$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/777fde58-8e7a-3dd5-8e57-7271872dde46.roa File: 777fde58-8e7a-3dd5-8e57-7271872dde46.roa (raw, json) Hash identifier: iMfdMTk8xLOy1XqSGlN2MVUwMcEiaSs0+CGNdJHIBfE= Subject key identifier: B0:2E:60:6A:34:42:59:42:4C:E2:90:FF:3C:3D:8C:A8:5E:1E:D3:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211296C67319DE65D980300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/777fde58-8e7a-3dd5-8e57-7271872dde46.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:29:6c:67:31:9d:e6:5d:98:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=044d280c-8a0d-482e-910e-1ea60fd543e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ef:38:3f:49:f8:30:e5:1d:fb:1c:56:ab:db: ad:07:80:aa:f6:10:39:4b:46:f1:fa:4b:b2:cd:46: be:1f:a0:60:71:0b:8c:3a:90:e2:7d:4a:b8:1b:2a: 08:ac:73:ae:c1:44:9b:f2:5e:8b:7d:5b:6c:3a:d4: 02:c8:f2:44:ca:50:27:42:76:49:ee:98:71:c4:45: e8:f0:1e:05:8a:c1:d2:e1:3f:19:14:36:e0:98:0d: e4:c2:84:74:ce:c5:cc:ea:99:d3:0d:0c:d4:53:3a: ed:ad:1a:e4:7e:26:f2:1d:bb:0c:c4:2c:24:fb:0a: 5a:68:53:8c:2f:3e:8e:9b:0f:8e:64:88:d9:98:3a: bb:13:b6:fc:a5:a2:67:57:a4:f6:00:91:c2:44:d4: 55:11:4c:59:4d:38:37:88:f7:13:88:f0:bf:3e:3a: 1d:42:27:0e:f0:f3:6a:30:21:dd:0f:e0:15:1c:ea: cf:94:2f:be:b5:ec:6c:c6:67:e4:b5:22:fa:00:63: b9:df:53:0b:81:78:a6:51:54:ba:1c:5c:d8:90:91: 99:bf:d0:90:28:1e:01:31:ed:d5:63:a9:60:9c:88: 74:0e:a0:16:21:33:0b:f3:a0:b2:31:8b:cf:6c:26: 27:c4:b1:b4:3e:ce:3c:d7:a0:44:d0:cf:eb:aa:dc: ad:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2E:60:6A:34:42:59:42:4C:E2:90:FF:3C:3D:8C:A8:5E:1E:D3:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/777fde58-8e7a-3dd5-8e57-7271872dde46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:19::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:88:9a:de:0c:8f:b1:5a:ac:fd:a1:50:a1:62:f1:d4:d8:9f: bb:7a:f4:c2:7d:45:8e:8b:fe:6a:31:e4:5a:dd:ff:e0:a7:64: 33:f7:78:29:c6:91:e9:49:ed:2d:e6:5c:b3:83:06:e0:a3:d1: 1e:37:56:e0:57:89:84:2a:e8:f9:b3:dd:d4:e2:e8:b0:00:fc: 0d:81:45:e7:6d:bd:58:ab:25:87:f5:58:cc:0b:83:d7:58:9b: 39:dc:52:2c:fa:00:d8:bd:da:59:78:94:ab:b7:e2:6e:36:7e: c3:7d:30:85:89:42:a1:02:ea:6d:45:34:04:37:30:3f:e8:06: 9f:ba:ef:c7:fe:02:0f:bc:f9:ef:ac:fd:ec:71:da:96:9d:9e: 2a:9c:54:33:e3:13:b9:84:35:22:cb:06:b0:81:8f:ea:ad:85: d5:3c:88:c7:d2:db:8e:1f:e0:b9:77:d3:15:90:29:39:9e:fd: 08:97:cf:04:81:09:63:86:2f:42:27:5d:3c:27:5e:4f:4e:23: 3a:d9:b7:90:b2:a7:10:7a:55:20:0a:e2:c3:fe:3e:06:83:2a: 55:98:b3:1e:68:05:d5:83:1c:61:f9:b0:1c:d8:91:17:28:83: a4:a2:24:f8:b9:97:47:f9:c7:6b:bb:aa:67:ff:59:27:46:ed: 3e:df:ac:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSESlsZzGd5l2YAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDQ0ZDI4MGMtOGEwZC00ODJlLTkxMGUtMWVhNjBmZDU0M2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu84P0n4MOUd+xxWq9utB4Cq9hA5S0bx+kuy zUa+H6BgcQuMOpDifUq4GyoIrHOuwUSb8l6LfVtsOtQCyPJEylAnQnZJ7phxxEXo 8B4FisHS4T8ZFDbgmA3kwoR0zsXM6pnTDQzUUzrtrRrkfibyHbsMxCwk+wpaaFOM Lz6Omw+OZIjZmDq7E7b8paJnV6T2AJHCRNRVEUxZTTg3iPcTiPC/PjodQicO8PNq MCHdD+AVHOrPlC++texsxmfktSL6AGO531MLgXimUVS6HFzYkJGZv9CQKB4BMe3V Y6lgnIh0DqAWITML86CyMYvPbCYnxLG0Ps4816BE0M/rqtytPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLAuYGo0QllCTOKQ/zw9jKheHtOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzc3ZmRlNTgtOGU3YS0z ZGQ1LThlNTctNzI3MTg3MmRkZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqImt4Mj7FarP2hUKFi8dTYn7t69MJ9RY6L/mox5Frd/+CnZDP3 eCnGkelJ7S3mXLODBuCj0R43VuBXiYQq6Pmz3dTi6LAA/A2BRedtvVirJYf1WMwL g9dYmzncUiz6ANi92ll4lKu34m42fsN9MIWJQqEC6m1FNAQ3MD/oBp+678f+Ag+8 +e+s/exx2padniqcVDPjE7mENSLLBrCBj+qthdU8iMfS244f4Ll30xWQKTme/QiX zwSBCWOGL0InXTwnXk9OIzrZt5CypxB6VSAK4sP+PgaDKlWYsx5oBdWDHGH5sBzY kRcog6SiJPi5l0f5x2u7qmf/WSdG7T7frEY= -----END CERTIFICATE-----Generated at Sun Apr 27 03:58:43 2025 by rpki-client