$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa File: 6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa (raw, json) Hash identifier: lSR2S1HqtoaFSgzUaFpSO8RkWEOVTFUzWCHm/YTaBqs= Subject key identifier: E1:CF:9A:E8:46:29:82:BD:43:9D:63:24:DA:9B:5F:53:FD:34:96:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FD1AC0895A87415ADC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fd:1a:c0:89:5a:87:41:5a:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=da752ff3-761e-4381-b84b-683816e4b518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:06:cf:da:16:63:b8:a3:16:19:c0:c2:06: e5:f4:88:0a:19:2e:fc:a8:21:87:c4:af:a4:1a:13: f4:05:cb:e4:16:1a:6c:69:f8:26:b6:71:80:7d:f3: 2b:bb:c8:13:ad:ba:02:09:71:ff:19:70:1a:55:25: 87:82:4a:15:ea:76:6a:7e:8c:87:c5:1a:ad:25:ae: 92:4d:cf:af:ce:cd:a8:f1:3e:00:d4:c8:64:68:ac: a2:87:dd:ae:f3:64:c4:f7:93:39:f5:31:9c:94:ca: ef:c4:8d:c2:5f:aa:3f:29:9a:92:c5:b7:47:e4:22: f6:8c:e1:85:b5:a1:7d:12:09:cf:35:7e:ec:0f:c0: e4:fe:b7:90:f3:0f:df:f9:7e:1e:3e:58:97:b2:54: 7f:7c:1a:2d:3a:85:7d:30:74:09:e2:7c:61:6a:a4: d2:d9:9a:4a:f3:c2:be:b9:1c:75:f0:04:e2:79:70: 4f:07:65:1f:dd:bc:ab:1a:0d:b1:89:62:7b:0d:8a: e7:89:bb:16:ce:cf:f5:cd:5a:b9:c7:9b:ec:df:d1: e4:05:0f:57:0e:eb:ad:d1:08:44:8e:df:1f:fc:e5: aa:58:82:74:63:4d:55:1e:bc:2c:a3:a2:da:db:3c: af:b7:7b:51:4f:5b:09:f6:a0:2c:cd:33:6f:69:4c: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CF:9A:E8:46:29:82:BD:43:9D:63:24:DA:9B:5F:53:FD:34:96:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:41:00:38:61:c9:61:be:d3:5b:6e:81:b7:c1:05:ec:ea:83: 89:29:98:62:c3:55:1a:24:03:61:83:f3:40:b9:d2:87:29:7e: 5f:e2:f7:3e:19:19:ad:04:26:db:bd:de:f9:36:60:d7:68:d0: 79:bc:ef:f4:14:94:42:a9:4c:12:9b:c3:d0:44:65:c5:07:da: de:6c:bf:75:b8:98:fa:a4:88:07:42:ec:c4:fa:2d:14:34:58: 20:91:38:08:73:7c:e9:f7:c0:08:34:7e:0b:06:63:3c:7b:10: 72:b0:4d:af:14:3a:30:92:cf:71:2d:8b:9e:ce:4f:44:78:73: ac:bb:87:63:af:cb:26:b5:b7:ce:85:a3:68:b4:ba:fb:fa:4b: 76:97:5d:78:07:11:aa:18:5f:c5:9a:57:42:45:8d:d2:01:cf: 24:cb:34:8d:30:21:26:b1:59:6e:f4:de:81:1f:26:10:c4:48: 11:54:90:fb:c0:8b:30:90:5e:4b:11:7d:68:28:fe:05:ed:37: f1:2b:25:94:e0:06:17:c3:85:eb:36:65:42:32:83:0e:0d:d9: 87:b2:37:1d:c2:60:45:a7:eb:eb:ba:85:29:f7:87:43:22:a0: 1e:7b:f0:64:d9:73:97:e5:a7:95:5f:20:93:e3:0d:f3:18:a0: 60:47:31:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEP0awIlah0Fa3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZGE3NTJmZjMtNzYxZS00MzgxLWI4NGItNjgzODE2ZTRiNTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCkGz9oWY7ijFhnAwgbl9IgKGS78qCGHxK+k GhP0BcvkFhpsafgmtnGAffMru8gTrboCCXH/GXAaVSWHgkoV6nZqfoyHxRqtJa6S Tc+vzs2o8T4A1MhkaKyih92u82TE95M59TGclMrvxI3CX6o/KZqSxbdH5CL2jOGF taF9EgnPNX7sD8Dk/reQ8w/f+X4ePliXslR/fBotOoV9MHQJ4nxhaqTS2ZpK88K+ uRx18ATieXBPB2Uf3byrGg2xiWJ7DYrnibsWzs/1zVq5x5vs39HkBQ9XDuut0QhE jt8f/OWqWIJ0Y01VHrwso6La2zyvt3tRT1sJ9qAszTNvaUzieQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOHPmuhGKYK9Q51jJNqbX1P9NJZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmM2ZGMxZmMtNzg4Mi0z NDkwLWFmYTEtNmUxM2JjYzlkNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI9BADhhyWG+01tugbfBBezqg4kpmGLDVRokA2GD80C50ocpfl/i 9z4ZGa0EJtu93vk2YNdo0Hm87/QUlEKpTBKbw9BEZcUH2t5sv3W4mPqkiAdC7MT6 LRQ0WCCROAhzfOn3wAg0fgsGYzx7EHKwTa8UOjCSz3Eti57OT0R4c6y7h2Ovyya1 t86Fo2i0uvv6S3aXXXgHEaoYX8WaV0JFjdIBzyTLNI0wISaxWW703oEfJhDESBFU kPvAizCQXksRfWgo/gXtN/ErJZTgBhfDhes2ZUIygw4N2YeyNx3CYEWn6+u6hSn3 h0MioB578GTZc5flp5VfIJPjDfMYoGBHMRo= -----END CERTIFICATE-----Generated at Sun Apr 27 05:38:10 2025 by rpki-client