$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aaab681-3551-3e6d-bdad-a8f966c205ec.roa File: 0aaab681-3551-3e6d-bdad-a8f966c205ec.roa (raw, json) Hash identifier: 0ybBEfeOshi5QvqW/t0Ltc3Fk8Px3Ydv66qlkWTA9YY= Subject key identifier: BE:AC:1B:1E:AD:DC:63:AE:47:68:4B:FA:CF:3D:49:97:44:A6:74:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A46DEC121E338FF8C6000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aaab681-3551-3e6d-bdad-a8f966c205ec.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:1800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:de:c1:21:e3:38:ff:8c:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=aa1ef48a-b9db-4147-a503-9724d79c714b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:41:2b:ad:64:41:b2:b2:de:a7:13:af:8f: 41:51:a1:fa:a7:2c:5b:58:a4:aa:f8:16:47:19:03: e0:ee:ef:34:6c:1e:7f:57:65:5a:53:60:21:c4:cd: b8:41:a7:c2:fc:12:2b:eb:5b:ef:71:4d:db:7c:82: 16:83:ef:86:0b:06:9c:58:36:3e:24:db:0e:bd:6c: bb:6e:1a:91:2e:b4:14:08:10:a1:83:9f:90:d4:27: a8:5a:60:d1:35:00:41:07:fe:13:ea:8c:0d:62:2b: 86:53:2d:06:74:87:14:56:a1:06:8d:dc:78:b3:f3: a8:98:52:55:3a:df:8a:83:01:f7:0c:e5:65:49:18: 17:09:f0:52:f2:10:d1:36:10:22:ee:51:4d:e7:f5: 37:41:df:bb:a8:fb:90:4f:36:c2:eb:d7:a1:44:5c: 46:54:1e:fe:f2:85:24:de:f5:5a:94:7f:f5:12:6e: 07:97:63:6f:4d:40:67:41:75:67:8a:8d:c6:db:00: 59:f9:2a:7a:1b:d2:13:2d:76:0f:e9:f2:48:a9:9e: 12:6e:87:5f:d2:2c:bb:28:48:b2:1e:c1:40:e1:25: 1d:64:ad:0a:63:4d:78:3b:ab:a0:2a:42:20:2a:d0: 84:eb:35:a9:34:d0:ae:7b:0e:c7:f3:f8:bc:6f:7b: da:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AC:1B:1E:AD:DC:63:AE:47:68:4B:FA:CF:3D:49:97:44:A6:74:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aaab681-3551-3e6d-bdad-a8f966c205ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e7:9d:93:fc:e5:2c:47:f0:47:dc:c5:75:c8:34:f1:a1:c0: 7a:03:0b:b3:4d:80:7b:fc:cb:73:54:34:de:ad:c5:3d:04:df: 72:6f:5b:94:81:7b:7a:d3:a4:07:0d:86:0e:80:28:b7:7b:77: 6f:c1:d8:45:52:90:b2:89:35:cb:cc:fc:bb:18:6a:38:35:e6: d9:06:2e:40:53:22:8d:b9:ed:70:09:55:b8:ea:7c:8a:b2:d9: 71:ff:6f:47:7a:ef:6f:56:89:b0:51:87:4e:00:40:0b:26:eb: 91:a7:3d:5e:06:14:61:f3:47:ff:15:88:66:d0:c8:bc:57:ac: 9f:4d:d9:e7:77:3d:5f:9f:a8:16:9a:57:5d:55:e2:d0:fb:6c: c5:de:7d:d4:b0:a6:71:97:43:4b:a1:e5:2c:38:47:67:52:29: af:a2:5f:d0:6f:4e:d2:7f:1e:34:7a:f4:b2:f9:9e:9e:24:63: b9:d5:c1:ea:34:6b:02:98:e4:70:97:76:d5:27:ea:88:15:1b: 8c:61:a0:6e:fc:10:d1:09:20:63:c7:1c:77:0b:aa:7e:e6:5c: ab:15:22:48:15:fc:f9:93:0b:30:b6:65:4e:f5:ac:1b:e8:a9: b8:0a:b5:48:f3:13:f3:9e:9e:92:92:f9:cc:e6:88:a0:1a:f1: 0f:e2:9b:41 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkbewSHjOP+MYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YWExZWY0OGEtYjlkYi00MTQ3LWE1MDMtOTcyNGQ3OWM3MTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6dBK61kQbKy3qcTr49BUaH6pyxbWKSq+BZH GQPg7u80bB5/V2VaU2AhxM24QafC/BIr61vvcU3bfIIWg++GCwacWDY+JNsOvWy7 bhqRLrQUCBChg5+Q1CeoWmDRNQBBB/4T6owNYiuGUy0GdIcUVqEGjdx4s/OomFJV Ot+KgwH3DOVlSRgXCfBS8hDRNhAi7lFN5/U3Qd+7qPuQTzbC69ehRFxGVB7+8oUk 3vValH/1Em4Hl2NvTUBnQXVnio3G2wBZ+Sp6G9ITLXYP6fJIqZ4Sbodf0iy7KEiy HsFA4SUdZK0KY014O6ugKkIgKtCE6zWpNNCuew7H8/i8b3vaHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFL6sGx6t3GOuR2hL+s89SZdEpnTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGFhYWI2ODEtMzU1MS0z ZTZkLWJkYWQtYThmOTY2YzIwNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAK+edk/zlLEfwR9zFdcg08aHAegMLs02Ae/zLc1Q03q3FPQTfcm9b lIF7etOkBw2GDoAot3t3b8HYRVKQsok1y8z8uxhqODXm2QYuQFMijbntcAlVuOp8 irLZcf9vR3rvb1aJsFGHTgBACybrkac9XgYUYfNH/xWIZtDIvFesn03Z53c9X5+o FppXXVXi0Ptsxd591LCmcZdDS6HlLDhHZ1Ipr6Jf0G9O0n8eNHr0svmeniRjudXB 6jRrApjkcJd21SfqiBUbjGGgbvwQ0QkgY8ccdwuqfuZcqxUiSBX8+ZMLMLZlTvWs G+ipuAq1SPMT856ekpL5zOaIoBrxD+KbQQ== -----END CERTIFICATE-----Generated at Sat May 10 19:12:27 2025 by rpki-client