$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa File: a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa (raw, json) Hash identifier: re562DPdILpNjJNkgzqouuqoJ4bREorbc4mdOYj5E5w= Subject key identifier: CC:91:98:CC:AC:1D:15:5C:45:74:BB:C3:20:98:78:96:22:19:EE:9A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112A1AF0691455A5F3AC40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2a:1a:f0:69:14:55:a5:f3:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=5ff83eb2-42d8-4bb6-aaeb-5f0f44637390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:08:5c:0f:48:72:75:7f:a2:40:4d:a7:40: 42:63:13:e0:c1:f3:82:a2:07:d9:30:10:ae:95:3d: 44:c6:a4:26:9b:90:0c:ab:8c:b8:25:f6:a1:3f:40: a2:00:d1:7e:33:0d:9b:03:ed:c3:10:dd:af:da:e7: e6:02:66:d6:f9:37:91:e1:e5:64:73:48:fd:9a:7d: 98:2a:03:ca:dd:4f:66:2e:83:87:3c:e4:71:e0:54: c4:a4:5a:7d:2e:e1:e6:c1:f0:da:14:ba:36:f8:d9: e7:98:10:2b:cf:90:6d:fe:2b:66:9b:e2:2c:25:ae: 59:ab:90:37:9f:03:ff:a8:8f:36:87:50:79:bd:4e: 17:0c:2d:3f:2b:2a:ec:95:82:09:83:0d:79:0d:71: eb:b1:3f:c1:9a:18:48:37:21:dd:f7:08:6d:e4:e0: 3e:e8:c9:9d:cb:a6:cf:e8:fc:ba:07:aa:e6:63:42: af:5a:a9:a6:94:21:21:95:4c:85:37:a4:53:60:7d: b4:68:07:39:f0:02:ca:95:fc:be:38:96:82:fc:60: 24:6a:32:ac:9f:2c:09:1e:86:6f:7e:9e:6a:90:1e: c3:22:7a:ba:d2:ef:47:f4:9a:c2:87:58:60:c7:cc: 86:b0:b2:e3:e0:bd:e4:10:28:8b:0f:8a:7d:f6:ed: 78:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:91:98:CC:AC:1D:15:5C:45:74:BB:C3:20:98:78:96:22:19:EE:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:37::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:29:30:2b:33:74:ec:dc:0e:de:df:4a:6e:4f:00:49:04:0d: d5:98:82:47:ec:75:b0:92:f5:b4:30:fd:07:b7:8a:f4:3f:c8: f1:f7:1f:bb:26:dc:1e:02:ee:b3:43:4b:db:5e:4d:4a:b5:38: 06:ee:e3:83:07:11:6e:02:6b:4a:03:f9:fe:9d:b0:4c:d8:38: dc:96:70:dd:c3:72:ba:a5:c8:f1:90:8a:98:88:95:ed:b3:63: 74:37:15:0b:4d:14:aa:bd:37:81:5e:4e:e5:69:ac:8f:8f:90: 20:02:1b:7b:64:26:a6:7b:23:b4:6a:e4:25:4e:79:0a:d2:9b: 57:77:0f:6f:74:ce:3b:92:1b:12:0e:dd:7b:a9:bd:bc:b6:98: a3:59:0b:a6:01:c1:77:84:7c:f5:88:08:8e:2a:c9:12:71:d8: 28:3e:33:a0:85:0b:e2:3e:15:74:02:ea:1e:ac:c2:81:22:06: 1a:45:6e:ae:30:b4:4e:3a:ee:83:90:d2:49:ea:12:82:c5:69: ab:b1:d4:a0:25:74:95:12:94:d1:88:06:91:94:e2:0c:01:8b: ee:45:a9:a2:2c:54:52:9a:c6:7d:64:f5:78:f6:00:98:0b:c7: 77:a0:00:5f:e9:5b:d4:96:d1:db:8b:1c:2b:c8:e3:1d:67:45: 47:a3:87:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSESoa8GkUVaXzrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NWZmODNlYjItNDJkOC00YmI2LWFhZWItNWYwZjQ0NjM3MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxUIXA9IcnV/okBNp0BCYxPgwfOCogfZMBCu lT1ExqQmm5AMq4y4JfahP0CiANF+Mw2bA+3DEN2v2ufmAmbW+TeR4eVkc0j9mn2Y KgPK3U9mLoOHPORx4FTEpFp9LuHmwfDaFLo2+NnnmBArz5Bt/itmm+IsJa5Zq5A3 nwP/qI82h1B5vU4XDC0/KyrslYIJgw15DXHrsT/BmhhINyHd9wht5OA+6Mmdy6bP 6Py6B6rmY0KvWqmmlCEhlUyFN6RTYH20aAc58ALKlfy+OJaC/GAkajKsnywJHoZv fp5qkB7DInq60u9H9JrCh1hgx8yGsLLj4L3kECiLD4p99u141wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMyRmMysHRVcRXS7wyCYeJYiGe6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTllYjM3YzktZTY5Zi0z MWZlLWFiY2YtZThmZmYwM2U0NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHopMCszdOzcDt7fSm5PAEkEDdWYgkfsdbCS9bQw/Qe3ivQ/yPH3 H7sm3B4C7rNDS9teTUq1OAbu44MHEW4Ca0oD+f6dsEzYONyWcN3DcrqlyPGQipiI le2zY3Q3FQtNFKq9N4FeTuVprI+PkCACG3tkJqZ7I7Rq5CVOeQrSm1d3D290zjuS GxIO3Xupvby2mKNZC6YBwXeEfPWICI4qyRJx2Cg+M6CFC+I+FXQC6h6swoEiBhpF bq4wtE467oOQ0knqEoLFaaux1KAldJUSlNGIBpGU4gwBi+5FqaIsVFKaxn1k9Xj2 AJgLx3egAF/pW9SW0duLHCvI4x1nRUejh+U= -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:38 2025 by rpki-client