$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa File: 0e7207dc-82a9-38cc-b3f8-463397db34e2.roa (raw, json) Hash identifier: iMaoAMF2FjEqQEIFMO/F+s7YBZDnUPSizBrHn2c0NQE= Subject key identifier: 99:57:F2:14:7F:95:BE:F0:BD:2B:51:55:10:CC:11:6B:61:DB:5D:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A47D44D108A7EF8297E7C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2607:4f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:d4:4d:10:8a:7e:f8:29:7e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f7f3cdac-7c98-4a48-a115-ee5d0e24c3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ff:5b:60:4e:53:29:15:53:d7:75:61:9b:db: 11:ba:c5:c3:16:bd:60:d6:2e:e9:a7:29:36:aa:d0: 4b:5c:1f:d0:cc:6e:bb:dd:f7:14:df:ef:a8:17:8a: 69:9d:9e:b7:ae:6e:ba:91:e5:1f:00:83:6a:9f:d4: db:a6:15:83:f4:15:d3:80:6e:ea:4d:ed:b9:18:05: 41:f8:21:ed:e0:4e:77:6a:2f:a3:e2:47:db:ac:b7: a4:d5:29:4e:a2:a6:52:92:bc:36:3f:d6:e0:ef:0f: b5:ef:b2:2d:e9:78:ba:91:ec:a8:02:13:6f:a4:05: eb:b2:9a:79:8a:a2:40:fb:6b:de:fc:32:a6:41:f5: d5:56:48:ff:45:b5:b0:65:c4:a1:a2:b8:a3:40:40: 9a:7e:a0:f3:94:02:0a:32:32:67:0c:5f:5c:a7:97: 04:e4:6a:b4:51:d0:45:2d:47:c8:88:aa:51:8f:cc: a0:e3:6e:8f:44:c0:48:38:d0:0a:5e:f6:b2:2f:68: e4:6a:ca:66:4d:15:e0:73:a9:95:8a:02:ea:97:c6: 0d:ed:cc:03:8c:16:ce:44:c4:00:3a:d5:94:41:00: 86:7c:22:28:27:9e:1e:ba:55:52:c3:c0:4a:bf:48: a4:5b:8a:1b:b3:1d:0c:c4:4b:e2:23:c1:5d:c0:2d: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:57:F2:14:7F:95:BE:F0:BD:2B:51:55:10:CC:11:6B:61:DB:5D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0e7207dc-82a9-38cc-b3f8-463397db34e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4f80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b9:58:8a:d9:1a:bd:4d:55:79:59:1b:35:3a:f1:61:80:3e: 55:08:06:55:5e:20:a5:0e:73:98:1e:b8:26:8e:ed:5d:52:9d: 36:73:e8:e3:da:29:ed:b2:c3:f4:6f:b9:65:42:85:4f:f6:ec: 65:bc:c5:d8:63:fc:21:30:72:61:88:cf:25:fc:a9:7e:46:42: 8d:1e:8f:76:5d:4e:5e:09:3a:eb:8c:80:6a:bb:b6:38:fd:fd: 84:6c:34:ab:42:4f:c0:65:62:c6:3e:88:c3:8a:6d:80:f6:d2: 19:15:12:fb:52:f5:1a:01:05:ec:94:d3:aa:d1:0f:70:c1:8e: 27:60:f4:8f:f7:36:9d:eb:0e:ea:c1:cf:66:2c:d0:02:d0:58: d6:be:92:39:ff:54:88:a7:be:ff:81:a3:c4:1e:cb:79:ff:56: db:c4:97:2b:05:3f:c5:fe:cd:34:83:da:0c:37:0d:72:57:ae: 5a:86:57:38:bd:e3:a1:72:84:09:78:94:67:23:3d:2f:fd:06: 43:a1:ea:f1:e5:29:02:af:15:b6:76:21:c5:29:79:47:a2:bb: ea:f7:b1:30:6d:35:cc:bb:15:f5:c5:89:87:05:1a:93:e7:7f: 00:b4:66:4c:d6:96:65:e8:5d:95:e2:eb:87:e9:84:14:78:94: e1:ef:a5:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSkfUTRCKfvgpfnwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjdmM2NkYWMtN2M5OC00YTQ4LWExMTUtZWU1ZDBlMjRjM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv9bYE5TKRVT13Vhm9sRusXDFr1g1i7ppyk2 qtBLXB/QzG673fcU3++oF4ppnZ63rm66keUfAINqn9TbphWD9BXTgG7qTe25GAVB +CHt4E53ai+j4kfbrLek1SlOoqZSkrw2P9bg7w+177It6Xi6keyoAhNvpAXrspp5 iqJA+2ve/DKmQfXVVkj/RbWwZcShorijQECafqDzlAIKMjJnDF9cp5cE5Gq0UdBF LUfIiKpRj8yg426PRMBIONAKXvayL2jkaspmTRXgc6mVigLql8YN7cwDjBbORMQA OtWUQQCGfCIoJ54eulVSw8BKv0ikW4obsx0MxEviI8FdwC2MAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJlX8hR/lb7wvStRVRDMEWth212BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGU3MjA3ZGMtODJhOS0z OGNjLWIzZjgtNDYzMzk3ZGIzNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdPgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBfuViK2Rq9TVV5WRs1OvFhgD5VCAZVXiClDnOYHrgmju1dUp02c+jj 2intssP0b7llQoVP9uxlvMXYY/whMHJhiM8l/Kl+RkKNHo92XU5eCTrrjIBqu7Y4 /f2EbDSrQk/AZWLGPojDim2A9tIZFRL7UvUaAQXslNOq0Q9wwY4nYPSP9zad6w7q wc9mLNAC0FjWvpI5/1SIp77/gaPEHst5/1bbxJcrBT/F/s00g9oMNw1yV65ahlc4 veOhcoQJeJRnIz0v/QZDoerx5SkCrxW2diHFKXlHorvq97EwbTXMuxX1xYmHBRqT 538AtGZM1pZl6F2V4uuH6YQUeJTh76WF -----END CERTIFICATE-----Generated at Sat May 10 18:50:09 2025 by rpki-client