$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117a675a-437d-3d26-bd21-20643d61ed4f.roa File: 117a675a-437d-3d26-bd21-20643d61ed4f.roa (raw, json) Hash identifier: DM52l796xV/uoM2Fii67K4M1gTCtbgVSfRgw9mEMGxg= Subject key identifier: D1:82:B0:41:DD:59:47:22:82:B2:41:58:E8:D3:59:77:04:B6:CA:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1DA51AF76E62C53EA156 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117a675a-437d-3d26-bd21-20643d61ed4f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:a5:1a:f7:6e:62:c5:3e:a1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=0065f234-bf13-4d40-9bf0-1fbcfd8fd75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:09:cf:c5:91:21:5d:4c:ba:e1:6f:bd:61: bb:ec:ec:3c:51:52:0e:8e:60:88:1a:5c:46:87:71: 84:2a:a9:fa:38:1d:07:82:e4:56:dd:e5:0b:16:4d: 79:30:d7:5a:c7:e0:94:7f:30:d5:b5:cc:6c:75:61: 7f:04:18:a8:6c:18:de:82:a5:f5:39:19:1f:ec:92: ef:4b:43:dd:ed:56:f1:50:ef:27:50:01:d6:34:70: 8a:0f:5f:6b:25:af:f6:1e:14:0c:78:02:66:df:fa: cd:55:30:c6:e7:b4:42:e1:fc:1a:d6:29:56:fe:8b: 9e:0c:56:e6:50:20:1b:28:1f:04:b1:56:ba:9a:93: fe:5e:b2:b4:e6:4d:00:7e:a2:fa:d3:66:33:ff:de: bc:cc:14:a0:8f:75:bb:5b:ed:01:d5:8a:ba:b4:75: 4f:84:eb:35:ad:78:df:b7:d1:d6:5d:14:11:00:a8: c5:64:c7:07:c1:56:b5:48:f1:33:11:a4:02:40:a4: 07:fd:a6:9a:82:bb:47:94:a8:01:e0:2d:ea:dd:eb: aa:28:b3:ee:81:6c:1b:3a:6f:e6:52:cf:a5:51:81: a2:da:8b:52:e0:93:3c:97:de:c1:75:df:12:04:76: 83:2c:f3:bc:49:e8:d8:fd:5f:46:c5:26:12:d8:08: 42:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:B0:41:DD:59:47:22:82:B2:41:58:E8:D3:59:77:04:B6:CA:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117a675a-437d-3d26-bd21-20643d61ed4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:16:7f:db:b7:73:95:60:f2:f6:8d:ae:b9:91:a5:e9:be:2a: 75:40:de:da:f1:1f:5d:6d:79:54:9c:4a:a4:45:71:ec:0f:6e: 8e:fa:26:c6:c7:c2:74:0f:e3:9e:95:9e:ed:fc:1a:cb:7e:47: 9c:57:ee:e1:6c:69:04:ff:13:51:3c:52:c0:4e:04:71:dc:19: f7:f3:cc:c4:f5:6f:fd:f5:fe:b6:5b:c8:fc:fb:02:db:7f:9d: a8:3d:74:24:6d:d5:93:80:2e:bd:24:f8:b9:e6:7f:63:2e:2e: 20:fa:71:8a:53:84:69:b8:e4:d1:50:9e:68:b5:03:92:86:fe: c1:bd:e5:99:94:0b:29:4e:81:f5:a7:8d:48:de:14:87:9c:56: 11:f2:92:9e:ff:3c:91:50:fa:77:9c:e8:97:ba:a1:62:3c:39: 5b:45:ca:4e:82:47:39:1b:72:13:08:f0:c7:8e:35:df:14:ae: d2:ed:da:1a:65:01:d7:63:8c:7e:0c:42:95:2a:ff:7a:20:c9: ba:a9:a2:a5:1a:a1:a6:57:45:c3:29:12:41:a4:ba:16:d1:a6: b9:20:e2:2d:75:c5:d0:47:8e:47:ed:ac:dc:f4:9a:aa:8a:26: d5:e5:0a:47:c9:3e:33:39:d7:fb:35:39:d5:92:17:43:9f:16: 14:40:08:2d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh2lGvduYsU+oVYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDA2NWYyMzQtYmYxMy00ZDQwLTliZjAtMWZiY2ZkOGZkNzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAossJz8WRIV1MuuFvvWG77Ow8UVIOjmCIGlxG h3GEKqn6OB0HguRW3eULFk15MNdax+CUfzDVtcxsdWF/BBiobBjegqX1ORkf7JLv S0Pd7VbxUO8nUAHWNHCKD19rJa/2HhQMeAJm3/rNVTDG57RC4fwa1ilW/oueDFbm UCAbKB8EsVa6mpP+XrK05k0AfqL602Yz/968zBSgj3W7W+0B1Yq6tHVPhOs1rXjf t9HWXRQRAKjFZMcHwVa1SPEzEaQCQKQH/aaagrtHlKgB4C3q3euqKLPugWwbOm/m Us+lUYGi2otS4JM8l97Bdd8SBHaDLPO8SejY/V9GxSYS2AhCowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNGCsEHdWUcigrJBWOjTWXcEtsqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTE3YTY3NWEtNDM3ZC0z ZDI2LWJkMjEtMjA2NDNkNjFlZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPxZ/27dzlWDy9o2uuZGl6b4qdUDe2vEfXW15VJxKpEVx7A9ujvom xsfCdA/jnpWe7fway35HnFfu4WxpBP8TUTxSwE4EcdwZ9/PMxPVv/fX+tlvI/PsC 23+dqD10JG3Vk4AuvST4ueZ/Yy4uIPpxilOEabjk0VCeaLUDkob+wb3lmZQLKU6B 9aeNSN4Uh5xWEfKSnv88kVD6d5zol7qhYjw5W0XKToJHORtyEwjwx4413xSu0u3a GmUB12OMfgxClSr/eiDJuqmipRqhpldFwykSQaS6FtGmuSDiLXXF0EeOR+2s3PSa qoom1eUKR8k+MznX+zU51ZIXQ58WFEAILQ== -----END CERTIFICATE-----Generated at Sun May 11 03:49:52 2025 by rpki-client