$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa File: 2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa (raw, json) Hash identifier: ztPMZg1nVbWZcRJobJ5p8WVvnZej2p/hTzCnSKXwYmY= Subject key identifier: 28:2F:C8:7C:A7:C1:A2:C4:20:7A:0B:F6:27:FB:EE:AF:18:F3:06:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A468D6EE06782E87DA000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:8d:6e:e0:67:82:e8:7d:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7b186cad-8302-41d1-b44a-6011b98c70df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:66:da:ef:88:16:bd:04:67:c1:ca:42:28: 9f:80:91:ae:c6:2d:3b:f1:22:f0:db:3a:e5:ba:73: 08:32:4c:d9:53:19:02:53:5a:1b:c2:e7:e0:d0:bb: 3b:6d:e7:41:2e:2c:09:8d:33:45:71:ef:64:b6:ae: b1:86:ec:5b:fb:38:1d:f8:62:8b:54:68:56:d9:01: ff:35:8d:51:2a:ca:6f:03:1c:e1:0f:07:9c:2d:70: 49:74:81:37:de:fc:a0:86:18:2f:08:5a:e8:4c:c2: 6a:f2:6d:80:7d:22:cd:b6:74:9a:1c:43:b7:90:e9: 5d:a6:e7:69:5b:fb:5a:25:1c:a3:56:0a:7b:97:fe: a7:cf:0f:7f:5f:20:58:94:34:db:1a:de:fd:04:62: e6:f4:0b:95:8e:d0:5f:22:42:e5:79:00:cd:4e:9d: 07:52:a6:d0:0e:22:71:43:21:7d:33:0e:bf:b0:73: ca:35:65:21:e3:3a:b8:55:89:f3:39:f6:9d:30:a6: 67:e5:12:95:aa:0d:05:5c:2f:5e:a4:f9:a6:e2:49: 27:1b:d2:88:ef:2c:00:64:38:4e:b9:50:bf:3e:07: 4d:2a:01:eb:03:85:ba:9f:1c:cf:c3:97:99:39:97: 8f:6f:e8:dd:08:21:6b:fc:60:72:b1:27:17:63:ac: 6a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2F:C8:7C:A7:C1:A2:C4:20:7A:0B:F6:27:FB:EE:AF:18:F3:06:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:98:97:41:44:de:47:bd:66:5f:bd:20:d1:21:51:ac:3d:f3: b7:d4:29:2f:25:f4:3a:d9:84:25:a3:1d:47:d3:e2:32:ae:d4: c1:11:c2:b5:76:20:49:f6:39:b0:21:0d:66:5f:49:2d:7f:87: db:b0:39:0e:a7:3d:0f:c6:dd:e9:83:ad:8f:4f:d1:63:d3:86: 89:ec:7d:a8:89:ff:b4:67:79:9a:b2:7f:03:85:3e:65:f8:a8: 49:38:65:77:fd:8c:e0:1e:d6:44:86:8b:30:bd:2f:f4:e4:15: 09:6f:71:6a:9c:e0:45:59:5e:f1:02:7f:b4:ad:e5:70:8e:5a: 65:84:e0:23:51:3b:dd:be:4a:e7:83:36:09:61:73:ec:03:25: 1c:4c:f2:ce:16:10:8d:a7:58:5d:92:9c:da:88:22:d2:e9:9f: 8f:b5:da:77:d6:93:ae:6b:17:fa:27:9e:6e:f1:ed:3a:5e:91: 80:e4:66:17:5c:bd:5b:b9:36:d3:1b:4b:37:fa:19:aa:72:23: 70:1b:18:fc:04:ca:2d:71:9b:ac:46:0f:13:7f:1f:ac:a7:9e: 56:21:c5:52:3f:ed:0d:ad:e4:df:7a:88:7d:77:b4:80:ff:08: d5:a8:0a:0a:f7:c5:22:da:bf:62:7c:8f:48:72:a0:88:11:5f: 26:5d:05:ef -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkaNbuBnguh9oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2IxODZjYWQtODMwMi00MWQxLWI0NGEtNjAxMWI5OGM3MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPtm2u+IFr0EZ8HKQiifgJGuxi078SLw2zrl unMIMkzZUxkCU1obwufg0Ls7bedBLiwJjTNFce9ktq6xhuxb+zgd+GKLVGhW2QH/ NY1RKspvAxzhDwecLXBJdIE33vyghhgvCFroTMJq8m2AfSLNtnSaHEO3kOldpudp W/taJRyjVgp7l/6nzw9/XyBYlDTbGt79BGLm9AuVjtBfIkLleQDNTp0HUqbQDiJx QyF9Mw6/sHPKNWUh4zq4VYnzOfadMKZn5RKVqg0FXC9epPmm4kknG9KI7ywAZDhO uVC/PgdNKgHrA4W6nxzPw5eZOZePb+jdCCFr/GBysScXY6xqhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCgvyHynwaLEIHoL9if77q8Y8wYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmU5MGUwOWYtZjQ4Ny0z Y2UzLWI5YmQtNTI2M2M5MzhlMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgZiXQUTeR71mX70g0SFRrD3zt9QpLyX0OtmEJaMdR9PiMq7UwRHC tXYgSfY5sCENZl9JLX+H27A5Dqc9D8bd6YOtj0/RY9OGiex9qIn/tGd5mrJ/A4U+ ZfioSThld/2M4B7WRIaLML0v9OQVCW9xapzgRVle8QJ/tK3lcI5aZYTgI1E73b5K 54M2CWFz7AMlHEzyzhYQjadYXZKc2ogi0umfj7Xad9aTrmsX+ieebvHtOl6RgORm F1y9W7k20xtLN/oZqnIjcBsY/ATKLXGbrEYPE38frKeeViHFUj/tDa3k33qIfXe0 gP8I1agKCvfFItq/YnyPSHKgiBFfJl0F7w== -----END CERTIFICATE-----Generated at Sun Jun 15 13:10:39 2025 by rpki-client