$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa File: 3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa (raw, json) Hash identifier: 8r53P4vChChkyT/9YVmadOEmyOWXY48mJHRT8o3VzVg= Subject key identifier: AE:AC:95:DF:4F:D2:7A:73:D8:C6:21:D3:8E:3E:FB:EC:B6:31:03:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584917DC0AAC95A2E55D3F081FE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:0a:ac:95:a2:e5:5d:3f:08:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=81ded995-caa8-4236-a44f-16f12a9b253d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:df:55:45:8a:f6:20:1e:18:c0:49:53:ae:e0: d8:26:aa:6b:bb:0a:21:07:60:58:1f:2c:a2:e5:73: 00:e1:f0:12:8d:7a:23:6e:e2:e8:85:32:50:b0:92: 85:51:e5:13:db:4b:d2:68:20:58:b8:32:fc:a1:d9: ad:66:5e:53:62:0d:79:90:e7:da:3c:28:f1:78:2c: e4:8a:cd:ee:1e:06:d2:8a:9e:7e:d2:c5:bd:56:88: fe:b8:93:69:49:bd:f0:3f:f2:13:8f:05:5e:88:ea: 36:9c:4f:51:0e:2c:22:c6:e3:b6:6b:ed:43:66:3a: 8d:69:41:54:df:4a:eb:fd:2d:9c:8e:fa:58:25:e9: 99:74:b7:5a:6d:71:90:9f:4e:0d:7d:51:97:e2:ad: 24:7a:8e:6b:e2:ad:94:60:f7:f5:40:48:64:ba:4e: 9b:ef:59:77:91:68:06:e3:d4:42:9f:f2:64:41:3a: eb:48:43:22:af:0c:29:83:d6:92:a7:9d:15:7c:1d: 5e:8d:a2:ce:96:8f:f5:a5:d9:95:a9:02:30:fa:3c: b8:74:1c:bc:2d:39:07:0e:a2:3e:a8:96:9c:f7:57: d1:01:58:c5:b0:bc:14:53:e2:e0:c9:6a:79:c5:6a: 5e:67:ee:d9:ff:4d:04:5a:5a:b3:1b:ec:97:4d:40: 55:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AC:95:DF:4F:D2:7A:73:D8:C6:21:D3:8E:3E:FB:EC:B6:31:03:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b75d9c1-553f-319b-ba4a-f15368bacb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:10:b6:30:2f:a4:0d:4c:f7:15:56:bd:a3:a3:73:06:77:03: 75:89:39:40:06:4b:c1:ba:57:c5:86:1e:a1:d9:c8:b7:1f:93: 71:1d:a1:fa:48:d2:ba:13:59:6c:c4:ba:4f:44:72:5b:4a:7e: 92:c9:9b:41:24:f3:da:f5:9a:98:95:64:90:95:bb:7d:e6:5e: ba:d8:d4:b3:65:d8:c4:0c:c2:70:1b:cc:7f:69:6a:87:ca:71: 60:e7:80:69:15:ec:7f:e3:ac:19:f0:5b:b1:b7:8c:84:34:05: a3:06:bf:49:e0:85:60:1b:20:e8:b3:db:a3:13:07:88:b7:09: e0:f8:73:61:e4:98:d0:0a:34:70:c8:ff:6d:d1:6e:53:7a:38: c1:6c:bc:15:9c:92:63:49:ab:04:a2:79:ce:23:95:09:20:35: 3c:f4:fb:f2:cd:e3:87:7f:90:28:b2:2b:c2:a1:b5:67:b4:08: 84:b2:3a:90:44:07:c1:4e:4b:29:29:82:d2:a9:31:b4:3a:0c: 1a:eb:f2:18:c6:6e:29:c3:9f:08:ea:ef:ee:48:e3:97:67:fc: 37:1e:3c:57:2d:3b:cf:41:e6:88:a6:68:ff:27:16:22:d7:22: e8:77:fe:8f:01:6c:0e:50:61:25:1d:f6:31:6f:1f:76:52:1b: d8:d3:59:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3AqslaLlXT8IH+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ODFkZWQ5OTUtY2FhOC00MjM2LWE0NGYtMTZmMTJhOWIyNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod9VRYr2IB4YwElTruDYJqpruwohB2BYHyyi 5XMA4fASjXojbuLohTJQsJKFUeUT20vSaCBYuDL8odmtZl5TYg15kOfaPCjxeCzk is3uHgbSip5+0sW9Voj+uJNpSb3wP/ITjwVeiOo2nE9RDiwixuO2a+1DZjqNaUFU 30rr/S2cjvpYJemZdLdabXGQn04NfVGX4q0keo5r4q2UYPf1QEhkuk6b71l3kWgG 49RCn/JkQTrrSEMirwwpg9aSp50VfB1ejaLOlo/1pdmVqQIw+jy4dBy8LTkHDqI+ qJac91fRAVjFsLwUU+LgyWp5xWpeZ+7Z/00EWlqzG+yXTUBVTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK6sld9P0npz2MYh044+++y2MQM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2I3NWQ5YzEtNTUzZi0z MTliLWJhNGEtZjE1MzY4YmFjYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUQtjAvpA1M9xVWvaOjcwZ3A3WJOUAGS8G6V8WGHqHZyLcfk3Ed ofpI0roTWWzEuk9EcltKfpLJm0Ek89r1mpiVZJCVu33mXrrY1LNl2MQMwnAbzH9p aofKcWDngGkV7H/jrBnwW7G3jIQ0BaMGv0nghWAbIOiz26MTB4i3CeD4c2HkmNAK NHDI/23RblN6OMFsvBWckmNJqwSiec4jlQkgNTz0+/LN44d/kCiyK8KhtWe0CISy OpBEB8FOSykpgtKpMbQ6DBrr8hjGbinDnwjq7+5I45dn/DcePFctO89B5oimaP8n FiLXIuh3/o8BbA5QYSUd9jFvH3ZSG9jTWec= -----END CERTIFICATE-----Generated at Sun Apr 27 05:44:36 2025 by rpki-client