$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26855c6b-a192-3c0c-ad66-9649dc21ff43.roa File: 26855c6b-a192-3c0c-ad66-9649dc21ff43.roa (raw, json) Hash identifier: mSGopfKl7oz8RURTvnWYJcMiqfbs+MFX1IzCEJ6zhGU= Subject key identifier: B9:D2:C1:EB:74:80:F7:92:B2:0D:88:A3:39:5E:0D:A2:74:28:B5:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1CC3A37D31BD3AAAE680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26855c6b-a192-3c0c-ad66-9649dc21ff43.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1c:c3:a3:7d:31:bd:3a:aa:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c6f4ab54-e3ea-4846-b690-1f38dfe896d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a2:3a:a1:cc:1c:15:5a:df:3e:9a:f5:c0:12: b5:0a:6c:29:1b:d9:f8:5a:b4:b4:64:ad:01:1d:01: 91:57:d6:68:47:94:45:46:be:29:cf:3f:40:a6:8e: dd:ce:b5:7b:6f:97:85:33:6e:fd:d1:31:51:51:96: 02:40:7f:a2:10:d2:64:33:98:0d:0d:76:71:60:6d: ea:9f:51:f2:73:e5:47:98:2b:32:0f:ae:f0:73:66: c2:5f:ef:a1:3d:a1:0e:26:50:f1:b1:bc:a0:7d:96: 2b:f6:ec:9d:ff:ca:76:76:80:24:f4:5e:f6:c8:58: 27:30:ae:8a:79:ca:0e:f4:36:05:2b:09:40:fe:44: c1:85:16:b3:a1:d9:72:90:31:3d:0c:34:35:52:40: 55:25:d5:92:19:34:17:f2:2b:3c:17:f1:ef:54:bc: 88:63:2a:e5:cb:72:ac:ed:90:04:63:bc:d6:d6:9b: 58:cd:17:f6:ca:63:7d:da:58:4d:0e:5e:36:9f:d2: 6c:a1:ce:81:8e:f5:8c:ee:d1:0c:02:ee:44:e7:ec: 07:cd:e9:22:db:89:e4:7a:3f:a0:21:f6:26:6e:de: 4c:3a:a0:7b:cd:01:7d:60:44:8b:0b:9c:2a:80:dc: b7:ca:f7:30:df:95:1e:f5:8c:ec:35:07:a8:6f:9e: 99:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D2:C1:EB:74:80:F7:92:B2:0D:88:A3:39:5E:0D:A2:74:28:B5:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26855c6b-a192-3c0c-ad66-9649dc21ff43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:14:f3:15:7a:f1:35:13:a0:64:b4:41:ad:d1:e7:0e:ea:db: 2a:54:6d:b0:86:54:63:83:45:88:fb:cf:1e:1c:4a:a3:84:b0: 23:72:be:12:c7:d9:ac:2b:96:d9:2a:c7:f3:8c:08:3c:6b:76: 4a:03:c9:f7:e2:6b:20:11:2f:ab:30:7e:b1:8f:d8:d5:d0:48: a8:11:4b:b8:8c:30:4c:f2:b8:01:2d:f0:ea:e3:46:e7:8b:db: cb:c3:e8:f0:78:44:e6:0e:be:03:2c:77:cd:6c:48:f8:4f:d2: 20:6c:8e:63:77:ff:4a:e6:ca:1c:a3:6c:b2:b3:e6:32:a4:12: 09:6d:33:c5:2d:9a:6b:a8:0c:2e:1d:b9:5a:43:57:51:5b:5d: 39:2c:7b:4d:d0:5d:ca:7f:b1:e0:f7:f1:22:39:82:4c:ad:6d: f4:d4:9d:4e:11:0e:5c:a8:7a:b0:da:26:fa:4b:11:8e:d5:88: 87:03:a9:9c:b1:2d:d7:8c:85:78:c9:70:c6:80:0c:e5:ac:30: 11:34:3c:5f:d5:32:8d:af:d8:48:06:76:34:a0:ef:d4:fe:51: 32:d5:b3:d0:b8:fb:b0:13:42:c0:c3:80:82:64:60:c8:ad:5f: 6a:c4:ac:13:d1:92:6f:ab:6c:16:68:ce:01:61:92:f6:08:3a: fd:8b:7d:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxShzDo30xvTqq5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzZmNGFiNTQtZTNlYS00ODQ2LWI2OTAtMWYzOGRmZTg5NmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqI6ocwcFVrfPpr1wBK1CmwpG9n4WrS0ZK0B HQGRV9ZoR5RFRr4pzz9Apo7dzrV7b5eFM2790TFRUZYCQH+iENJkM5gNDXZxYG3q n1Hyc+VHmCsyD67wc2bCX++hPaEOJlDxsbygfZYr9uyd/8p2doAk9F72yFgnMK6K ecoO9DYFKwlA/kTBhRazodlykDE9DDQ1UkBVJdWSGTQX8is8F/HvVLyIYyrly3Ks 7ZAEY7zW1ptYzRf2ymN92lhNDl42n9Jsoc6BjvWM7tEMAu5E5+wHzeki24nkej+g IfYmbt5MOqB7zQF9YESLC5wqgNy3yvcw35Ue9YzsNQeob56ZlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLnSwet0gPeSsg2IozleDaJ0KLVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjY4NTVjNmItYTE5Mi0z YzBjLWFkNjYtOTY0OWRjMjFmZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI8U8xV68TUToGS0Qa3R5w7q2ypUbbCGVGODRYj7zx4cSqOEsCNy vhLH2awrltkqx/OMCDxrdkoDyffiayARL6swfrGP2NXQSKgRS7iMMEzyuAEt8Orj RueL28vD6PB4ROYOvgMsd81sSPhP0iBsjmN3/0rmyhyjbLKz5jKkEgltM8Utmmuo DC4duVpDV1FbXTkse03QXcp/seD38SI5gkytbfTUnU4RDlyoerDaJvpLEY7ViIcD qZyxLdeMhXjJcMaADOWsMBE0PF/VMo2v2EgGdjSg79T+UTLVs9C4+7ATQsDDgIJk YMitX2rErBPRkm+rbBZozgFhkvYIOv2LfSU= -----END CERTIFICATE-----Generated at Sat May 10 07:32:05 2025 by rpki-client