$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1b58300d-4af3-3c6f-a264-d6c66a398ac6.roa File: 1b58300d-4af3-3c6f-a264-d6c66a398ac6.roa (raw, json) Hash identifier: /OgBLCWJxcT64pauDdFmVetw4EJmWUD3b3krIledMDY= Subject key identifier: E9:38:0E:D5:BC:55:B9:36:93:7B:65:28:E0:76:49:4D:05:07:B1:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A47017825F783A347FA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1b58300d-4af3-3c6f-a264-d6c66a398ac6.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:01:78:25:f7:83:a3:47:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1a9f4a28-4617-41e8-9052-495d886fb7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:78:8f:ce:3e:76:66:bf:1a:60:36:6f:f0:ff: 2b:06:1e:4e:5b:30:f6:bc:a4:54:08:98:4e:5a:f0: 59:ae:82:3a:88:87:e0:59:6e:39:7d:d1:99:a6:c8: 8e:99:56:cf:c9:b4:7b:a3:6e:89:8c:ad:70:ab:c4: 19:5d:a1:e2:e9:49:51:52:85:42:fe:a7:1c:aa:92: 2c:61:b8:85:59:34:37:96:9a:dc:30:4e:fa:5b:db: d5:51:24:d6:28:26:47:38:eb:83:9e:f0:cc:46:a6: b2:e9:22:68:b5:ad:02:04:e7:b6:b3:27:fa:d9:37: 3c:64:18:ea:43:4d:65:c3:9d:96:51:18:34:25:d8: 16:df:2c:8c:e1:82:27:8d:9e:51:f9:37:41:0c:8b: 3b:79:38:45:5b:9b:5c:76:84:eb:c8:66:12:fe:85: b2:08:1a:c5:92:19:70:15:d7:4e:9c:99:70:dc:72: 93:2c:af:28:bb:96:17:d7:f8:00:1a:74:49:be:13: 6b:29:d1:dd:d2:a7:f1:a9:3c:99:ef:3b:d1:8f:fc: 5b:55:04:5f:18:4b:f8:d2:b3:60:33:df:fd:66:05: 34:e4:7b:91:94:7d:bd:64:7d:8c:a4:ca:e8:bd:3a: 8a:05:f8:8c:95:4a:d1:2b:88:7e:0d:cb:64:7e:9f: 35:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:38:0E:D5:BC:55:B9:36:93:7B:65:28:E0:76:49:4D:05:07:B1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1b58300d-4af3-3c6f-a264-d6c66a398ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:41:68:3b:89:dc:0b:82:73:5d:8f:ba:09:bc:11:03:53:4b: c0:aa:9d:d3:75:92:ec:0e:21:5a:06:1d:d5:f6:6f:f5:50:f8: be:1f:2c:3a:c6:f0:79:27:c4:bf:ac:f9:56:21:a8:2a:4d:6c: 5e:8f:09:16:2f:cb:9d:f1:81:8d:3b:b0:03:0c:91:4d:23:0a: b2:32:7f:fa:f2:1a:13:2b:3f:a3:32:06:36:9e:c2:6e:71:a2: 04:68:0e:9b:bc:38:be:6a:fc:da:3f:95:e5:c1:07:75:0e:28: f4:99:c7:31:0c:0e:48:b1:40:9d:3c:e4:8e:91:62:a3:62:a4: 83:cd:fb:4d:0d:88:22:17:54:d4:fd:7e:32:a0:06:99:70:60: 4b:9b:0a:6e:a5:ee:1c:78:19:11:60:47:75:f6:a0:8d:9f:cf: b5:1b:e7:a1:f8:7e:46:d5:ba:b8:d6:09:30:1c:73:d3:6d:c2: 57:f8:09:af:48:40:0e:aa:6a:aa:14:36:8a:b4:87:0a:67:4b: 0b:6a:50:8e:32:00:0f:13:fd:f6:0d:f9:e2:c1:16:27:d0:56: 28:a9:3f:f0:f2:27:25:fb:8b:01:e9:da:c4:1a:cc:02:f4:3f: 4d:6c:5e:e3:b7:68:5b:c6:ce:c6:bc:02:82:d4:e7:b4:fa:c9: af:5a:71:69 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkcBeCX3g6NH+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWE5ZjRhMjgtNDYxNy00MWU4LTkwNTItNDk1ZDg4NmZiN2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3iPzj52Zr8aYDZv8P8rBh5OWzD2vKRUCJhO WvBZroI6iIfgWW45fdGZpsiOmVbPybR7o26JjK1wq8QZXaHi6UlRUoVC/qccqpIs YbiFWTQ3lprcME76W9vVUSTWKCZHOOuDnvDMRqay6SJota0CBOe2syf62Tc8ZBjq Q01lw52WURg0JdgW3yyM4YInjZ5R+TdBDIs7eThFW5tcdoTryGYS/oWyCBrFkhlw FddOnJlw3HKTLK8ou5YX1/gAGnRJvhNrKdHd0qfxqTyZ7zvRj/xbVQRfGEv40rNg M9/9ZgU05HuRlH29ZH2MpMrovTqKBfiMlUrRK4h+Dctkfp81NQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOk4DtW8Vbk2k3tlKOB2SU0FB7HrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWI1ODMwMGQtNGFmMy0z YzZmLWEyNjQtZDZjNjZhMzk4YWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAEFoO4ncC4JzXY+6CbwRA1NLwKqd03WS7A4hWgYd1fZv9VD4vh8s OsbweSfEv6z5ViGoKk1sXo8JFi/LnfGBjTuwAwyRTSMKsjJ/+vIaEys/ozIGNp7C bnGiBGgOm7w4vmr82j+V5cEHdQ4o9JnHMQwOSLFAnTzkjpFio2Kkg837TQ2IIhdU 1P1+MqAGmXBgS5sKbqXuHHgZEWBHdfagjZ/PtRvnofh+RtW6uNYJMBxz023CV/gJ r0hADqpqqhQ2irSHCmdLC2pQjjIADxP99g354sEWJ9BWKKk/8PInJfuLAenaxBrM AvQ/TWxe47doW8bOxrwCgtTntPrJr1pxaQ== -----END CERTIFICATE-----Generated at Wed May 7 21:42:21 2025 by rpki-client