$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94ad66a0-43be-341d-802b-6b42b5c82cb4.roa File: 94ad66a0-43be-341d-802b-6b42b5c82cb4.roa (raw, json) Hash identifier: 4jj7sUak2yRE/TbwVcuZb7hNGpqcCJjqKth86BdlKWU= Subject key identifier: AC:91:65:D7:25:F8:3B:53:AD:CB:C5:30:E4:83:E0:8D:2C:EE:2A:4D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21128CD927829B24CDA7900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94ad66a0-43be-341d-802b-6b42b5c82cb4.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2600:200::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:28:cd:92:78:29:b2:4c:da:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=689fc1ec-8285-47c6-9a4f-463d6d0647cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:3a:22:a4:a4:42:1b:48:5b:79:15:47:be: 7f:50:dd:8c:b3:04:c8:d3:74:8e:2a:f7:93:01:f0: fa:9d:0f:47:cd:75:54:91:d0:8c:dd:7c:c7:67:16: ec:04:2a:dc:10:9e:2f:6c:d0:e2:e6:9c:5f:bd:64: 62:22:10:ba:f1:39:b7:df:99:5c:83:d8:c9:98:33: 5a:38:f9:1b:86:7e:48:a9:44:e4:10:b1:f6:9a:b6: 29:e7:e6:7f:07:d4:47:14:5d:8f:66:00:2e:cc:f2: f9:cd:a6:cf:94:e5:a5:2a:36:ac:24:93:6f:bd:ef: 46:e1:fc:68:c9:99:3d:9f:97:c4:d3:b1:9a:11:3e: ad:07:49:26:f1:64:91:ed:53:cc:4d:5e:89:c3:33: 6a:3d:e4:a4:13:a2:9b:4c:94:78:74:61:3b:d4:ca: 5b:42:b4:0f:25:81:8c:ce:41:ad:68:4a:2d:13:bb: e3:2f:a9:80:3e:32:50:4c:7d:68:a1:da:db:37:af: 9b:e6:45:5c:d6:9a:5e:a2:de:47:08:ee:20:25:2e: 06:3a:f5:52:66:ca:b5:eb:e6:c7:47:b7:66:c5:05: a3:ed:15:a9:bf:84:18:c4:58:32:df:c9:5e:4c:bb: 84:8f:3d:c7:95:e6:6f:ef:bd:4e:a5:44:ff:7c:96: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:91:65:D7:25:F8:3B:53:AD:CB:C5:30:E4:83:E0:8D:2C:EE:2A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94ad66a0-43be-341d-802b-6b42b5c82cb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2600:200::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:42:a2:60:16:71:d0:ba:ba:8b:0a:00:37:74:1f:d4:85:3a: 6c:0d:aa:81:fc:d7:58:99:a0:81:b4:24:aa:3c:73:45:3f:69: ae:18:d3:79:c6:df:f3:4b:8f:e8:da:d2:fc:71:41:b1:ba:09: 2a:36:d1:27:6c:8d:46:d4:76:1e:fe:42:b2:66:8c:38:21:39: af:ef:01:32:93:26:64:ad:0d:5c:b5:52:0f:05:db:fb:5a:0c: 54:46:8a:cd:ec:5f:5c:99:86:d9:88:48:b1:c7:83:1a:51:80: b2:5d:30:90:24:5f:a0:a0:9c:1e:c1:da:1f:54:85:ea:93:41: e7:8a:14:4d:ca:c5:f1:a8:14:14:27:74:bb:2e:78:cf:60:43: 85:bc:4d:9d:25:29:61:1e:33:5f:f9:b1:6f:ef:34:dc:e2:8d: 22:7b:08:2d:59:c7:9e:56:48:46:da:cf:10:da:9a:77:5d:23: 6f:8f:62:58:70:97:2b:47:5a:ec:e7:e9:c2:d1:21:94:ce:27: b5:28:89:47:91:a4:28:0b:a4:69:b3:e8:9c:66:37:3d:2a:c2: 6b:f3:c9:65:20:a4:f7:87:30:e2:2b:a5:97:c3:54:06:08:f4: 22:5c:e2:f6:91:b2:bf:32:58:5b:ea:b8:00:6d:b4:13:15:e6: c6:6b:b7:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjSESjNkngpskzaeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk Njg5ZmMxZWMtODI4NS00N2M2LTlhNGYtNDYzZDZkMDY0N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYE6IqSkQhtIW3kVR75/UN2MswTI03SOKveT AfD6nQ9HzXVUkdCM3XzHZxbsBCrcEJ4vbNDi5pxfvWRiIhC68Tm335lcg9jJmDNa OPkbhn5IqUTkELH2mrYp5+Z/B9RHFF2PZgAuzPL5zabPlOWlKjasJJNvve9G4fxo yZk9n5fE07GaET6tB0km8WSR7VPMTV6JwzNqPeSkE6KbTJR4dGE71MpbQrQPJYGM zkGtaEotE7vjL6mAPjJQTH1oodrbN6+b5kVc1ppeot5HCO4gJS4GOvVSZsq16+bH R7dmxQWj7RWpv4QYxFgy38leTLuEjz3HleZv771OpUT/fJasgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKyRZdcl+DtTrcvFMOSD4I0s7ipNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTRhZDY2YTAtNDNiZS0z NDFkLTgwMmItNmI0MmI1YzgyY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgACADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcQqJgFnHQurqLCgA3dB/UhTpsDaqB/NdYmaCBtCSqPHNFP2muGNN5 xt/zS4/o2tL8cUGxugkqNtEnbI1G1HYe/kKyZow4ITmv7wEykyZkrQ1ctVIPBdv7 WgxURorN7F9cmYbZiEixx4MaUYCyXTCQJF+goJwewdofVIXqk0HnihRNysXxqBQU J3S7LnjPYEOFvE2dJSlhHjNf+bFv7zTc4o0iewgtWceeVkhG2s8Q2pp3XSNvj2JY cJcrR1rs5+nC0SGUzie1KIlHkaQoC6Rps+icZjc9KsJr88llIKT3hzDiK6WXw1QG CPQiXOL2kbK/Mlhb6rgAbbQTFebGa7cp -----END CERTIFICATE-----Generated at Sun Apr 27 01:55:54 2025 by rpki-client