$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1662be72-98d0-3b7e-a2a9-68ece9b0a635.roa File: 1662be72-98d0-3b7e-a2a9-68ece9b0a635.roa (raw, json) Hash identifier: mG/BGpUV2ku3Qz/5a8w5ld2zXh2HxMVECUSK9ga2cfE= Subject key identifier: 83:B1:E2:D7:45:DB:87:0E:A4:FD:72:D7:4D:02:52:3F:23:A9:1C:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1E0B93011D76AE445D20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1662be72-98d0-3b7e-a2a9-68ece9b0a635.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:1b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1e:0b:93:01:1d:76:ae:44:5d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=51612405-e293-4219-98e5-be528c177955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c8:38:f2:38:54:6e:de:e8:92:20:a7:3a:81: 6e:53:9f:7f:76:29:83:fd:00:8c:1f:b3:8b:c2:15: e9:cc:36:af:de:3b:67:bc:4b:b4:c2:0b:71:02:dc: e5:ab:5c:02:b2:f2:91:22:69:79:db:11:7d:8c:a2: c8:18:e3:fd:40:5d:51:d1:58:fb:dc:85:d1:5b:47: f5:8d:1e:fc:ac:17:e5:1e:7b:f5:f7:ff:9d:e3:9c: e0:d0:c6:fc:47:d6:89:9a:b7:23:0a:25:6c:0a:be: 3a:9a:6c:71:b7:df:5f:ee:4a:67:ed:5e:d6:37:41: 62:8c:15:bd:d2:af:9a:07:09:9a:66:dc:77:bf:e6: 51:66:21:dc:b4:f5:a3:c8:ca:b5:01:37:04:60:00: 7a:cc:a0:ff:c0:6c:17:ae:c0:77:c7:49:36:93:28: e7:40:18:d6:98:92:06:72:b5:e2:5e:27:23:63:71: 21:31:34:aa:59:27:36:78:db:cf:4c:62:48:59:5e: 28:65:ea:c3:22:80:65:ce:d8:5f:fe:43:95:a4:b1: 21:cc:45:27:f1:60:42:d9:82:d1:97:ef:40:7c:5c: df:d3:ee:07:0d:1a:4a:cb:50:e9:38:31:5a:27:6b: b0:29:0d:54:a7:cc:6f:78:dd:22:8a:22:02:9f:0f: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B1:E2:D7:45:DB:87:0E:A4:FD:72:D7:4D:02:52:3F:23:A9:1C:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1662be72-98d0-3b7e-a2a9-68ece9b0a635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d4:2d:03:3f:a6:70:5a:45:01:b2:ac:ae:4d:8b:2d:90:a4: 40:c4:f9:d9:24:94:69:41:f5:44:ce:f1:67:27:ef:98:5f:92: 1f:0b:dd:ce:4f:7f:19:fc:15:c7:23:5c:2b:2b:94:2a:27:49: 14:91:b5:be:f3:14:a0:8f:e3:27:90:b8:2d:7f:e7:8f:e3:59: 29:cc:43:77:cf:82:24:56:ce:b7:02:5e:f1:fa:5c:f0:ae:9a: 65:e8:19:0d:40:87:d8:75:23:1f:0f:fb:2c:0e:61:19:ed:98: 2b:ab:b0:d3:c5:a4:df:ca:76:fa:67:10:9f:d0:35:e8:e6:de: f2:d4:a7:0b:2f:f5:f5:05:de:10:d2:c0:9f:23:8f:30:e8:2d: 08:1f:37:00:b6:1b:2d:ff:a1:06:7b:8a:62:72:66:9b:43:bd: 60:29:63:fc:14:f6:d0:38:2a:59:b9:08:27:49:7d:5a:97:e6: 77:99:e0:de:42:86:f3:ed:99:47:38:f2:46:90:be:56:12:4b: d7:e5:2e:f6:c3:9c:e7:bc:53:c9:6b:83:38:e6:30:a1:eb:39: a0:5f:27:c8:49:11:8b:7a:56:70:df:ef:88:96:6f:4c:6a:5f: fe:66:30:0d:df:f0:69:80:27:b0:d2:6b:17:a9:4c:c1:f3:e3: 9b:01:b9:50 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh4LkwEddq5EXSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTE2MTI0MDUtZTI5My00MjE5LTk4ZTUtYmU1MjhjMTc3OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsg48jhUbt7okiCnOoFuU59/dimD/QCMH7OL whXpzDav3jtnvEu0wgtxAtzlq1wCsvKRIml52xF9jKLIGOP9QF1R0Vj73IXRW0f1 jR78rBflHnv19/+d45zg0Mb8R9aJmrcjCiVsCr46mmxxt99f7kpn7V7WN0FijBW9 0q+aBwmaZtx3v+ZRZiHctPWjyMq1ATcEYAB6zKD/wGwXrsB3x0k2kyjnQBjWmJIG crXiXicjY3EhMTSqWSc2eNvPTGJIWV4oZerDIoBlzthf/kOVpLEhzEUn8WBC2YLR l+9AfFzf0+4HDRpKy1DpODFaJ2uwKQ1Up8xveN0iiiICnw8JPQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIOx4tdF24cOpP1y100CUj8jqRy9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTY2MmJlNzItOThkMC0z YjdlLWEyYTktNjhlY2U5YjBhNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW9QtAz+mcFpFAbKsrk2LLZCkQMT52SSUaUH1RM7xZyfvmF+SHwvd zk9/GfwVxyNcKyuUKidJFJG1vvMUoI/jJ5C4LX/nj+NZKcxDd8+CJFbOtwJe8fpc 8K6aZegZDUCH2HUjHw/7LA5hGe2YK6uw08Wk38p2+mcQn9A16Obe8tSnCy/19QXe ENLAnyOPMOgtCB83ALYbLf+hBnuKYnJmm0O9YClj/BT20DgqWbkIJ0l9Wpfmd5ng 3kKG8+2ZRzjyRpC+VhJL1+Uu9sOc57xTyWuDOOYwoes5oF8nyEkRi3pWcN/viJZv TGpf/mYwDd/waYAnsNJrF6lMwfPjmwG5UA== -----END CERTIFICATE-----Generated at Wed May 7 19:29:08 2025 by rpki-client