$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ba33f2e7-1db3-3f12-801a-bf28bd12e79b.roa File: ba33f2e7-1db3-3f12-801a-bf28bd12e79b.roa (raw, json) Hash identifier: oFPq9oRNkdUqpL4xNNkEdp49o+7/HhD9FaTzl78fxXI= Subject key identifier: 40:52:15:86:FE:F5:4F:CA:24:D9:03:76:E3:81:8A:A7:5E:44:C9:22 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D15AA03B6CE379D64BAA6 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ba33f2e7-1db3-3f12-801a-bf28bd12e79b.roa Signing time: Thu 06 Mar 2025 13:19:52 +0000 ROA not before: Thu 06 Mar 2025 13:19:52 +0000 ROA not after: Wed 04 Jun 2025 12:19:52 +0000 asID: 207266 IP address blocks: 2001:500:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:15:aa:03:b6:ce:37:9d:64:ba:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:52 2025 GMT Not After : Jun 4 12:19:52 2025 GMT Subject: CN=7cb77389-ac21-4550-ab8b-4cee030f8597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:51:87:4a:b1:da:49:b4:6e:1f:3d:61:f0: 1b:2f:7a:b5:31:e9:47:e2:24:86:20:8a:68:e0:7e: a4:9d:8b:22:78:2c:ef:cc:26:a5:8b:9b:65:91:b1: 23:27:29:01:f5:f8:79:ab:71:c3:66:98:1a:12:3f: 2c:ed:ae:b3:26:af:4b:c7:44:fe:c3:bf:cd:48:2b: bf:e9:70:84:cb:55:05:1d:58:47:95:5d:8d:4f:3b: 7a:80:69:df:a1:45:a5:17:e8:bd:18:b0:3a:15:24: 46:a8:04:e2:09:e9:e7:6c:88:46:a2:4e:40:dd:88: 8d:69:ea:3d:1c:2e:0c:fa:4f:81:47:22:f5:08:92: 9e:99:df:9b:81:61:fe:28:aa:18:88:c4:cf:5f:cd: 44:c7:ef:b1:11:c4:b1:83:06:77:8f:01:93:4c:2f: 43:65:e3:0b:8d:c3:0e:a6:17:4b:00:4f:7f:c6:ee: f5:a8:ba:50:e6:61:7b:69:c4:9c:67:e3:0c:af:e7: ad:e6:24:8f:69:3a:ba:59:b0:f5:b7:70:f3:29:60: fb:cf:91:97:13:b9:26:11:83:39:92:5f:76:4d:e9: 68:2b:b7:6d:4c:22:d8:5a:6a:10:5a:c0:79:4f:2f: 61:c3:37:8a:93:8e:28:35:60:3b:b1:36:ca:d9:7b: 6b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:52:15:86:FE:F5:4F:CA:24:D9:03:76:E3:81:8A:A7:5E:44:C9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ba33f2e7-1db3-3f12-801a-bf28bd12e79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:81:7d:2c:0e:3c:88:1f:15:4d:b3:09:21:da:a5:f8:cf:47: 05:d0:6f:dc:4c:a9:de:04:08:15:f5:6c:a7:d9:86:d4:59:2f: 15:57:7b:d5:26:eb:a2:2d:c9:3a:4a:81:a6:e9:58:4f:f5:2e: ce:84:81:fc:39:24:8d:de:63:f4:65:87:ec:5d:00:ef:ba:37: b3:18:35:62:df:ae:b4:0f:21:c9:0b:7b:0a:35:70:dd:69:88: fd:3c:60:f6:0a:e6:82:42:4c:c6:6c:40:f8:20:4b:c6:3b:05: 0f:df:5b:6e:b2:cc:af:00:26:d5:84:99:47:bb:a4:a7:14:dc: a1:59:e3:c0:76:7c:d7:a8:d2:1c:6b:84:d1:98:0f:a4:e6:80: 39:21:1c:9e:1f:3f:26:09:37:bf:86:dd:b6:9d:c8:94:ab:60: 68:99:1b:c9:2b:ec:27:a3:30:a2:31:87:d4:be:b6:df:cc:8b: 7c:e9:8e:b6:a8:8f:a7:40:94:e2:f6:04:19:96:76:a4:8e:50: 30:d8:1b:4d:2e:1b:59:34:7c:94:49:88:3c:e2:dc:a6:2d:38: 43:e3:62:3b:33:9e:f7:aa:e7:c3:d6:fe:05:6b:c7:c7:1b:37: ef:f5:8a:2c:73:8d:ed:cf:f4:ea:7e:9d:17:b1:38:38:4e:3b: 0f:0a:93:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZLRWqA7bON51kuqYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1MloXDTI1MDYwNDEyMTk1MlowLzEtMCsGA1UEAxMk N2NiNzczODktYWMyMS00NTUwLWFiOGItNGNlZTAzMGY4NTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/tRh0qx2km0bh89YfAbL3q1MelH4iSGIIpo 4H6knYsieCzvzCali5tlkbEjJykB9fh5q3HDZpgaEj8s7a6zJq9Lx0T+w7/NSCu/ 6XCEy1UFHVhHlV2NTzt6gGnfoUWlF+i9GLA6FSRGqATiCennbIhGok5A3YiNaeo9 HC4M+k+BRyL1CJKemd+bgWH+KKoYiMTPX81Ex++xEcSxgwZ3jwGTTC9DZeMLjcMO phdLAE9/xu71qLpQ5mF7acScZ+MMr+et5iSPaTq6WbD1t3DzKWD7z5GXE7kmEYM5 kl92TeloK7dtTCLYWmoQWsB5Ty9hwzeKk44oNWA7sTbK2Xtr4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEBSFYb+9U/KJNkDduOBiqdeRMkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmEzM2YyZTctMWRiMy0z ZjEyLTgwMWEtYmYyOGJkMTJlNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeBfSwOPIgfFU2zCSHapfjPRwXQb9xMqd4ECBX1bKfZhtRZLxVX e9Um66ItyTpKgabpWE/1Ls6Egfw5JI3eY/Rlh+xdAO+6N7MYNWLfrrQPIckLewo1 cN1piP08YPYK5oJCTMZsQPggS8Y7BQ/fW26yzK8AJtWEmUe7pKcU3KFZ48B2fNeo 0hxrhNGYD6TmgDkhHJ4fPyYJN7+G3badyJSrYGiZG8kr7CejMKIxh9S+tt/Mi3zp jraoj6dAlOL2BBmWdqSOUDDYG00uG1k0fJRJiDzi3KYtOEPjYjsznveq58PW/gVr x8cbN+/1iixzje3P9Op+nRexODhOOw8Kk1s= -----END CERTIFICATE-----Generated at Sat Mar 15 06:16:10 2025 by rpki-client