$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa File: 47a38678-065d-3329-a105-fa94cfdcfee1.roa (raw, json) Hash identifier: PBALi6HXJuG2zP+OsDWKi86ZCr3mj19iEsVEWXAuxEU= Subject key identifier: B8:C8:AF:BF:DA:89:B9:8B:3D:6A:19:AC:C5:BF:FA:86:95:9B:2A:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21128DA03D1940252708C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2600:5000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:28:da:03:d1:94:02:52:70:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=cdd96257-f63c-429c-8db3-ca86a52dd60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:a7:18:a6:ec:1f:e8:7f:33:c4:82:1f:64: 44:96:0d:9c:c3:d9:3d:cd:99:97:58:64:82:b8:91: dc:a8:de:01:29:14:db:c5:7c:cc:59:33:cc:95:79: 22:2c:b4:67:4f:9f:21:b0:ea:62:b7:1f:c4:68:28: d8:9a:36:c2:ef:26:68:33:7c:a1:95:04:c3:4f:0b: bb:60:68:dd:a1:00:39:31:33:e5:81:23:a4:54:85: ed:b1:fd:73:be:40:28:c1:5f:e7:0e:42:f6:7e:5a: 2f:1e:1b:74:69:ec:48:41:a1:00:77:5f:a0:e8:30: 12:b6:cb:2c:07:a5:56:04:cd:d0:4a:de:e4:a5:78: 55:4e:f3:03:04:11:f6:89:56:42:7c:1c:e2:e0:e6: 7c:db:02:9d:3c:6d:19:91:6d:5b:08:c5:fa:ca:d8: e6:05:d0:e2:be:89:6b:d4:1d:ab:7a:92:a0:39:ea: a9:e4:9c:80:b3:5e:6e:81:8e:9e:07:c9:cd:ee:6d: d1:65:14:48:c5:91:ea:94:13:5e:1f:48:95:1d:85: 84:ee:16:03:9c:56:43:3d:00:5d:19:0e:6d:f2:97: f5:8d:06:c4:cd:a6:98:10:fa:d7:1f:1b:e5:25:63: d4:27:76:04:69:dc:01:91:ee:50:a3:94:df:db:ce: 50:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C8:AF:BF:DA:89:B9:8B:3D:6A:19:AC:C5:BF:FA:86:95:9B:2A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2600:5000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4e:f6:93:bb:de:27:ec:b4:36:6f:08:bc:b9:b8:82:3e:62: bd:d1:b1:20:2d:a9:e7:26:19:51:21:a9:fe:4b:1b:c8:7f:b4: 12:6d:34:13:64:f6:e6:23:bc:b8:da:81:13:05:90:1d:11:12: 1b:e7:24:c6:bd:70:07:12:f9:b0:a6:01:46:a8:dd:1f:d5:1a: 72:69:30:24:82:98:7e:0e:e6:31:d8:d6:c1:ad:b0:c1:f6:76: d6:bd:ad:3d:6e:b8:89:3d:a4:d3:c7:a3:37:9c:38:7a:3a:2a: 10:7b:d7:95:af:78:7d:23:53:89:ac:80:13:d5:10:65:ea:4b: a3:56:02:ce:00:3b:9d:da:86:be:12:16:43:14:70:06:d7:1f: c9:ea:01:e6:c4:75:dd:23:2f:94:ec:cd:14:cd:c3:a2:53:8c: 4a:2b:8e:e2:83:9e:e6:65:63:85:64:b8:e1:6e:93:e2:a3:13: 83:b3:74:ac:f4:44:bf:1b:b3:90:d6:95:8e:2c:37:2d:1d:47: 0a:48:d7:1a:0a:c4:6f:4d:0e:d5:32:af:9f:9d:a7:49:d2:73: fb:92:b7:46:93:62:15:13:b3:e0:86:21:5e:27:1a:dd:7e:49: 6b:40:ba:9f:00:9f:00:a2:0f:9f:c1:f0:7f:71:3a:59:ff:26: 9b:5c:02:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjSESjaA9GUAlJwjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2RkOTYyNTctZjYzYy00MjljLThkYjMtY2E4NmE1MmRkNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpunGKbsH+h/M8SCH2RElg2cw9k9zZmXWGSC uJHcqN4BKRTbxXzMWTPMlXkiLLRnT58hsOpitx/EaCjYmjbC7yZoM3yhlQTDTwu7 YGjdoQA5MTPlgSOkVIXtsf1zvkAowV/nDkL2flovHht0aexIQaEAd1+g6DAStsss B6VWBM3QSt7kpXhVTvMDBBH2iVZCfBzi4OZ82wKdPG0ZkW1bCMX6ytjmBdDivolr 1B2repKgOeqp5JyAs15ugY6eB8nN7m3RZRRIxZHqlBNeH0iVHYWE7hYDnFZDPQBd GQ5t8pf1jQbEzaaYEPrXHxvlJWPUJ3YEadwBke5Qo5Tf285QFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLjIr7/aibmLPWoZrMW/+oaVmyr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDdhMzg2NzgtMDY1ZC0z MzI5LWExMDUtZmE5NGNmZGNmZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgBQADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDTvaTu94n7LQ2bwi8ubiCPmK90bEgLannJhlRIan+SxvIf7QSbTQT ZPbmI7y42oETBZAdERIb5yTGvXAHEvmwpgFGqN0f1RpyaTAkgph+DuYx2NbBrbDB 9nbWva09briJPaTTx6M3nDh6OioQe9eVr3h9I1OJrIAT1RBl6kujVgLOADud2oa+ EhZDFHAG1x/J6gHmxHXdIy+U7M0UzcOiU4xKK47ig57mZWOFZLjhbpPioxODs3Ss 9ES/G7OQ1pWOLDctHUcKSNcaCsRvTQ7VMq+fnadJ0nP7krdGk2IVE7PghiFeJxrd fklrQLqfAJ8Aog+fwfB/cTpZ/yabXAJM -----END CERTIFICATE-----Generated at Sun Apr 27 03:58:10 2025 by rpki-client