$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa File: 3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa (raw, json) Hash identifier: 4gY5TSXGmNebMXeJnphKmGWAPVlayopKmInbFl0YoO0= Subject key identifier: 9D:97:3B:3F:B7:36:5B:70:41:E8:A4:03:1C:FC:0B:03:77:3A:0A:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849F7153502B49230A3A14B14F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:35:02:b4:92:30:a3:a1:4b:14:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=37864600-8d06-4e58-8dfc-6f922fd40a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:a4:e7:ed:74:4c:09:96:a1:39:70:7e:71: f0:6b:a0:a1:df:d3:2c:39:5e:53:9e:da:62:0c:2f: 41:73:71:57:61:1b:e6:56:bf:4e:86:7e:56:83:43: 63:1f:85:4d:63:20:f0:44:e4:92:2e:de:e7:c3:80: ff:9d:21:d8:7d:a4:2a:09:49:b1:59:dc:dd:ce:c4: 9c:7b:76:3f:21:f1:16:67:59:77:45:e5:de:c5:44: 66:a1:93:b4:88:f8:fd:a9:4b:ce:d1:23:ab:4e:4e: 9a:50:f2:7e:43:ec:7f:1b:71:f0:ab:d6:22:31:92: d8:61:8e:da:36:0f:1a:84:d3:ed:78:59:1c:e0:a8: f9:02:dc:cb:22:0e:36:e9:1a:53:83:31:a1:da:fb: 17:04:72:9b:ae:a2:65:ab:fc:16:ca:fa:d5:85:70: 4c:85:79:ad:dc:19:2d:48:08:01:f4:16:12:b1:15: 43:2e:3a:ec:ce:68:35:81:85:0e:c0:0d:12:c9:d5: 3e:bb:fc:c6:32:26:df:0f:70:78:09:ba:8f:1b:ec: 0f:e2:e9:16:81:ed:6b:9a:b7:24:04:58:9b:b3:4d: e2:61:b8:96:35:20:df:e8:66:a8:95:21:62:ac:8f: bc:55:a9:58:e9:63:9b:fe:f6:c1:6c:e4:23:5a:e6: 87:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:97:3B:3F:B7:36:5B:70:41:E8:A4:03:1C:FC:0B:03:77:3A:0A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9a:be:a1:1a:79:44:2f:e6:32:06:15:6d:d0:9d:e4:6b:0d: 34:4d:6a:79:23:b4:f3:33:de:31:08:50:26:07:90:6a:0a:f0: b3:6d:e1:0e:cd:49:8c:60:8d:62:38:72:85:aa:35:0f:e2:a4: 38:da:ed:4c:b9:52:aa:c0:20:c8:28:b3:d0:46:ca:b5:08:fe: f2:c2:27:2c:81:3e:dd:24:5d:20:0c:8a:97:46:37:88:1a:e4: 5e:94:0e:6e:0e:9f:87:f6:ab:e9:f8:dc:cd:4d:66:b1:1e:4a: f5:7d:11:e9:af:71:07:ad:bd:d4:82:db:b1:8d:91:f9:f8:45: a7:99:8f:8b:ca:39:a4:b5:03:ab:c5:7e:77:59:55:7e:fd:61: c4:19:e9:f6:3d:fa:e7:7d:a9:8e:cc:bf:34:c6:86:e9:47:f6: 08:f0:09:31:8e:fe:73:7b:38:17:72:02:c6:69:7f:cb:ee:a1: 69:bf:dd:f7:e7:d3:bc:87:e3:1e:29:b2:eb:3a:36:4d:2c:76: 2a:af:c6:04:37:dd:69:bb:81:b6:f7:fd:0a:4b:d4:cf:e6:5c: 57:ae:de:e7:72:6d:12:b9:0c:b3:85:65:9e:dc:3d:e0:c5:d0: 0a:95:84:85:75:9b:22:96:23:86:6d:ec:37:99:a8:e6:16:76: 37:9c:f7:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn3FTUCtJIwo6FLFPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk Mzc4NjQ2MDAtOGQwNi00ZTU4LThkZmMtNmY5MjJmZDQwYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGCk5+10TAmWoTlwfnHwa6Ch39MsOV5Tntpi DC9Bc3FXYRvmVr9Ohn5Wg0NjH4VNYyDwROSSLt7nw4D/nSHYfaQqCUmxWdzdzsSc e3Y/IfEWZ1l3ReXexURmoZO0iPj9qUvO0SOrTk6aUPJ+Q+x/G3Hwq9YiMZLYYY7a Ng8ahNPteFkc4Kj5AtzLIg426RpTgzGh2vsXBHKbrqJlq/wWyvrVhXBMhXmt3Bkt SAgB9BYSsRVDLjrszmg1gYUOwA0SydU+u/zGMibfD3B4CbqPG+wP4ukWge1rmrck BFibs03iYbiWNSDf6GaolSFirI+8ValY6WOb/vbBbOQjWuaHAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ2XOz+3NltwQeikAxz8CwN3OgqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2I3NWQ5YzEtNTUzZi0z MTliLWJhNGEtZjE1MzY4YmFjYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHiavqEaeUQv5jIGFW3QneRrDTRNankjtPMz3jEIUCYHkGoK8LNt 4Q7NSYxgjWI4coWqNQ/ipDja7Uy5UqrAIMgos9BGyrUI/vLCJyyBPt0kXSAMipdG N4ga5F6UDm4On4f2q+n43M1NZrEeSvV9EemvcQetvdSC27GNkfn4RaeZj4vKOaS1 A6vFfndZVX79YcQZ6fY9+ud9qY7MvzTGhulH9gjwCTGO/nN7OBdyAsZpf8vuoWm/ 3ffn07yH4x4psus6Nk0sdiqvxgQ33Wm7gbb3/QpL1M/mXFeu3udybRK5DLOFZZ7c PeDF0AqVhIV1myKWI4Zt7DeZqOYWdjec9wc= -----END CERTIFICATE-----Generated at Sun Jun 15 13:04:13 2025 by rpki-client