$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/53d4dc54-1772-311f-a119-36c490495436.roa File: 53d4dc54-1772-311f-a119-36c490495436.roa (raw, json) Hash identifier: Y1/ZYDa3+D+JHePc0dYQKJFqKcJXkqh3VMTJrD8nztI= Subject key identifier: 02:27:B1:61:0A:16:0D:89:14:58:DD:7A:DD:F2:02:40:25:38:26:80 Certificate issuer: /CN=33beb877-dbaf-4d25-870e-a43af90cc071 Certificate serial: 010D0C9F43285849B6DF462842168070985A57E0 Authority key identifier: A0:EE:2D:FC:8D:E6:BB:C3:AC:BA:14:D6:E2:95:20:73:E7:2C:F9:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/53d4dc54-1772-311f-a119-36c490495436.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 26860 IP address blocks: 2001:49b0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:46:28:42:16:80:70:98:5a:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33beb877-dbaf-4d25-870e-a43af90cc071 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=98b30b24-b3c3-4554-b670-f00104262389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7d:35:e7:39:9b:54:cc:cc:77:32:3f:ee:09: 97:f7:9f:68:b8:bb:2e:a1:bd:94:be:dc:0d:76:b3: 51:2c:d9:90:3d:6f:12:48:84:18:8f:11:3b:41:e4: 0d:ca:3e:cc:de:47:72:21:8b:9f:43:56:d5:39:aa: 79:9c:2e:87:7f:52:21:46:63:27:f5:76:97:6d:50: 1b:a9:e9:2c:86:97:36:93:82:e4:84:2c:50:c0:78: 0a:c1:1d:0f:14:8b:06:d2:54:f4:b4:54:ff:e7:32: 08:40:8f:f4:4d:a3:a0:34:c4:86:75:cf:85:9e:e9: 18:6a:e6:b0:7f:23:87:ce:2c:5a:a7:09:0c:6d:b3: ed:85:a2:9c:bd:73:91:61:56:a0:84:4f:10:59:40: fa:57:a1:b4:a8:ab:00:d1:3e:8a:cb:ef:30:6b:ec: 59:e8:53:2d:c2:b3:12:52:f8:13:12:30:15:5e:7f: d7:48:fe:a9:db:38:6f:e8:af:a0:69:69:5d:ce:df: f0:0a:9b:d5:1a:4c:77:d2:c9:80:7b:2f:31:cf:ea: 2f:86:7f:d6:d7:ff:5c:59:a3:33:de:7b:db:d5:69: ee:07:4d:b3:db:6b:32:8e:5b:ba:d3:53:97:92:2c: b0:7a:3b:00:b1:0d:0f:b6:a8:59:93:e5:7e:86:f0: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:B1:61:0A:16:0D:89:14:58:DD:7A:DD:F2:02:40:25:38:26:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/53d4dc54-1772-311f-a119-36c490495436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.crl X509v3 Authority Key Identifier: keyid:A0:EE:2D:FC:8D:E6:BB:C3:AC:BA:14:D6:E2:95:20:73:E7:2C:F9:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer sbgp-ipAddrBlock: critical IPv6: 2001:49b0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c2:4d:36:7f:f5:97:42:a0:e5:09:cd:f4:68:5f:48:aa:cd: 30:7b:4c:ff:40:a2:c5:59:9a:8e:a0:e7:ad:d9:7e:e5:f4:87: f9:d3:7e:73:cb:ce:14:7c:b8:91:00:a8:91:e0:80:fe:59:c3: b2:65:d1:ed:c8:5d:01:41:ad:c1:7c:ae:8e:94:75:86:83:43: 1c:79:51:67:b2:93:9d:ec:d0:03:3a:48:6c:41:cf:6b:ab:3a: 37:c5:e0:b0:27:b7:42:93:7f:cf:f8:25:49:c0:07:c6:72:76: a3:ad:00:eb:75:8d:ee:98:c6:e2:4f:aa:b6:12:98:43:9c:be: a0:6f:8f:ef:9d:c6:47:a3:8e:22:51:80:df:36:3e:8a:1f:68: 12:b1:58:6c:66:b7:d4:99:f5:51:1b:b1:7c:98:68:ee:81:d1: c4:0e:f9:70:d9:17:87:92:88:16:9a:7d:f3:72:02:bb:7b:67: 2a:39:f3:8f:dc:55:98:25:e5:3e:50:16:b6:9d:3f:99:14:d6: 83:ab:b8:a5:50:bf:fc:d4:2e:6b:23:7b:f5:e0:09:7d:1e:f7: e6:61:b1:6b:d4:6f:03:4c:7e:16:ea:7d:8a:92:59:5f:27:b1: 55:ed:13:62:38:0d:1d:77:ad:a2:12:af:b1:33:fd:3e:79:7e: b8:55:f5:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm230YoQhaAcJhaV+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNiZWI4NzctZGJhZi00ZDI1LTg3MGUtYTQzYWY5MGNj MDcxMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk OThiMzBiMjQtYjNjMy00NTU0LWI2NzAtZjAwMTA0MjYyMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX015zmbVMzMdzI/7gmX959ouLsuob2UvtwN drNRLNmQPW8SSIQYjxE7QeQNyj7M3kdyIYufQ1bVOap5nC6Hf1IhRmMn9XaXbVAb qekshpc2k4LkhCxQwHgKwR0PFIsG0lT0tFT/5zIIQI/0TaOgNMSGdc+FnukYauaw fyOHzixapwkMbbPthaKcvXORYVaghE8QWUD6V6G0qKsA0T6Ky+8wa+xZ6FMtwrMS UvgTEjAVXn/XSP6p2zhv6K+gaWldzt/wCpvVGkx30smAey8xz+ovhn/W1/9cWaMz 3nvb1WnuB02z22syjlu601OXkiywejsAsQ0PtqhZk+V+hvBNgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAInsWEKFg2JFFjdet3yAkAlOCaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Jl Yjg3Ny1kYmFmLTRkMjUtODcwZS1hNDNhZjkwY2MwNzEvNTNkNGRjNTQtMTc3Mi0z MTFmLWExMTktMzZjNDkwNDk1NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNiZWI4NzctZGJhZi00ZDI1LTg3 MGUtYTQzYWY5MGNjMDcxLzMzYmViODc3LWRiYWYtNGQyNS04NzBlLWE0M2FmOTBj YzA3MS5jcmwwHwYDVR0jBBgwFoAUoO4t/I3mu8OsuhTW4pUgc+cs+Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2JlYjg3Ny1kYmFmLTRkMjUtODcwZS1hNDNh ZjkwY2MwNzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJsDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5wk02f/WXQqDlCc30aF9Iqs0we0z/QKLFWZqOoOet2X7l9If5035z y84UfLiRAKiR4ID+WcOyZdHtyF0BQa3BfK6OlHWGg0MceVFnspOd7NADOkhsQc9r qzo3xeCwJ7dCk3/P+CVJwAfGcnajrQDrdY3umMbiT6q2EphDnL6gb4/vncZHo44i UYDfNj6KH2gSsVhsZrfUmfVRG7F8mGjugdHEDvlw2ReHkogWmn3zcgK7e2cqOfOP 3FWYJeU+UBa2nT+ZFNaDq7ilUL/81C5rI3v14Al9HvfmYbFr1G8DTH4W6n2Kkllf J7FV7RNiOA0dd62iEq+xM/0+eX64VfVb -----END CERTIFICATE-----Generated at Sun Jun 15 18:01:18 2025 by rpki-client