$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa File: f1def610-6bdb-3266-9d82-dc9da0ae8803.roa (raw, json) Hash identifier: Y9sXu0Jm/ipYZjloJk6leXpClwnPWFH2ANOp/JqFWEo= Subject key identifier: B3:F1:A7:AB:15:B9:3F:C3:68:48:F5:AF:82:3E:1D:9D:4B:E2:F1:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112A852F99E89A6D145D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2a:85:2f:99:e8:9a:6d:14:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=9dad9cab-3265-425b-bdd0-9cb09fd1f794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5e:b6:23:5e:3a:00:07:f1:02:94:29:03:29: 28:4b:9f:87:c1:b9:1e:28:23:3d:5a:ec:e8:30:4f: 13:9d:8e:c0:a5:c5:54:3a:cc:87:16:b5:39:a3:d5: c6:3f:5e:81:b5:48:a3:88:06:6b:38:07:41:33:d6: cd:44:2a:f9:90:9c:d4:b4:ec:f1:f5:1a:ad:e8:62: 04:ba:c4:d8:77:82:89:bb:26:ed:53:cd:bb:18:fe: 7a:d2:b1:c1:d2:5d:a3:f5:b3:17:90:29:99:2c:78: e4:7f:c9:c2:2f:e3:97:38:1c:0f:49:98:fe:f1:87: 62:f0:5c:70:aa:90:b3:86:69:28:da:45:37:69:9a: 00:e0:0a:e5:a7:83:dc:7c:20:82:02:68:2b:32:21: 1c:75:a7:4a:78:0e:7a:d1:68:77:75:3c:4e:68:dd: 8e:48:45:a4:56:32:04:de:23:1d:2b:9e:04:eb:d7: 7b:6e:c5:08:b4:b9:64:0c:8c:fd:09:e5:9c:ab:a1: 8e:78:0f:45:e4:54:78:c7:4e:4f:7e:26:76:26:25: 69:84:a0:14:20:95:0e:27:6a:81:95:21:eb:84:fb: be:c0:05:c8:7a:87:d9:39:b9:b7:ed:e5:b3:29:16: 1d:76:52:39:56:7e:ad:db:22:1c:56:8b:71:dc:38: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F1:A7:AB:15:B9:3F:C3:68:48:F5:AF:82:3E:1D:9D:4B:E2:F1:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:99:d9:5c:15:ce:0a:0e:12:d6:0c:f4:11:02:9d:d9:74:8a: f0:d3:06:2f:96:ac:78:87:ee:fe:55:18:13:34:46:42:65:a7: d3:6e:95:4d:5d:c6:b1:4d:d1:5e:93:65:01:d6:9e:8e:ea:6a: b9:4e:cc:64:8d:26:2f:9f:65:8c:2d:77:a6:49:74:ed:ef:81: a1:94:3f:fe:b7:05:36:06:d3:ac:6a:fa:aa:83:e5:3e:1c:4b: 02:f0:25:8e:87:eb:17:0e:30:78:37:83:50:62:dd:1e:70:12: 61:d7:14:76:8a:c3:d7:51:ad:1f:26:b4:5a:28:42:08:9b:3e: a2:cd:86:e5:ec:13:99:7a:e2:ea:83:e8:54:56:5f:a5:c3:d1: 6e:16:a0:72:49:02:a0:6f:90:da:ac:8e:73:d6:0b:3c:8d:91: c3:29:82:05:98:76:67:e8:2c:86:cc:42:f2:dc:82:35:c8:93: a6:2d:aa:fd:41:e0:aa:96:a3:bc:e8:b5:dd:c2:9b:f5:7d:83: 8d:7a:48:1b:a4:10:4a:64:99:db:92:29:f7:ad:b5:2e:ab:29: 53:e2:0b:2e:24:02:ae:f4:9b:a7:32:11:cb:eb:e6:2b:3a:29: f8:bf:ab:55:f4:91:65:f6:7d:54:ee:f9:51:a6:b4:cb:b1:d9: 2e:0d:fd:8b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSESqFL5nomm0UXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OWRhZDljYWItMzI2NS00MjViLWJkZDAtOWNiMDlmZDFmNzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F62I146AAfxApQpAykoS5+HwbkeKCM9Wuzo ME8TnY7ApcVUOsyHFrU5o9XGP16BtUijiAZrOAdBM9bNRCr5kJzUtOzx9Rqt6GIE usTYd4KJuybtU827GP560rHB0l2j9bMXkCmZLHjkf8nCL+OXOBwPSZj+8Ydi8Fxw qpCzhmko2kU3aZoA4Arlp4PcfCCCAmgrMiEcdadKeA560Wh3dTxOaN2OSEWkVjIE 3iMdK54E69d7bsUItLlkDIz9CeWcq6GOeA9F5FR4x05PfiZ2JiVphKAUIJUOJ2qB lSHrhPu+wAXIeofZObm37eWzKRYddlI5Vn6t2yIcVotx3DgnhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLPxp6sVuT/DaEj1r4I+HZ1L4vGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFkZWY2MTAtNmJkYi0z MjY2LTlkODItZGM5ZGEwYWU4ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAA4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV5nZXBXOCg4S1gz0EQKd2XSK8NMGL5aseIfu/lUYEzRGQmWn026V TV3GsU3RXpNlAdaejupquU7MZI0mL59ljC13pkl07e+BoZQ//rcFNgbTrGr6qoPl PhxLAvAljofrFw4weDeDUGLdHnASYdcUdorD11GtHya0WihCCJs+os2G5ewTmXri 6oPoVFZfpcPRbhagckkCoG+Q2qyOc9YLPI2RwymCBZh2Z+gshsxC8tyCNciTpi2q /UHgqpajvOi13cKb9X2DjXpIG6QQSmSZ25Ip9621LqspU+ILLiQCrvSbpzIRy+vm Kzop+L+rVfSRZfZ9VO75Uaa0y7HZLg39iw== -----END CERTIFICATE-----Generated at Sun Apr 27 22:12:14 2025 by rpki-client