$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa File: f9f48e7f-17f5-303e-8734-cee27411d59a.roa (raw, json) Hash identifier: bsK/P6gV/je6WF+KyXymLsCckVDTL+3pvXLQ+/2o51Y= Subject key identifier: 2C:AE:CB:A9:87:CB:B6:73:6B:12:67:81:E1:A6:7E:D9:27:4E:F1:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849F71528F8534E7E9146ED1160 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:4200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:28:f8:53:4e:7e:91:46:ed:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=2cd921c6-c80b-4577-bd57-34dd28476ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:0b:b1:42:d7:2b:13:dc:87:d7:b8:24:14: 1a:7d:8b:66:1a:2d:4d:a3:99:92:dc:62:5f:2a:d6: 6c:23:28:18:be:d8:e5:59:a4:46:cb:f7:30:1a:03: f1:c1:4a:9d:87:ee:91:1d:05:17:7f:d8:5a:8d:ae: a7:97:48:f7:44:3e:83:97:84:d1:b8:9f:a8:78:38: 03:10:1d:03:ae:5c:78:c4:8d:e5:69:40:0e:38:21: 4e:26:4b:6f:c5:60:cf:1d:09:3f:45:49:57:a6:52: c7:d2:0c:05:e4:b3:bc:e9:f1:2b:50:09:3b:82:82: c6:79:98:93:fe:84:b7:ed:83:13:f8:32:f8:cc:c6: 32:15:e9:cd:33:4a:a0:2c:0f:9d:c8:61:e2:1e:1b: 2b:76:f4:bf:48:3a:38:2c:b0:c7:e9:9c:e7:99:95: 42:ae:01:1d:b0:3e:b8:9f:76:c8:9a:11:0c:1d:e9: 8d:a3:bd:94:b3:29:0d:0f:00:f6:c4:d6:11:00:fe: 57:76:9a:e2:96:76:5a:5f:11:32:74:3c:1b:43:df: 1f:51:d0:52:a5:58:7e:fc:0a:1a:f7:b5:d1:3c:e0: 85:76:7c:5f:3f:92:8b:a5:87:5d:82:bb:fa:b5:df: 73:e2:df:4e:36:83:a8:ec:3a:9c:c4:1d:05:c0:24: 3e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AE:CB:A9:87:CB:B6:73:6B:12:67:81:E1:A6:7E:D9:27:4E:F1:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:4200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:0d:16:54:62:ba:9a:84:42:79:57:b3:4d:7c:02:0f:82:19: 88:35:3c:18:fb:89:6d:92:ae:90:65:eb:f5:bf:15:31:f9:15: 78:00:03:9b:c9:de:f7:12:e6:b4:31:f4:01:d1:c6:34:44:02: 89:6e:9a:4b:a3:84:64:f0:cf:8e:e7:72:ed:a1:4d:64:46:bc: 7a:e3:1d:52:0d:a9:20:03:c7:97:0a:2d:95:ac:00:81:90:1c: d0:67:9f:63:8a:a9:65:89:d3:e2:17:c7:92:6b:34:4d:aa:ce: b1:91:af:40:c9:f2:ea:4a:03:a5:7c:07:f4:69:bc:13:3a:b5: 9f:4a:c7:cf:b3:53:2b:34:6e:e4:4c:e2:3c:2b:ea:60:e9:ff: 66:73:ee:a4:36:85:68:33:f8:90:63:3e:ae:2b:26:89:30:43: f6:1a:0a:41:af:89:0c:50:f1:b4:cc:1b:d2:b4:8b:f1:47:11: 63:ac:8d:a5:72:2e:00:a6:4b:65:15:b0:1d:05:ee:7a:85:0b: fb:45:fb:73:c8:fc:e3:48:02:a6:eb:89:44:59:e4:b0:21:40: b4:9d:87:6f:5d:76:ba:09:66:66:f4:de:05:21:7d:af:87:d8: e3:1a:ce:2c:df:26:c0:54:24:76:56:4e:89:87:7e:ed:0a:d1: 2c:db:bd:ad -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn3FSj4U05+kUbtEWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MmNkOTIxYzYtYzgwYi00NTc3LWJkNTctMzRkZDI4NDc2YmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyoLsULXKxPch9e4JBQafYtmGi1No5mS3GJf KtZsIygYvtjlWaRGy/cwGgPxwUqdh+6RHQUXf9haja6nl0j3RD6Dl4TRuJ+oeDgD EB0Drlx4xI3laUAOOCFOJktvxWDPHQk/RUlXplLH0gwF5LO86fErUAk7goLGeZiT /oS37YMT+DL4zMYyFenNM0qgLA+dyGHiHhsrdvS/SDo4LLDH6ZznmZVCrgEdsD64 n3bImhEMHemNo72UsykNDwD2xNYRAP5XdprilnZaXxEydDwbQ98fUdBSpVh+/Aoa 97XRPOCFdnxfP5KLpYddgrv6td9z4t9ONoOo7DqcxB0FwCQ+VwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCyuy6mHy7ZzaxJngeGmftknTvGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjlmNDhlN2YtMTdmNS0z MDNlLTg3MzQtY2VlMjc0MTFkNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAEIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHw0WVGK6moRCeVezTXwCD4IZiDU8GPuJbZKukGXr9b8VMfkVeAAD m8ne9xLmtDH0AdHGNEQCiW6aS6OEZPDPjudy7aFNZEa8euMdUg2pIAPHlwotlawA gZAc0GefY4qpZYnT4hfHkms0TarOsZGvQMny6koDpXwH9Gm8Ezq1n0rHz7NTKzRu 5EziPCvqYOn/ZnPupDaFaDP4kGM+rismiTBD9hoKQa+JDFDxtMwb0rSL8UcRY6yN pXIuAKZLZRWwHQXueoUL+0X7c8j840gCpuuJRFnksCFAtJ2Hb112uglmZvTeBSF9 r4fY4xrOLN8mwFQkdlZOiYd+7QrRLNu9rQ== -----END CERTIFICATE-----Generated at Sun Jun 15 12:59:09 2025 by rpki-client