$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cad5d43-69f5-315b-bb25-ea88239524b0.roa File: 1cad5d43-69f5-315b-bb25-ea88239524b0.roa (raw, json) Hash identifier: mPXnEQIevgrrzRYUolJgfY1FNQTTb/wKFqoO/MLeYJE= Subject key identifier: EF:D0:9D:BE:90:50:F5:6C:4B:10:BC:51:2E:4D:14:0B:44:F9:9C:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1DF18E6B6E1791FD2F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cad5d43-69f5-315b-bb25-ea88239524b0.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:1900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:f1:8e:6b:6e:17:91:fd:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a4bb6827-ea3f-4bfc-8128-c12d64167f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:53:33:11:f8:da:14:be:6f:ad:57:2d:12:eb: 56:4e:51:91:39:de:62:df:9c:b0:4a:1f:43:74:ee: 87:3f:eb:05:c3:e1:0e:96:b7:ce:94:09:75:ba:38: 7a:3c:e8:41:de:33:48:47:51:7d:d6:ab:09:0e:08: 72:77:e3:65:fe:0e:58:3d:a5:a0:6e:9d:f9:32:53: 63:e5:88:8c:d6:58:4e:f9:40:fc:a9:8b:04:c7:63: 4e:86:b1:35:52:fa:75:ef:b3:5f:2e:2b:5a:1a:18: 97:f4:d3:63:c3:75:7e:f7:b0:4e:5c:c2:70:61:b3: fd:61:e8:31:65:b9:61:21:a8:fe:0e:89:c8:b2:a3: 95:93:a0:9b:5e:0c:9a:20:27:b7:52:58:fb:92:72: 8e:c6:61:d0:ce:63:10:f4:fd:6c:1e:1f:fe:52:14: b9:02:4e:79:3d:3d:c2:d4:c0:e0:89:a2:88:b1:76: ab:71:ea:e6:4b:3e:99:6c:eb:e9:ca:17:76:7d:d4: db:5a:b3:ae:79:27:d7:1d:15:57:3e:65:48:35:6e: 45:2f:32:63:14:72:4b:8a:1a:57:3c:e7:35:1d:b1: eb:3d:68:40:af:7b:24:e3:58:0d:61:aa:e1:e5:5d: 8c:c8:09:7b:ae:7b:5f:fd:aa:15:fd:49:de:6d:f6: 29:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D0:9D:BE:90:50:F5:6C:4B:10:BC:51:2E:4D:14:0B:44:F9:9C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1cad5d43-69f5-315b-bb25-ea88239524b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:79:89:04:ce:24:0f:b9:90:15:6f:44:27:c1:e8:f6:c9:ae: 64:d8:37:06:b9:c1:58:4f:f9:ab:50:33:89:51:35:6a:3e:95: 90:b0:92:f7:7c:65:74:4d:0f:a0:07:84:36:48:81:18:4f:42: 7c:aa:dd:24:56:82:46:bf:eb:9f:38:01:89:59:aa:dd:ff:5e: 53:71:15:eb:80:cf:51:21:b7:94:ef:a1:3f:5d:73:5c:d7:77: 72:01:91:42:52:71:20:d3:d1:af:13:22:a3:c2:78:7f:14:92: 67:0e:ff:06:a1:92:36:c0:57:74:4f:67:ea:62:b6:9e:28:bb: d9:4e:43:40:d7:ae:ae:4c:b7:5b:6e:4a:65:44:00:e9:83:bc: d8:9a:e5:d0:d0:67:21:b9:6f:ce:c7:9b:aa:db:93:78:68:27: 02:e1:36:40:6f:1c:d6:bb:a3:d1:f3:be:1f:b9:92:4a:2c:ea: 80:cf:2a:b1:66:82:50:01:74:eb:3e:57:4f:95:af:8e:1b:7d: d3:41:ab:04:85:8b:f4:d0:44:0b:ff:43:fa:bf:fa:3b:bf:23: d5:f3:e8:22:d1:89:5c:a7:2c:ca:ff:f9:af:03:1a:c1:9d:57: 9c:4d:98:f2:61:43:e3:35:44:a1:5a:ca:92:8c:69:82:1e:e4: cd:00:91:76 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh3xjmtuF5H9L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTRiYjY4MjctZWEzZi00YmZjLTgxMjgtYzEyZDY0MTY3ZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01MzEfjaFL5vrVctEutWTlGROd5i35ywSh9D dO6HP+sFw+EOlrfOlAl1ujh6POhB3jNIR1F91qsJDghyd+Nl/g5YPaWgbp35MlNj 5YiM1lhO+UD8qYsEx2NOhrE1Uvp177NfLitaGhiX9NNjw3V+97BOXMJwYbP9Yegx ZblhIaj+DonIsqOVk6CbXgyaICe3Ulj7knKOxmHQzmMQ9P1sHh/+UhS5Ak55PT3C 1MDgiaKIsXarcermSz6ZbOvpyhd2fdTbWrOueSfXHRVXPmVINW5FLzJjFHJLihpX POc1HbHrPWhAr3sk41gNYarh5V2MyAl7rntf/aoV/UnebfYpSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFO/Qnb6QUPVsSxC8US5NFAtE+ZyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWNhZDVkNDMtNjlmNS0z MTViLWJiMjUtZWE4ODIzOTUyNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHHmJBM4kD7mQFW9EJ8Ho9smuZNg3BrnBWE/5q1AziVE1aj6VkLCS 93xldE0PoAeENkiBGE9CfKrdJFaCRr/rnzgBiVmq3f9eU3EV64DPUSG3lO+hP11z XNd3cgGRQlJxINPRrxMio8J4fxSSZw7/BqGSNsBXdE9n6mK2nii72U5DQNeurky3 W25KZUQA6YO82Jrl0NBnIblvzsebqtuTeGgnAuE2QG8c1ruj0fO+H7mSSizqgM8q sWaCUAF06z5XT5Wvjht900GrBIWL9NBEC/9D+r/6O78j1fPoItGJXKcsyv/5rwMa wZ1XnE2Y8mFD4zVEoVrKkoxpgh7kzQCRdg== -----END CERTIFICATE-----Generated at Sun May 11 04:10:46 2025 by rpki-client