$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08cd69f8-da2d-34c9-8e88-13abf0201107.roa File: 08cd69f8-da2d-34c9-8e88-13abf0201107.roa (raw, json) Hash identifier: J8gRJyrkIT/bg8bQKBuCgutggVHXBudjh2a8KlrGeaI= Subject key identifier: 96:A9:4F:31:D2:4C:49:83:10:8F:C7:16:C3:AD:3A:37:78:80:A4:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1BF5A0FA66A1A6DB3680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08cd69f8-da2d-34c9-8e88-13abf0201107.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1b:f5:a0:fa:66:a1:a6:db:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=346062b3-91aa-44d6-ac17-59674be484a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:b9:bd:94:86:92:e9:b7:11:e4:1a:34:ef: dd:c5:83:13:22:e9:74:aa:3e:b5:b3:f7:d4:8a:fc: bf:11:a1:dc:22:3a:29:83:12:b0:23:6e:76:ec:fc: de:b9:73:90:d1:e8:e3:3a:4e:28:02:ea:53:b0:a8: f6:2e:0d:9e:3b:b6:4c:5f:98:a0:b9:ff:f4:17:a2: 7e:3b:4a:7c:41:dc:ce:4d:4e:78:e6:53:2c:7a:48: 89:ca:1a:48:14:ec:cb:8b:47:dc:cf:30:0f:a5:3d: e8:7d:4b:67:60:55:37:5e:65:fc:3e:dd:cc:78:06: 96:90:03:8a:05:ac:82:80:e8:a2:48:79:25:71:11: 40:54:71:f2:a2:46:51:bd:2a:17:4b:cd:c8:e3:11: 71:ce:59:24:0c:6f:df:d8:b7:ea:9f:90:f9:42:fd: 49:39:9f:38:06:bf:81:60:62:2f:69:95:1e:de:89: ff:09:f4:ce:06:4c:56:b4:9e:12:22:45:d8:93:ae: a5:12:4b:9c:97:fd:de:32:0a:f5:83:fe:86:94:21: 93:4c:3b:38:11:52:17:2e:10:80:0e:c8:47:ca:05: f3:0a:55:47:0d:9d:6c:11:4c:25:2b:11:d4:bd:96: f6:f4:b1:04:83:65:7c:66:29:b5:64:ad:ce:4e:32: a0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A9:4F:31:D2:4C:49:83:10:8F:C7:16:C3:AD:3A:37:78:80:A4:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08cd69f8-da2d-34c9-8e88-13abf0201107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:9f:74:b6:fa:55:a3:79:f6:46:ef:13:96:d3:3d:e9:51:68: 36:44:df:f5:f9:d1:65:37:ca:5e:a0:62:4d:e3:da:89:55:16: ad:93:b5:f2:fd:02:ee:74:2d:8e:5b:fe:b7:a3:be:4d:af:82: d1:ab:84:e4:19:3a:ea:b5:3b:a9:12:2a:8d:e2:1e:a1:bd:82: b4:10:9d:38:4d:8d:87:8f:ec:6c:8e:52:7e:81:00:b5:65:1f: 39:6b:8c:c8:15:5c:11:c2:75:ec:b9:99:2c:79:ec:f3:72:e6: da:ee:94:90:0b:a6:bd:c9:f8:d3:cb:a4:37:1e:73:f4:36:37: c8:db:55:6d:a7:c9:9d:7f:77:47:62:99:77:55:b5:18:05:e0: 6b:94:7f:21:b8:c5:05:22:09:d9:8f:82:2f:a6:46:27:34:54: ce:3d:35:b9:01:25:97:92:a4:9e:b7:4d:2f:57:ed:b2:85:71: ad:19:e9:b9:e6:64:8a:28:79:ea:00:f3:9f:e7:05:67:23:ce: b0:96:12:aa:66:45:35:fb:1b:9d:c6:52:ab:d5:f7:67:03:9b: 39:28:5a:2d:8f:9e:2d:35:42:45:b0:f0:72:79:09:91:89:f5: 35:70:60:37:e4:37:98:c9:0e:44:82:41:77:be:92:55:5b:e4: e2:bf:75:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxShv1oPpmoabbNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzQ2MDYyYjMtOTFhYS00NGQ2LWFjMTctNTk2NzRiZTQ4NGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+65vZSGkum3EeQaNO/dxYMTIul0qj61s/fU ivy/EaHcIjopgxKwI2527PzeuXOQ0ejjOk4oAupTsKj2Lg2eO7ZMX5iguf/0F6J+ O0p8QdzOTU545lMsekiJyhpIFOzLi0fczzAPpT3ofUtnYFU3XmX8Pt3MeAaWkAOK BayCgOiiSHklcRFAVHHyokZRvSoXS83I4xFxzlkkDG/f2Lfqn5D5Qv1JOZ84Br+B YGIvaZUe3on/CfTOBkxWtJ4SIkXYk66lEkucl/3eMgr1g/6GlCGTTDs4EVIXLhCA DshHygXzClVHDZ1sEUwlKxHUvZb29LEEg2V8Zim1ZK3OTjKgvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJapTzHSTEmDEI/HFsOtOjd4gKQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhjZDY5ZjgtZGEyZC0z NGM5LThlODgtMTNhYmYwMjAxMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAWfdLb6VaN59kbvE5bTPelRaDZE3/X50WU3yl6gYk3j2olVFq2T tfL9Au50LY5b/rejvk2vgtGrhOQZOuq1O6kSKo3iHqG9grQQnThNjYeP7GyOUn6B ALVlHzlrjMgVXBHCdey5mSx57PNy5trulJALpr3J+NPLpDcec/Q2N8jbVW2nyZ1/ d0dimXdVtRgF4GuUfyG4xQUiCdmPgi+mRic0VM49NbkBJZeSpJ63TS9X7bKFca0Z 6bnmZIooeeoA85/nBWcjzrCWEqpmRTX7G53GUqvV92cDmzkoWi2Pni01QkWw8HJ5 CZGJ9TVwYDfkN5jJDkSCQXe+klVb5OK/dRA= -----END CERTIFICATE-----Generated at Sun May 11 04:32:13 2025 by rpki-client