$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa File: b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa (raw, json) Hash identifier: mqKrHiJenSV2cI3X8jRj+BOj7Olh4GQvKia52I1Xu08= Subject key identifier: 40:50:2B:7A:EF:7C:0B:61:23:F1:A2:B6:0B:E2:B3:AA:8F:71:ED:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A20B35D8BB189B8F0D1C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2607:f490::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:20:b3:5d:8b:b1:89:b8:f0:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5a64f0ee-9f1e-4858-ac94-6c4f029a8981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:d4:d6:59:5a:04:fe:02:89:1b:dd:cd:80: 95:42:81:2f:0e:5c:97:78:9a:6c:63:bd:c4:a9:a8: e9:7a:9b:e1:59:fd:c0:62:f4:f3:92:25:6c:42:be: 94:26:f4:e1:22:95:a6:29:87:f2:a2:89:03:3a:b5: 75:47:a7:b4:6d:15:20:03:a6:94:b8:23:d6:82:3b: d3:82:23:72:11:95:23:11:fa:fd:e3:e0:98:07:28: a9:ec:62:22:7d:25:d6:de:28:d4:82:fa:16:11:cb: 3e:77:fd:15:16:1a:dd:50:40:14:fe:74:45:b0:00: 94:b6:0c:7c:90:a1:d6:27:e9:97:3d:90:9d:44:06: 75:72:26:ae:3f:1e:fa:30:b7:28:1a:eb:5c:52:8e: 56:3c:ed:b3:72:28:8d:3e:2d:58:d1:e9:ac:1f:bf: 10:be:9c:ab:05:f2:41:b7:91:07:d8:23:4c:6f:1d: ad:d9:05:d3:03:0e:43:c9:b1:00:07:e0:96:c9:66: 37:14:f7:87:92:8f:22:f8:11:19:ef:8c:67:be:f6: ac:00:7e:67:18:50:f8:f8:57:a1:18:b0:41:0e:ca: e6:14:c8:8d:1b:51:dd:7d:bf:35:24:74:13:39:70: e8:dd:f7:86:14:97:cd:8b:65:ea:50:70:be:4f:f1: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:50:2B:7A:EF:7C:0B:61:23:F1:A2:B6:0B:E2:B3:AA:8F:71:ED:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8e63d2d-d38b-3f70-a7a9-19844a77b289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f490::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9c:b4:e9:4a:d3:d6:3c:d9:19:c4:2a:c6:0e:95:fe:96:00: 96:0e:55:e6:62:c1:82:a4:2d:ca:7b:de:be:e6:26:34:dd:3e: 02:c0:c5:9c:0f:6d:ee:0f:0f:19:32:a0:d3:70:a5:3e:3d:51: 3b:3d:37:cb:12:3a:b5:8e:d9:0e:1f:e6:f8:76:34:ed:05:7d: 84:a1:d1:32:e5:8a:c6:be:e2:76:4f:49:31:82:37:ea:c4:04: 66:9c:07:40:09:a4:c8:7f:49:da:7d:98:d5:4b:34:5b:22:0c: 31:7f:52:75:a2:03:79:d1:67:98:90:cf:53:84:af:70:b4:98: 1f:fb:ce:15:16:94:9c:ea:b2:5f:ea:7c:2b:43:3d:9a:9c:11: a1:32:5e:54:51:b2:d0:69:fa:00:ef:f8:d8:50:e3:98:0c:29: 34:27:c2:01:e5:7a:d9:d0:66:0a:fb:8a:4e:de:bc:f1:9e:f4: 75:71:19:06:b3:1c:f3:12:f3:3f:1e:45:2f:0b:2e:91:5b:d6: d2:01:85:03:23:f6:c8:13:c8:19:5a:b6:aa:a5:ac:27:4a:58: ef:17:5e:26:01:1f:24:30:cd:83:78:f5:85:c6:f0:a5:ef:b9: 4b:af:17:b9:78:c7:fe:f9:76:2b:51:64:3b:44:eb:9d:3c:d6: 42:ad:d3:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSiCzXYuxibjw0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NWE2NGYwZWUtOWYxZS00ODU4LWFjOTQtNmM0ZjAyOWE4OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIvU1llaBP4CiRvdzYCVQoEvDlyXeJpsY73E qajpepvhWf3AYvTzkiVsQr6UJvThIpWmKYfyookDOrV1R6e0bRUgA6aUuCPWgjvT giNyEZUjEfr94+CYByip7GIifSXW3ijUgvoWEcs+d/0VFhrdUEAU/nRFsACUtgx8 kKHWJ+mXPZCdRAZ1ciauPx76MLcoGutcUo5WPO2zciiNPi1Y0emsH78QvpyrBfJB t5EH2CNMbx2t2QXTAw5DybEAB+CWyWY3FPeHko8i+BEZ74xnvvasAH5nGFD4+Feh GLBBDsrmFMiNG1Hdfb81JHQTOXDo3feGFJfNi2XqUHC+T/GuZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEBQK3rvfAthI/Gitgvis6qPce0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjhlNjNkMmQtZDM4Yi0z ZjcwLWE3YTktMTk4NDRhNzdiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMnLTpStPWPNkZxCrGDpX+lgCWDlXmYsGCpC3Ke96+5iY03T4CwMWc D23uDw8ZMqDTcKU+PVE7PTfLEjq1jtkOH+b4djTtBX2EodEy5YrGvuJ2T0kxgjfq xARmnAdACaTIf0nafZjVSzRbIgwxf1J1ogN50WeYkM9ThK9wtJgf+84VFpSc6rJf 6nwrQz2anBGhMl5UUbLQafoA7/jYUOOYDCk0J8IB5XrZ0GYK+4pO3rzxnvR1cRkG sxzzEvM/HkUvCy6RW9bSAYUDI/bIE8gZWraqpawnSljvF14mAR8kMM2DePWFxvCl 77lLrxe5eMf++XYrUWQ7ROudPNZCrdMx -----END CERTIFICATE-----Generated at Sun Jun 15 11:38:42 2025 by rpki-client