$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa File: 0e7207dc-82a9-38cc-b3f8-463397db34e2.roa (raw, json) Hash identifier: n8KlZCU7yxJqqroP2dgi9lok0beFHGnvlJ/2lWeIL2M= Subject key identifier: A3:A6:6E:51:9B:F3:41:CF:E5:BC:7E:0E:3A:8E:EC:94:EE:B7:14:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112BBABE69CAFA2D9DA2C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2607:4f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2b:ba:be:69:ca:fa:2d:9d:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=64ad70b2-211a-4ddd-8bfe-fcf6baa640ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7e:49:1e:c3:36:55:6c:6d:83:0d:65:2d:7d: 91:53:13:1c:1f:2d:96:fb:be:02:8c:64:e3:aa:87: 9c:fd:dd:0e:57:c2:72:e8:81:6b:ba:66:8b:3e:59: 57:b3:f8:d9:c0:b4:7a:cb:23:7d:df:3d:13:9b:5e: 36:36:01:05:72:b9:eb:24:d1:6a:88:e5:44:3e:65: e1:a2:76:65:af:51:63:09:3e:d3:8f:dc:9b:56:b1: 66:96:0d:2c:98:cb:38:a6:f5:52:5e:56:ed:21:74: 28:da:e0:04:14:a0:29:54:ea:9e:b9:51:b2:7e:e4: f4:83:50:9a:c4:b2:79:4e:ef:c8:e6:7b:46:77:00: e1:ee:6b:a5:b5:ea:1a:15:5b:d3:af:ef:5b:ae:a8: f2:0e:f8:5d:87:bd:fd:11:d8:87:3e:3a:63:76:54: f9:6a:13:fb:03:fd:40:95:b7:05:b6:a1:22:e9:12: a6:02:3b:5b:93:87:78:b6:cf:90:5e:60:af:df:03: 77:0b:ec:c8:76:2c:6f:00:95:b0:cf:c3:13:de:3b: 93:d5:15:a6:17:15:26:97:f9:5e:c2:fa:58:cb:f8: 83:e2:21:f7:e3:72:9a:e7:ba:a6:38:8b:e3:e8:98: 9c:d1:30:93:9d:b7:59:39:9a:89:3b:21:dd:e2:99: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A6:6E:51:9B:F3:41:CF:E5:BC:7E:0E:3A:8E:EC:94:EE:B7:14:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c2:c0:22:6e:9e:21:78:ed:68:c5:db:ad:77:a1:c6:d2:57: 78:59:ac:b5:33:0f:54:86:e1:c6:2b:ec:ad:9b:11:9a:58:4e: b2:34:b6:ee:e4:68:86:f4:68:52:23:31:02:11:a0:64:1a:23: 92:ff:49:d1:db:bb:bd:00:2f:4d:f6:e4:ae:b5:3f:21:8c:a8: 4a:a7:d1:40:04:a1:8b:c4:b7:39:c2:3b:af:54:99:35:6e:88: c3:ee:56:aa:d0:22:73:88:32:d7:94:46:59:37:66:76:4f:57: d6:74:db:42:a4:92:21:04:4c:c5:0f:06:5a:6b:ce:e1:ec:ab: ac:cd:4d:57:be:08:ed:52:4a:b5:1c:29:6a:d8:ee:7a:27:9c: da:ea:70:66:c1:11:4c:c1:f4:ef:e5:95:03:72:8b:7c:17:f8: 65:cf:1c:93:3d:ec:7b:72:e9:dd:1e:f6:56:22:de:b2:da:3d: d9:90:d8:a7:f1:99:21:3e:11:09:48:c6:45:c6:32:21:e4:14: 98:f6:aa:da:11:2f:a7:27:47:5d:63:6b:e7:18:1f:43:65:f0: 3b:78:03:f3:f2:c2:90:20:19:c7:8a:64:81:8d:96:a9:63:f8: 7e:65:e8:21:01:72:ae:5a:b5:71:03:f6:4f:0c:72:8c:b4:1a: ec:ff:81:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjSESu6vmnK+i2dosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjRhZDcwYjItMjExYS00ZGRkLThiZmUtZmNmNmJhYTY0MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg35JHsM2VWxtgw1lLX2RUxMcHy2W+74CjGTj qoec/d0OV8Jy6IFrumaLPllXs/jZwLR6yyN93z0Tm142NgEFcrnrJNFqiOVEPmXh onZlr1FjCT7Tj9ybVrFmlg0smMs4pvVSXlbtIXQo2uAEFKApVOqeuVGyfuT0g1Ca xLJ5Tu/I5ntGdwDh7multeoaFVvTr+9brqjyDvhdh739EdiHPjpjdlT5ahP7A/1A lbcFtqEi6RKmAjtbk4d4ts+QXmCv3wN3C+zIdixvAJWwz8MT3juT1RWmFxUml/le wvpYy/iD4iH343Ka57qmOIvj6Jic0TCTnbdZOZqJOyHd4pmNRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKOmblGb80HP5bx+DjqO7JTutxRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGU3MjA3ZGMtODJhOS0z OGNjLWIzZjgtNDYzMzk3ZGIzNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdPgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZwsAibp4heO1oxdutd6HG0ld4Way1Mw9UhuHGK+ytmxGaWE6yNLbu 5GiG9GhSIzECEaBkGiOS/0nR27u9AC9N9uSutT8hjKhKp9FABKGLxLc5wjuvVJk1 bojD7laq0CJziDLXlEZZN2Z2T1fWdNtCpJIhBEzFDwZaa87h7KuszU1XvgjtUkq1 HClq2O56J5za6nBmwRFMwfTv5ZUDcot8F/hlzxyTPex7cundHvZWIt6y2j3ZkNin 8ZkhPhEJSMZFxjIh5BSY9qraES+nJ0ddY2vnGB9DZfA7eAPz8sKQIBnHimSBjZap Y/h+ZeghAXKuWrVxA/ZPDHKMtBrs/4Fm -----END CERTIFICATE-----Generated at Mon Apr 28 16:08:06 2025 by rpki-client