$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa File: 87e9af17-b83d-3cfb-b718-f367a270a589.roa (raw, json) Hash identifier: JFRaJDVkaW1oFMA3rb36AmMdtfAQI5r/vV2eXtoIFgU= Subject key identifier: 5B:C1:78:9D:6B:61:A9:32:67:0D:4B:46:83:25:6C:60:CE:05:21:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112960728AB2727D8A1157 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:29:60:72:8a:b2:72:7d:8a:11:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=8a777c5c-c3ec-4202-9cb6-b8084dbfa226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:c0:ed:0b:5c:a3:a2:56:e5:97:35:8c:d8: 85:82:6e:b2:fa:04:30:06:df:e9:10:fd:08:66:06: 4d:99:3a:a5:39:c3:9f:f0:a4:9b:f9:b2:83:e8:fa: 4f:59:e4:eb:de:81:e3:76:b2:a7:d5:dc:98:78:dd: 17:94:3f:23:1e:23:31:6e:ae:b4:1f:33:1f:9c:69: db:7a:fb:86:27:41:b9:9d:86:40:1b:a1:68:14:25: ba:2d:4c:54:88:1a:11:af:2d:0a:5c:77:5b:a8:02: c8:d8:6b:b4:c7:b1:cb:1e:84:f4:b8:56:48:79:88: 88:40:96:71:e7:af:db:15:81:18:b3:5f:a2:7a:e7: 4e:e9:18:c6:ff:0f:ce:c3:1e:fa:e3:a4:b3:24:b6: 11:2f:77:d1:36:91:47:e2:83:67:86:0c:1a:b0:8e: 64:cf:90:43:1b:e0:28:6b:ac:d9:10:9c:8e:98:76: 57:17:f7:70:23:2f:fb:86:e8:09:db:ca:29:48:53: fd:87:4d:84:c1:02:b6:45:65:cd:94:c2:f1:73:46: 18:e7:63:2f:12:94:2b:7b:e0:9e:c6:b0:ff:69:f8: 86:9b:af:a5:d3:f2:25:70:fa:aa:6c:08:09:39:88: fb:19:86:8e:d4:47:d2:e9:c1:b4:e2:d4:a6:83:53: cd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C1:78:9D:6B:61:A9:32:67:0D:4B:46:83:25:6C:60:CE:05:21:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f4:a0:60:6d:14:f4:18:56:4d:64:6d:9f:07:33:c9:8c:77: 36:83:8a:70:6b:ed:89:dc:8d:cf:5b:13:79:ec:d0:7c:95:1e: bb:5b:bb:49:ee:4a:1c:3c:d0:fc:b7:a4:5e:0a:0b:f8:c7:66: 5c:24:03:0b:57:6e:59:d6:f9:c5:f1:3b:5a:5f:4f:20:d8:e1: 48:c0:8a:d1:1b:f9:c8:fe:90:7e:80:ec:b5:13:e3:bd:9d:3d: 5e:76:a2:9e:ac:0f:39:6c:12:3b:5b:ff:17:4a:84:e9:3f:0d: ec:4e:e3:4d:16:d9:fe:b2:b8:9c:50:6b:14:93:3a:8c:2e:9b: 96:e8:0d:ae:bf:41:ad:90:50:1e:a5:9a:fb:90:a4:a2:d0:5d: e0:bb:32:b6:95:aa:95:8a:2b:0b:4c:fb:4f:31:e5:44:96:60: 5b:49:3e:4b:12:fe:b4:d5:50:c2:bb:d0:29:07:01:b7:4c:3a: c9:b9:ef:2d:03:eb:79:40:45:46:86:e7:fb:4c:95:2f:ac:e2: 76:f2:c9:3c:c9:c3:e5:06:c2:5a:52:7f:e4:c5:95:80:d0:1b: 52:3b:e1:73:98:75:6d:a5:da:8a:76:c8:58:11:03:37:3f:1c: 4e:60:0a:f1:b0:02:98:f7:c4:45:e0:d8:bf:0e:8a:f0:f0:89: 7e:20:8b:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSESlgcoqycn2KEVcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OGE3NzdjNWMtYzNlYy00MjAyLTljYjYtYjgwODRkYmZhMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriHA7Qtco6JW5Zc1jNiFgm6y+gQwBt/pEP0I ZgZNmTqlOcOf8KSb+bKD6PpPWeTr3oHjdrKn1dyYeN0XlD8jHiMxbq60HzMfnGnb evuGJ0G5nYZAG6FoFCW6LUxUiBoRry0KXHdbqALI2Gu0x7HLHoT0uFZIeYiIQJZx 56/bFYEYs1+ieudO6RjG/w/Owx7646SzJLYRL3fRNpFH4oNnhgwasI5kz5BDG+Ao a6zZEJyOmHZXF/dwIy/7hugJ28opSFP9h02EwQK2RWXNlMLxc0YY52MvEpQre+Ce xrD/afiGm6+l0/IlcPqqbAgJOYj7GYaO1EfS6cG04tSmg1PN2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFvBeJ1rYakyZw1LRoMlbGDOBSEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdlOWFmMTctYjgzZC0z Y2ZiLWI3MTgtZjM2N2EyNzBhNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIj0oGBtFPQYVk1kbZ8HM8mMdzaDinBr7Yncjc9bE3ns0HyVHrtb u0nuShw80Py3pF4KC/jHZlwkAwtXblnW+cXxO1pfTyDY4UjAitEb+cj+kH6A7LUT 472dPV52op6sDzlsEjtb/xdKhOk/DexO400W2f6yuJxQaxSTOowum5boDa6/Qa2Q UB6lmvuQpKLQXeC7MraVqpWKKwtM+08x5USWYFtJPksS/rTVUMK70CkHAbdMOsm5 7y0D63lARUaG5/tMlS+s4nbyyTzJw+UGwlpSf+TFlYDQG1I74XOYdW2l2op2yFgR Azc/HE5gCvGwApj3xEXg2L8OivDwiX4gizY= -----END CERTIFICATE-----Generated at Sun Apr 27 06:32:32 2025 by rpki-client