP21Uu oZPLwegRV+D5xwZ4oCEyXO6ss8fBSJiu+H8+Bo1JyeUgRtreLz/s1wT0kUB4ryjI 1b88Tc/zdk/9yKxo+K+qib0KCaXGcqp15qe0lC+PbMxuW8LHhc6INtknlALDcPb7 mEq4WLeZYfoKEJEN5I5eU5R80w9db1KzllPHDl2/HXAsl76vsBrG1//01jh19abj OhXUXJ2ml6CW/MywCkrtcu1jt0CSn1uFerNHL+UBUIyS4U44cQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCtdGFZBVdXRGQez5IqFfYdWOzl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTYzYjU5NGEtNDJlZS0z NGM2LTkzZWQtMDQzMTRiM2QwNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIrqdhPadQ2agK7xJsjO53NAY7pjpSKkLj3p17sYhP6kw6VvzAka wHDAOwS+xCJuqz8nBP9jk4cKy3a+gvbasbYJVG+9j0MZ9rmArKukoXpnN6z4nXWD AGLb4Aetc/zpv3dATQqwC0xJ4sZ16FgfQQfiyzolGW/Mlh92FdL5Bo0TeL/spD74 RSwKIqlQgqjJJN4t/1QgsoKrZANp3xR1Ro0OSh7MHDjgUoP0TsGTvqFzt+S3sXO9 ZyCWTRNZnR8PWA6yO1FDPXe0NEYmEwRGjUmty9MfamaqLXqh1olXf2fXiZR5xJsi 7XU6Lq39a3e6SViYYO4b8upLFiG/nnQviIo= -----END CERTIFICATE-----Generated at Sat Mar 15 06:20:01 2025 by rpki-client