$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa File: 107092d7-9026-31fd-802e-0afd0de7f5db.roa (raw, json) Hash identifier: Jf5ACWJifDy0ZmtvpOrSwlL7J1Bop0+SRTYTJ+hk1Kw= Subject key identifier: 53:0B:B8:9E:10:E0:38:85:7F:4A:A9:65:C3:D9:47:7A:84:DC:C2:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A415529F606DC4ACC6A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2001:19b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:41:55:29:f6:06:dc:4a:cc:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=118921a3-beed-4f2f-91f9-c98087edc61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:3f:f5:31:33:5f:7f:cf:8f:7a:fc:09:93: 1b:7d:fd:99:b3:b7:80:df:bc:c4:1a:bb:16:5e:87: e7:9c:05:f1:f3:ca:f3:2f:c6:3a:58:89:64:17:5b: 9e:88:3e:e4:3c:a2:0b:44:3a:62:23:19:85:10:66: 56:12:20:02:29:7f:48:22:42:52:5c:46:dd:12:de: 69:93:8d:5e:00:c4:71:c8:39:8b:cf:83:08:63:3e: 24:8e:f5:6b:9b:42:5a:fd:13:23:25:f1:8a:89:d3: 38:58:2b:eb:51:4a:20:95:c8:47:59:b1:b4:28:cc: 59:95:8f:5a:ae:5b:c8:ce:c4:bf:6e:f3:be:e2:34: 06:18:28:b0:2a:55:8e:1b:79:54:92:7d:9f:f6:a4: 03:22:fc:a3:77:d6:7e:43:67:88:81:8e:b2:33:e6: 17:ac:13:52:89:6c:cc:c5:d3:0d:f0:ac:79:76:7f: 79:52:81:bd:bc:32:c3:5e:f3:bf:5f:1d:f3:57:2c: d4:ec:6f:43:6b:83:95:35:ae:55:2c:d9:5e:8c:23: bd:02:bf:be:8e:d5:83:fe:c0:17:ce:1b:69:ba:69: d1:83:7b:c8:df:ca:f2:d7:aa:5d:9a:6d:ed:99:19: 83:1b:65:03:a4:9d:70:79:91:b5:d9:9e:b0:61:6c: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0B:B8:9E:10:E0:38:85:7F:4A:A9:65:C3:D9:47:7A:84:DC:C2:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ac:9d:df:07:32:94:8f:8e:bd:b0:da:e2:11:7a:c2:56:8a: 4e:76:59:cf:63:32:4a:25:a5:41:a4:15:94:5a:e9:fc:07:c3: e3:05:62:dd:78:c6:69:24:0a:c0:82:f3:c0:30:e0:4f:a0:74: 2f:b5:d6:88:56:73:2d:d7:54:42:09:7b:10:ab:f7:a4:44:45: 3b:c2:d8:6e:de:86:9c:67:59:f3:a5:85:81:88:4a:30:ff:9a: 07:d8:ec:fa:52:44:ff:fb:25:aa:e1:66:a7:ca:6d:17:6e:3c: c9:69:fc:21:2c:f6:cd:61:92:29:8e:e7:5f:06:0f:cf:25:3a: 04:61:59:6c:19:42:9a:10:5d:d7:53:db:5a:14:93:1c:f1:08: 85:8c:7d:e6:21:8c:c7:06:69:fb:ac:91:65:9c:28:e6:40:7c: d4:55:ef:8a:d4:f6:90:84:07:ca:2d:4e:8a:52:5b:80:45:21: 05:37:04:1b:1b:d4:78:f9:a9:99:cd:48:ee:3d:7f:89:ac:69: ad:26:34:f9:67:ee:7c:ae:35:45:1f:dc:9d:6a:c1:4a:45:6f: 30:fe:ea:a1:29:08:7f:dd:7b:bf:42:8f:6b:9f:93:42:e7:b1: 99:16:d1:3a:c5:b6:ab:61:03:81:49:3c:df:12:36:74:4e:d3: ab:b6:4c:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSkFVKfYG3ErMagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTE4OTIxYTMtYmVlZC00ZjJmLTkxZjktYzk4MDg3ZWRjNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBs/9TEzX3/Pj3r8CZMbff2Zs7eA37zEGrsW XofnnAXx88rzL8Y6WIlkF1ueiD7kPKILRDpiIxmFEGZWEiACKX9IIkJSXEbdEt5p k41eAMRxyDmLz4MIYz4kjvVrm0Ja/RMjJfGKidM4WCvrUUoglchHWbG0KMxZlY9a rlvIzsS/bvO+4jQGGCiwKlWOG3lUkn2f9qQDIvyjd9Z+Q2eIgY6yM+YXrBNSiWzM xdMN8Kx5dn95UoG9vDLDXvO/Xx3zVyzU7G9Da4OVNa5VLNlejCO9Ar++jtWD/sAX zhtpumnRg3vI38ry16pdmm3tmRmDG2UDpJ1weZG12Z6wYWwUQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFMLuJ4Q4DiFf0qpZcPZR3qE3MJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA3MDkyZDctOTAyNi0z MWZkLTgwMmUtMGFmZDBkZTdmNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZsDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgrJ3fBzKUj469sNriEXrCVopOdlnPYzJKJaVBpBWUWun8B8PjBWLd eMZpJArAgvPAMOBPoHQvtdaIVnMt11RCCXsQq/ekREU7wthu3oacZ1nzpYWBiEow /5oH2Oz6UkT/+yWq4Wanym0XbjzJafwhLPbNYZIpjudfBg/PJToEYVlsGUKaEF3X U9taFJMc8QiFjH3mIYzHBmn7rJFlnCjmQHzUVe+K1PaQhAfKLU6KUluARSEFNwQb G9R4+amZzUjuPX+JrGmtJjT5Z+58rjVFH9ydasFKRW8w/uqhKQh/3Xu/Qo9rn5NC 57GZFtE6xbarYQOBSTzfEjZ0TtOrtkwY -----END CERTIFICATE-----Generated at Fri May 9 02:54:21 2025 by rpki-client