$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa File: 96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa (raw, json) Hash identifier: 3ok2fP9/bv4uJwOl9IcE6j7WfhZBhKzMYPAmltTyGkQ= Subject key identifier: 4B:ED:AE:C9:24:41:95:E3:8E:A1:0D:0C:D9:47:F6:E2:AF:A1:04:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112B707F77FA49D0FEF500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:3100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2b:70:7f:77:fa:49:d0:fe:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=89874bd4-fc84-439a-93a0-22f12c11bb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:71:97:33:26:29:52:9b:f2:35:ba:30:a6: 25:f6:19:1f:b2:fb:5d:10:fc:b8:3f:c5:2a:d4:bc: 40:79:2c:f6:64:65:a5:6c:31:11:1f:78:95:a1:96: d6:85:bf:4d:8d:ed:34:3c:40:44:c8:d3:d7:56:fd: 0c:07:fc:f7:a0:8e:c2:77:58:15:47:70:1f:bf:03: 10:4a:73:d7:d8:3c:49:67:88:06:14:a3:1a:85:55: cd:75:17:12:d5:05:c6:73:70:33:3b:7f:00:3f:05: 25:6b:42:71:b1:01:8b:a0:47:0e:d1:a4:bd:8e:7c: 0c:fb:f3:31:45:77:b7:9a:8b:85:a5:54:61:a7:ad: 9d:a8:d3:a5:e4:1f:94:4e:dd:0f:e4:88:5d:ae:70: 2d:33:46:4e:d8:58:64:eb:ed:15:a2:b6:59:cb:35: 42:f4:13:e2:e6:2b:f3:6a:02:56:37:1e:f8:65:e6: c3:77:36:16:29:a9:c1:a5:0b:58:de:3d:79:7b:a4: 86:b8:e8:b5:72:5c:37:ba:e4:e1:6a:91:ac:f3:6b: d6:1c:2e:0c:2a:77:7c:c5:17:99:12:d2:dd:88:39: 39:c7:25:d0:ea:b2:d4:a1:68:51:7c:07:e5:0c:f8: 90:a1:d0:fe:eb:e2:1b:61:96:b8:51:f6:cd:d4:2e: 9b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:ED:AE:C9:24:41:95:E3:8E:A1:0D:0C:D9:47:F6:E2:AF:A1:04:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96b3d84d-bdac-30f7-80c4-963ec35d5b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b1:d7:8a:8a:8c:ae:c8:55:cf:4a:33:a2:2d:75:7d:95:3c: ae:d1:05:af:81:08:b6:f7:f5:c4:76:e7:49:f3:ca:b2:72:84: 7c:38:07:16:2f:da:dc:0e:fa:ec:35:a2:45:88:da:13:71:8b: eb:7c:66:5c:61:ba:78:c2:ac:02:8c:b7:ac:f9:2c:ec:6d:65: 87:8c:d4:04:b0:ea:44:ff:f6:38:c4:48:2f:20:07:95:8e:39: d2:92:15:b6:22:6b:8c:d6:35:ee:e8:d3:4a:e7:34:8c:93:12: 71:fb:0d:8b:04:0f:a4:d2:ea:40:29:16:37:28:97:3a:29:c2: c6:df:d6:00:2d:fb:05:be:9e:7a:07:6a:62:6d:3d:39:28:3d: 47:ab:81:82:55:d5:e5:c5:2b:47:6b:15:f0:20:a9:07:61:a6: 39:0b:8c:8f:a8:fa:c4:49:ae:fc:96:d9:ac:b0:c6:c0:f3:87: fd:02:c6:16:3d:b8:69:b5:7c:6a:8d:d4:60:40:ce:8b:d1:51: 59:94:4c:85:07:04:2e:78:ed:f1:ff:49:fa:37:3a:93:9d:6d: 1a:6c:a1:d8:89:1b:02:7f:ef:37:45:0c:ed:06:d2:9d:16:22: 6b:6d:79:d3:ab:a1:68:1f:9f:28:8e:47:b9:01:67:3a:04:db: ef:d1:ce:ab -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSEStwf3f6SdD+9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODk4NzRiZDQtZmM4NC00MzlhLTkzYTAtMjJmMTJjMTFiYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgRxlzMmKVKb8jW6MKYl9hkfsvtdEPy4P8Uq 1LxAeSz2ZGWlbDERH3iVoZbWhb9Nje00PEBEyNPXVv0MB/z3oI7Cd1gVR3AfvwMQ SnPX2DxJZ4gGFKMahVXNdRcS1QXGc3AzO38APwUla0JxsQGLoEcO0aS9jnwM+/Mx RXe3mouFpVRhp62dqNOl5B+UTt0P5IhdrnAtM0ZO2Fhk6+0VorZZyzVC9BPi5ivz agJWNx74ZebDdzYWKanBpQtY3j15e6SGuOi1clw3uuThapGs82vWHC4MKnd8xReZ EtLdiDk5xyXQ6rLUoWhRfAflDPiQodD+6+IbYZa4UfbN1C6bkQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEvtrskkQZXjjqENDNlH9uKvoQTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTZiM2Q4NGQtYmRhYy0z MGY3LTgwYzQtOTYzZWMzNWQ1YjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfLHXioqMrshVz0ozoi11fZU8rtEFr4EItvf1xHbnSfPKsnKEfDgH Fi/a3A767DWiRYjaE3GL63xmXGG6eMKsAoy3rPks7G1lh4zUBLDqRP/2OMRILyAH lY450pIVtiJrjNY17ujTSuc0jJMScfsNiwQPpNLqQCkWNyiXOinCxt/WAC37Bb6e egdqYm09OSg9R6uBglXV5cUrR2sV8CCpB2GmOQuMj6j6xEmu/JbZrLDGwPOH/QLG Fj24abV8ao3UYEDOi9FRWZRMhQcELnjt8f9J+jc6k51tGmyh2IkbAn/vN0UM7QbS nRYia21506uhaB+fKI5HuQFnOgTb79HOqw== -----END CERTIFICATE-----Generated at Mon Apr 28 06:13:09 2025 by rpki-client