$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa File: ae55df24-7c19-3bfc-87d0-5689589fa0de.roa (raw, json) Hash identifier: mNNN1Slk6mzqG9cAd+lKn8kWftrTIAYcZjQEofAhei8= Subject key identifier: 46:A8:2E:86:9B:71:F8:87:41:EE:F7:05:42:5F:C8:B2:10:06:5A:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4590D1E9679F1ABF9D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:45:90:d1:e9:67:9f:1a:bf:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=52cd2f77-0359-4a41-92c9-cbeda62106a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4f:65:00:e9:43:08:1f:b4:2c:fb:62:ae:a1: 6e:81:fc:35:26:c5:26:80:c3:5e:a9:15:02:31:7f: 93:a7:8f:49:12:ec:b9:95:8b:4a:c0:81:09:a2:1d: 03:0c:02:f8:4e:d1:e4:a5:a0:31:93:71:e7:af:51: 4d:49:84:c5:f9:3f:60:60:85:ca:ca:a6:d8:87:f4: 9f:f4:72:43:8a:09:65:6f:d2:04:16:b1:c9:9b:76: e3:60:72:80:64:47:a8:2a:3e:fe:97:b6:32:75:3a: 64:d6:7c:a7:d3:8a:0e:74:16:aa:ce:6b:a3:a0:98: b5:ff:fd:dc:e3:00:c5:c8:93:ff:e1:9d:02:66:96: c2:fa:c3:86:f2:fd:f7:42:86:e2:bd:f1:9f:90:23: 42:cb:b1:89:1f:41:c8:a5:16:f9:0f:fe:f4:cf:bd: 25:63:1e:80:8a:77:ad:12:73:09:51:28:95:96:00: 46:0d:10:52:76:b7:95:a6:22:17:8a:52:54:0d:e0: ce:e3:37:da:8b:c2:53:73:88:fb:17:e2:10:8d:5a: 0a:75:5b:74:35:25:65:83:5c:92:9a:e9:60:6b:6e: 51:22:7a:b5:28:8d:34:8a:48:cd:23:2b:a9:b2:05: a6:c9:58:ce:bc:fc:22:c1:18:14:3a:1c:49:6e:78: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A8:2E:86:9B:71:F8:87:41:EE:F7:05:42:5F:C8:B2:10:06:5A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae55df24-7c19-3bfc-87d0-5689589fa0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:21:fd:1e:3d:49:55:01:1b:0f:b1:20:e2:a6:a4:c2:5d:e8: 77:82:47:a8:28:fe:42:c6:f3:b1:1d:25:cc:78:6c:5b:24:02: 50:d2:f1:ac:1b:d9:19:11:fc:5c:19:17:69:3a:f3:e5:de:66: be:79:1e:55:c4:7d:89:dc:e6:c2:5a:65:1a:5e:92:ca:1f:84: 44:c7:ae:f6:c8:9d:c8:7b:5b:33:48:15:4a:f1:64:9a:d6:1f: 6f:8f:c8:fb:2f:b0:f8:f0:3a:ac:b0:3f:fd:2b:1f:24:20:f4: aa:86:d6:ec:1a:3b:a1:ab:d8:81:d7:93:9e:e0:3b:9c:b2:33: 92:c1:83:e7:40:01:16:a2:0d:9d:bb:59:d1:f9:1e:56:ef:20: 24:20:af:cb:11:b7:2a:1c:9f:c6:5d:6e:16:db:72:94:2d:46: 9b:2f:54:da:a4:bf:4a:c7:c4:4b:52:95:c7:a7:c2:15:1c:14: d1:b6:e5:1c:f3:18:46:ff:fd:f8:73:30:08:bb:5e:b3:fa:62: 6e:fe:f1:87:f5:27:80:fa:15:b1:11:5f:0f:fc:b2:1a:92:35: 4a:96:6b:14:cd:94:02:34:ae:41:54:29:44:62:8d:29:26:ed: 7c:86:75:3f:13:39:7d:f1:f5:93:4f:0b:e8:5b:8b:fa:4c:b7: 7a:5c:3c:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkWQ0elnnxq/nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTJjZDJmNzctMDM1OS00YTQxLTkyYzktY2JlZGE2MjEwNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU9lAOlDCB+0LPtirqFugfw1JsUmgMNeqRUC MX+Tp49JEuy5lYtKwIEJoh0DDAL4TtHkpaAxk3Hnr1FNSYTF+T9gYIXKyqbYh/Sf 9HJDigllb9IEFrHJm3bjYHKAZEeoKj7+l7YydTpk1nyn04oOdBaqzmujoJi1//3c 4wDFyJP/4Z0CZpbC+sOG8v33QobivfGfkCNCy7GJH0HIpRb5D/70z70lYx6Ainet EnMJUSiVlgBGDRBSdreVpiIXilJUDeDO4zfai8JTc4j7F+IQjVoKdVt0NSVlg1yS mulga25RInq1KI00ikjNIyupsgWmyVjOvPwiwRgUOhxJbnjXGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEaoLoabcfiHQe73BUJfyLIQBlo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWU1NWRmMjQtN2MxOS0z YmZjLTg3ZDAtNTY4OTU4OWZhMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABkh/R49SVUBGw+xIOKmpMJd6HeCR6go/kLG87EdJcx4bFskAlDS 8awb2RkR/FwZF2k68+XeZr55HlXEfYnc5sJaZRpeksofhETHrvbInch7WzNIFUrx ZJrWH2+PyPsvsPjwOqywP/0rHyQg9KqG1uwaO6Gr2IHXk57gO5yyM5LBg+dAARai DZ27WdH5HlbvICQgr8sRtyocn8ZdbhbbcpQtRpsvVNqkv0rHxEtSlcenwhUcFNG2 5RzzGEb//fhzMAi7XrP6Ym7+8Yf1J4D6FbERXw/8shqSNUqWaxTNlAI0rkFUKURi jSkm7XyGdT8TOX3x9ZNPC+hbi/pMt3pcPN4= -----END CERTIFICATE-----Generated at Sun Jun 15 13:00:47 2025 by rpki-client