$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa File: 2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa (raw, json) Hash identifier: 3ZrHGABtcRZDXPsS9zZlXv8rEhiN/We/i07EqFMvc4k= Subject key identifier: 48:93:9F:8F:DF:53:1A:E3:84:66:73:10:21:74:9F:C4:D6:FF:37:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A45797C8392B6C1E84DB8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:45:79:7c:83:92:b6:c1:e8:4d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1b289c5e-6457-4b30-a717-9c0f0af28001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:3e:78:89:d4:90:07:a0:97:6c:b8:87:25: e9:86:3c:30:91:d0:e6:8f:d6:4d:54:15:33:67:c9: 62:6c:57:a8:58:42:c7:cb:bd:61:0a:53:21:7f:db: e0:e4:2a:de:62:ef:11:89:58:81:2c:70:c8:86:ce: a2:0f:a7:97:23:b1:ae:13:2f:e8:4f:1d:0f:9d:7e: 2d:55:5a:af:a9:ec:7c:f5:c6:4b:89:58:dc:c4:0a: 4d:e3:ad:09:5b:ae:87:4d:0e:64:23:17:fd:f0:72: 98:28:a8:a4:85:f2:fb:0a:83:5a:3d:fc:e9:c8:9d: c9:e1:10:1c:77:bd:66:38:38:84:2c:ed:e8:3e:3c: 5a:14:55:30:15:cf:12:f5:c0:a8:d7:17:ce:a1:2a: 7d:75:6e:6c:b0:d9:ad:b9:1b:b4:f0:59:78:b2:24: 2c:a0:69:5d:f9:59:e9:6a:1d:fa:b1:00:a7:33:68: c7:c2:7d:41:c0:2a:c5:67:7f:5e:68:5e:15:4d:25: 62:a0:44:cd:1c:15:ac:d2:11:54:1f:d8:3b:ac:55: f6:d0:7f:c1:9b:fa:a5:13:32:18:32:fb:96:76:2d: e8:c3:7b:f2:6f:64:b9:8f:1e:0b:2d:c2:ae:36:fb: a1:6a:d9:cc:30:c4:1a:7d:26:55:be:6b:70:31:ee: 11:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:93:9F:8F:DF:53:1A:E3:84:66:73:10:21:74:9F:C4:D6:FF:37:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:73:0a:68:b0:dc:eb:94:8f:a5:3b:b9:cd:ff:54:24:b1:e4: 63:51:14:ec:8c:28:68:55:23:37:e5:f0:f1:68:93:35:e5:ca: 13:84:06:8d:8e:63:82:33:47:b5:e6:07:9a:36:34:33:23:64: f5:4f:fc:76:f5:cf:d7:9f:e3:56:39:43:86:48:6a:1a:a9:05: ca:24:d2:60:c7:df:22:81:c9:ec:3d:e5:85:36:f6:97:04:ec: ef:69:b1:74:d5:64:1b:e1:4b:2b:ee:9f:c4:88:bd:31:09:a1: 6e:de:70:20:0a:92:d8:e0:cc:cc:13:00:13:3c:f3:5a:70:52: 28:f1:e9:4a:40:f5:55:a6:ce:6d:c3:1c:fc:3e:7f:ee:d3:b4: df:9a:c3:77:eb:68:37:73:f4:be:61:39:ff:28:07:20:3f:9e: 88:4d:84:d3:ad:9a:fb:8f:2b:6e:04:bb:bc:c8:f5:be:ec:73: c3:1c:bb:de:b5:30:08:45:e2:61:9a:39:65:93:f8:15:8c:85: d8:41:06:33:a5:b6:8e:bf:e8:44:8c:83:7e:1d:0e:54:1a:7b: 8e:6b:0c:04:1b:e2:19:00:3a:eb:77:e2:17:15:28:41:73:87: 77:22:4c:9b:cb:eb:52:cd:68:00:46:5c:dd:75:3e:84:28:af: 6e:9a:f1:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkV5fIOStsHoTbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWIyODljNWUtNjQ1Ny00YjMwLWE3MTctOWMwZjBhZjI4MDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgg+eInUkAegl2y4hyXphjwwkdDmj9ZNVBUz Z8libFeoWELHy71hClMhf9vg5CreYu8RiViBLHDIhs6iD6eXI7GuEy/oTx0PnX4t VVqvqex89cZLiVjcxApN460JW66HTQ5kIxf98HKYKKikhfL7CoNaPfzpyJ3J4RAc d71mODiELO3oPjxaFFUwFc8S9cCo1xfOoSp9dW5ssNmtuRu08Fl4siQsoGld+Vnp ah36sQCnM2jHwn1BwCrFZ39eaF4VTSVioETNHBWs0hFUH9g7rFX20H/Bm/qlEzIY MvuWdi3ow3vyb2S5jx4LLcKuNvuhatnMMMQafSZVvmtwMe4RvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEiTn4/fUxrjhGZzECF0n8TW/zd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmJmMGM0YzYtYjgwYy0z YzQwLWI4YzgtMmE0ZDBlZjljM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpzCmiw3OuUj6U7uc3/VCSx5GNRFOyMKGhVIzfl8PFokzXlyhOE Bo2OY4IzR7XmB5o2NDMjZPVP/Hb1z9ef41Y5Q4ZIahqpBcok0mDH3yKByew95YU2 9pcE7O9psXTVZBvhSyvun8SIvTEJoW7ecCAKktjgzMwTABM881pwUijx6UpA9VWm zm3DHPw+f+7TtN+aw3fraDdz9L5hOf8oByA/nohNhNOtmvuPK24Eu7zI9b7sc8Mc u961MAhF4mGaOWWT+BWMhdhBBjOlto6/6ESMg34dDlQae45rDAQb4hkAOut34hcV KEFzh3ciTJvL61LNaABGXN11PoQor26a8cM= -----END CERTIFICATE-----Generated at Wed May 7 15:32:49 2025 by rpki-client