$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa File: 8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa (raw, json) Hash identifier: hVn3cqNO13fO5KS/edq9FMJBB3DB7+AqjthlJUYX55Y= Subject key identifier: 66:9F:47:88:66:D4:B3:30:79:04:70:29:17:F3:96:97:4E:49:C1:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849E4EFC5C7E0E238C41BAC87E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 2604:cb00:3b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c5:c7:e0:e2:38:c4:1b:ac:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=e6e2b62a-0b3d-4a04-b401-8f6c161fd7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:d8:21:e3:e6:64:01:ec:7a:f3:09:97:48: 20:bc:13:32:33:e7:31:2b:23:a4:f3:ed:6e:26:37: 84:e7:cf:df:73:b2:2e:02:fa:07:af:32:58:8c:b4: 14:ca:44:f5:2c:a4:eb:03:d5:53:d8:8c:09:11:5a: ca:15:dc:da:0a:16:05:48:60:24:4e:45:5e:f6:78: f4:90:06:a6:2d:ae:69:99:2c:11:97:61:27:8d:0b: 9a:af:e1:da:fc:8d:b8:15:72:64:1f:35:71:ef:bd: a7:36:f8:3a:fb:45:7a:96:1f:91:0b:ad:aa:48:79: 1c:b9:19:a5:c2:9c:a3:d8:0f:42:1e:2a:a1:d1:07: 1f:7a:54:a3:ca:b1:01:92:2f:f1:b6:b3:c5:d5:59: 1d:de:47:c8:99:af:a6:0a:b3:b7:9a:85:c7:4f:c0: 5d:79:ac:37:da:02:d4:4a:62:31:d7:3f:1c:27:5c: c8:8f:68:59:7b:b6:b1:f8:60:da:1f:fd:19:69:7f: 8a:52:19:95:38:44:dc:d3:9b:08:d6:c1:d7:f9:aa: 97:e6:23:d2:8e:fb:2a:1c:34:2d:14:97:59:1b:07: 23:d4:4a:e7:e7:88:da:aa:72:13:30:bd:05:af:f9: 2e:6d:1d:5a:a9:2c:05:9b:fa:b7:29:7b:f5:29:29: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:47:88:66:D4:B3:30:79:04:70:29:17:F3:96:97:4E:49:C1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f7:80:75:75:4c:c2:83:f8:ff:e3:01:8d:b4:8d:ff:d8:b7: e9:1b:b6:3f:bf:91:a4:d8:b4:6a:b5:e0:bb:6c:08:74:cd:5d: 08:fb:f8:6a:69:4b:16:cb:5d:39:6b:ab:9b:fb:df:7b:8c:e2: da:41:f9:e4:90:d8:6c:a0:d9:f6:19:2f:90:fb:90:99:4f:9a: 06:07:ca:57:9f:23:12:7b:d0:1b:9d:0b:c8:5f:c7:61:ed:5d: 45:fc:55:1c:4a:f1:45:bb:f0:5f:90:0c:99:c8:e2:e2:1f:8c: 2b:e4:ba:9f:1e:f0:e0:fe:43:b1:a7:57:b1:f3:17:e6:68:e3: b9:fc:fd:7e:b0:a3:78:d3:15:89:47:41:ba:b9:be:39:5b:8b: cf:f2:38:31:30:1b:02:da:6e:f5:2c:f2:89:24:13:fa:8c:2f: 7c:d0:2e:12:0c:b0:d5:67:bb:e5:ea:53:dd:8e:dd:0d:10:50: b9:39:d7:ce:6d:d8:2e:6b:0c:c9:28:ee:1e:f8:26:14:9a:23: f9:7b:4d:2e:01:2e:20:d6:ff:33:fe:01:da:dc:38:3b:45:68: 0d:89:19:34:36:5c:34:20:9f:8e:82:44:da:c8:5e:24:d4:f7: 6b:fc:9c:ca:49:64:bf:11:a4:e4:a4:fa:29:3d:c2:fc:32:a6: 27:3a:08:87 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnk78XH4OI4xBush+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTZlMmI2MmEtMGIzZC00YTA0LWI0MDEtOGY2YzE2MWZkN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP/YIePmZAHsevMJl0ggvBMyM+cxKyOk8+1u JjeE58/fc7IuAvoHrzJYjLQUykT1LKTrA9VT2IwJEVrKFdzaChYFSGAkTkVe9nj0 kAamLa5pmSwRl2EnjQuar+Ha/I24FXJkHzVx772nNvg6+0V6lh+RC62qSHkcuRml wpyj2A9CHiqh0QcfelSjyrEBki/xtrPF1Vkd3kfIma+mCrO3moXHT8Bdeaw32gLU SmIx1z8cJ1zIj2hZe7ax+GDaH/0ZaX+KUhmVOETc05sI1sHX+aqX5iPSjvsqHDQt FJdZGwcj1Ern54jaqnITML0Fr/kubR1aqSwFm/q3KXv1KSldQQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGafR4hm1LMweQRwKRfzlpdOScGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGY2ZTJkMzAtZWFiNC0z Y2RkLTlkZTktYWJmOGM4MzY1NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHPeAdXVMwoP4/+MBjbSN/9i36Ru2P7+RpNi0arXgu2wIdM1dCPv4 amlLFstdOWurm/vfe4zi2kH55JDYbKDZ9hkvkPuQmU+aBgfKV58jEnvQG50LyF/H Ye1dRfxVHErxRbvwX5AMmcji4h+MK+S6nx7w4P5DsadXsfMX5mjjufz9frCjeNMV iUdBurm+OVuLz/I4MTAbAtpu9SzyiSQT+owvfNAuEgyw1We75epT3Y7dDRBQuTnX zm3YLmsMySjuHvgmFJoj+XtNLgEuINb/M/4B2tw4O0VoDYkZNDZcNCCfjoJE2she JNT3a/ycyklkvxGk5KT6KT3C/DKmJzoIhw== -----END CERTIFICATE-----Generated at Sun Jun 15 19:00:11 2025 by rpki-client