$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa File: 35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa (raw, json) Hash identifier: gTFcL1XrudPLR5Au7PkKsFGUgZ15V2Xr2ARloKpn8Is= Subject key identifier: A2:F0:93:B1:30:1A:58:66:42:DB:F5:8A:DE:EF:82:D9:92:99:F4:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A41656D274C62BA1FF640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2001:4988::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:41:65:6d:27:4c:62:ba:1f:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=79930f90-92eb-42ab-bf06-dbdc7454cfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:40:5a:30:c0:1d:b8:54:d5:a1:de:22:c2: 0d:57:09:54:90:f1:21:69:b3:ae:18:f6:a2:9d:15: 3c:ca:03:2d:f3:38:1c:21:49:08:bd:27:33:42:b0: 26:99:7d:4f:55:ce:67:94:2f:88:a3:37:92:b0:f9: 5e:38:a9:dd:fc:6c:47:1e:73:99:31:1a:51:1e:79: ab:95:26:a6:cf:e0:df:c1:72:9d:90:76:c2:d3:e9: 97:7d:59:ac:8b:ac:1f:d7:12:66:dd:c3:48:24:65: d8:7b:3c:73:5b:84:5b:e5:a5:18:c1:31:a7:1b:6c: a8:1e:64:37:e2:c3:f4:f2:0f:76:a0:bb:68:9d:ea: 1d:1c:c6:ef:3b:39:6d:20:63:74:4b:65:cd:a9:8b: 50:a8:b6:0d:98:23:48:a2:8f:a2:50:0e:d9:85:63: 27:e4:fb:0a:1e:6d:00:08:cc:bc:fc:52:4a:d6:6f: 95:7b:4e:ad:44:fe:5a:77:20:27:58:70:36:80:9e: b8:bf:1a:3c:a0:e9:20:95:1a:d6:1b:2e:4d:38:9b: a7:35:c8:30:cd:56:a1:e7:6b:2f:51:c1:c5:42:7d: c0:e1:63:09:ee:e6:fe:64:2b:cf:68:eb:d9:c6:4b: d1:16:6c:9e:2a:fb:38:4b:3f:a8:cc:06:29:ad:db: 2d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F0:93:B1:30:1A:58:66:42:DB:F5:8A:DE:EF:82:D9:92:99:F4:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4988::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:93:3b:bf:00:5d:a1:36:67:ad:cf:83:55:5d:33:37:4c:f7: a8:dc:fd:ff:88:87:f7:35:b6:35:15:cb:d3:ad:f8:98:25:b8: 08:0f:aa:a3:e1:8f:78:85:60:f2:9c:5f:6f:fb:a3:0d:7f:c1: 32:06:f0:7d:36:b2:a7:7b:97:1d:44:5e:d8:f4:91:81:6b:3b: b3:81:80:e4:f7:50:b3:2f:f5:02:03:6b:d9:5f:cc:c2:d3:2d: 87:84:b7:39:7e:0e:db:0d:41:00:0d:04:d5:97:91:81:2a:7a: a5:13:bd:0a:8b:a7:5e:e9:96:67:b7:95:f2:04:33:8b:d3:f4: 37:78:72:1f:b6:7b:d7:cc:d8:66:2e:e0:12:e2:69:75:7c:30: 47:ee:ba:b0:28:9c:86:fc:89:3d:60:57:af:40:aa:df:a8:3c: 72:d1:e5:6f:f3:4f:ef:16:ff:4b:42:6e:6c:a2:e5:87:e1:7a: 97:36:6e:8a:cf:54:8e:86:e4:bf:2f:1f:d7:73:2e:26:b9:f1: 35:40:3e:fd:38:44:f5:d1:bf:60:4b:37:19:f0:ea:4b:5c:2c: 6c:e9:ce:96:92:78:d4:9b:71:f4:6b:ef:6b:fe:55:af:24:cd: 76:4f:85:2b:d7:af:9c:04:ea:1b:f6:5d:cc:6d:40:34:86:42: fc:52:d9:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSkFlbSdMYrof9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Nzk5MzBmOTAtOTJlYi00MmFiLWJmMDYtZGJkYzc0NTRjZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB1AWjDAHbhU1aHeIsINVwlUkPEhabOuGPai nRU8ygMt8zgcIUkIvSczQrAmmX1PVc5nlC+IozeSsPleOKnd/GxHHnOZMRpRHnmr lSamz+DfwXKdkHbC0+mXfVmsi6wf1xJm3cNIJGXYezxzW4Rb5aUYwTGnG2yoHmQ3 4sP08g92oLtoneodHMbvOzltIGN0S2XNqYtQqLYNmCNIoo+iUA7ZhWMn5PsKHm0A CMy8/FJK1m+Ve06tRP5adyAnWHA2gJ64vxo8oOkglRrWGy5NOJunNcgwzVah52sv UcHFQn3A4WMJ7ub+ZCvPaOvZxkvRFmyeKvs4Sz+ozAYprdstjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKLwk7EwGlhmQtv1it7vgtmSmfTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzVlNWM1M2UtYzUzNi0z ZjcwLThmNGQtMTlhZThhMjg4NmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/kzu/AF2hNmetz4NVXTM3TPeo3P3/iIf3NbY1FcvTrfiYJbgID6qj 4Y94hWDynF9v+6MNf8EyBvB9NrKne5cdRF7Y9JGBazuzgYDk91CzL/UCA2vZX8zC 0y2HhLc5fg7bDUEADQTVl5GBKnqlE70Ki6de6ZZnt5XyBDOL0/Q3eHIftnvXzNhm LuAS4ml1fDBH7rqwKJyG/Ik9YFevQKrfqDxy0eVv80/vFv9LQm5souWH4XqXNm6K z1SOhuS/Lx/Xcy4mufE1QD79OET10b9gSzcZ8OpLXCxs6c6WknjUm3H0a+9r/lWv JM12T4Ur16+cBOob9l3MbUA0hkL8UtmO -----END CERTIFICATE-----Generated at Sun Jun 15 11:46:10 2025 by rpki-client