$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b5d45ec-e270-3098-ae87-e39864120fd6.roa File: 0b5d45ec-e270-3098-ae87-e39864120fd6.roa (raw, json) Hash identifier: 5+Q9tldxvrX1xtSebs7kU2atJjwcR6eAIv9vcukxA3g= Subject key identifier: 20:34:8B:5A:BD:71:8B:B3:92:0E:12:17:EE:65:CA:D3:04:37:51:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A456D99B4E258B2857700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b5d45ec-e270-3098-ae87-e39864120fd6.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:45:6d:99:b4:e2:58:b2:85:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d8d21323-dac1-4194-a00a-8529af254c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:51:9b:83:41:38:32:38:03:0f:72:f6:82:bd: 6b:9b:09:cd:9f:2c:b3:ed:fc:ff:88:af:4e:b7:7e: ff:01:44:3f:18:55:24:66:82:1c:3b:2a:99:ba:4b: 57:2f:30:56:49:82:ed:54:07:d3:2e:ed:78:3d:b2: 36:48:99:5c:9b:a4:82:b8:86:12:0e:6b:f0:53:f3: 01:20:58:9b:cb:2f:22:da:74:45:21:88:cd:14:c9: 73:68:58:22:39:26:ef:b3:6d:e2:b6:68:9c:50:57: 26:78:c1:4b:b2:5b:4f:2a:85:fd:19:82:df:70:c3: 2c:00:2e:ac:21:85:20:6b:8e:a4:66:15:62:ea:e9: da:fc:6e:6a:8e:dc:da:39:15:c8:23:26:aa:48:d0: 0e:4c:2b:9f:0d:b5:42:fe:c9:a4:be:8b:52:c0:bd: 7d:91:2c:81:a0:cc:82:e9:43:7a:e4:7d:7f:46:10: df:81:f8:fc:b5:06:f8:ed:a5:8a:b1:04:9b:9c:25: 16:09:c6:80:f3:60:98:6e:2a:77:48:ba:19:53:f6: fc:72:57:26:4a:e1:27:aa:36:c3:e5:0e:e6:fc:27: 16:95:e0:66:7f:40:55:de:18:8d:b8:a4:f0:65:a0: 0a:4c:5e:db:a0:05:97:f4:3e:36:3e:be:8a:a2:21: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:8B:5A:BD:71:8B:B3:92:0E:12:17:EE:65:CA:D3:04:37:51:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b5d45ec-e270-3098-ae87-e39864120fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:32:79:55:37:78:7f:d0:52:fd:f4:a6:86:22:ad:d5:9a:6d: ca:73:49:a7:0f:ae:3e:8a:b2:a0:19:67:41:42:6c:fe:db:a0: 02:43:57:fe:d3:60:24:02:66:aa:68:41:0c:a6:0c:a3:8c:77: 07:68:55:b6:28:be:98:f0:db:89:84:4c:2a:32:7b:7f:76:8b: 30:3a:dd:8b:1f:43:28:f8:24:39:81:74:a6:1d:42:68:2c:63: c1:ad:cb:5b:d3:f2:aa:db:54:7e:83:bd:78:40:da:89:ec:3f: e9:f6:12:86:5e:e7:e2:0e:ad:3d:c8:d5:4d:78:46:8d:f6:f5: 68:42:83:b2:44:23:d0:99:04:62:60:94:1b:44:a0:ba:ef:13: 77:c9:d5:17:b5:7c:24:2f:ca:63:8e:8b:0e:51:e5:a5:92:d7: d0:f4:2d:db:b9:6a:ad:55:ac:7c:1c:0a:90:a9:14:64:51:23: 98:b7:dc:82:da:c4:a8:cb:24:04:52:7c:48:e1:b6:f8:75:1e: f8:15:44:f2:c5:cf:66:f9:0f:8c:7d:e5:90:93:c9:4e:30:c8: b1:9e:e7:e0:b4:4b:6f:cc:d6:3d:12:da:b2:27:ba:45:fa:a9: f6:65:07:be:ad:ab:e6:5a:62:af:63:e4:ba:16:89:23:8f:5e: d3:60:9d:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkVtmbTiWLKFdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDhkMjEzMjMtZGFjMS00MTk0LWEwMGEtODUyOWFmMjU0YzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFGbg0E4MjgDD3L2gr1rmwnNnyyz7fz/iK9O t37/AUQ/GFUkZoIcOyqZuktXLzBWSYLtVAfTLu14PbI2SJlcm6SCuIYSDmvwU/MB IFibyy8i2nRFIYjNFMlzaFgiOSbvs23itmicUFcmeMFLsltPKoX9GYLfcMMsAC6s IYUga46kZhVi6una/G5qjtzaORXIIyaqSNAOTCufDbVC/smkvotSwL19kSyBoMyC 6UN65H1/RhDfgfj8tQb47aWKsQSbnCUWCcaA82CYbip3SLoZU/b8clcmSuEnqjbD 5Q7m/CcWleBmf0BV3hiNuKTwZaAKTF7boAWX9D42Pr6KoiGV6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCA0i1q9cYuzkg4SF+5lytMEN1F8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI1ZDQ1ZWMtZTI3MC0z MDk4LWFlODctZTM5ODY0MTIwZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADgyeVU3eH/QUv30poYirdWabcpzSacPrj6KsqAZZ0FCbP7boAJD V/7TYCQCZqpoQQymDKOMdwdoVbYovpjw24mETCoye392izA63YsfQyj4JDmBdKYd QmgsY8Gty1vT8qrbVH6DvXhA2onsP+n2EoZe5+IOrT3I1U14Ro329WhCg7JEI9CZ BGJglBtEoLrvE3fJ1Re1fCQvymOOiw5R5aWS19D0Ldu5aq1VrHwcCpCpFGRRI5i3 3ILaxKjLJARSfEjhtvh1HvgVRPLFz2b5D4x95ZCTyU4wyLGe5+C0S2/M1j0S2rIn ukX6qfZlB76tq+ZaYq9j5LoWiSOPXtNgnUw= -----END CERTIFICATE-----Generated at Sun May 11 04:12:18 2025 by rpki-client