$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa File: 2f666b21-6a8f-3cad-9fc0-f60d06304712.roa (raw, json) Hash identifier: AmNswWi9IEKfmZMHl3k1PpxsnWq3BHUXsRPHlKRu/+8= Subject key identifier: CF:3B:7E:F5:40:C9:FA:95:29:37:CD:B4:40:A1:B6:AB:54:04:3F:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A473098F5067930A83EA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:30:98:f5:06:79:30:a8:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=55f65ab9-46c9-4779-89f4-68a7e093a55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:c1:4b:61:e0:f4:83:bc:fb:30:11:7d:38: 4f:a2:2a:59:d1:11:9c:8d:61:97:e1:4e:66:c7:13: ed:ec:40:d5:bf:ba:98:a3:33:ca:61:24:d6:9f:5d: cb:2d:8b:6d:8d:92:48:a3:3d:4b:39:85:8c:76:1a: bc:ee:7a:f6:47:d7:10:55:bb:30:85:ed:39:f0:7d: df:51:ff:6d:f4:08:bc:16:cf:44:18:84:d9:35:9b: 0f:1a:70:d9:e8:65:d6:cb:c1:d3:bd:7e:2b:58:51: 18:46:24:b0:ae:f2:4f:bb:22:a6:43:7c:28:54:d8: 63:8b:a6:b4:e0:7f:5a:5f:61:7f:7d:41:a9:16:c7: c9:1b:85:2d:d6:64:a7:c8:7b:29:6d:9e:60:bb:d3: d5:ab:35:32:6f:c4:09:af:02:bf:06:f0:1c:23:03: f3:2f:24:44:c6:e1:bd:82:49:38:b7:9e:3f:fd:6a: ce:2c:1b:96:77:96:f2:d0:a8:0a:d4:a4:54:67:1e: 34:92:aa:ac:60:0a:4c:ca:8e:60:bb:5d:0b:ce:4f: 20:5f:69:c0:ca:e0:10:40:02:69:88:fd:1d:d9:13: 0a:57:33:26:0a:27:c8:6c:eb:95:b8:bb:54:ab:e5: b3:36:4b:8c:c6:43:5b:96:ee:0a:ed:94:0e:96:36: 30:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3B:7E:F5:40:C9:FA:95:29:37:CD:B4:40:A1:B6:AB:54:04:3F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f666b21-6a8f-3cad-9fc0-f60d06304712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5c:61:aa:b8:b6:25:38:2b:93:46:70:34:b2:ed:5c:0f:6e: 84:c3:3e:b6:1f:e2:a4:74:cb:8a:c0:15:93:a2:c1:d3:75:ab: 97:87:74:21:0f:60:9f:65:e5:ab:0d:de:f2:68:c0:7d:cb:1a: 30:74:36:d3:1c:c0:20:e3:56:ba:81:d9:86:01:a3:79:42:e4: f3:7a:de:ec:4d:c3:6d:a7:36:36:8e:85:f9:2d:04:8c:83:79: b0:3b:c7:70:88:3f:91:99:25:e9:98:41:14:63:79:b3:bc:b9: 90:af:50:c3:e7:f5:fc:c7:d0:6b:fa:28:3e:95:c6:9b:af:7e: 54:3b:95:f0:95:02:ac:3b:b0:93:7c:68:75:92:a6:2c:66:f1: b8:7c:7f:44:7e:57:d5:52:e5:15:52:98:bd:3e:38:d3:5d:25: 9e:f7:04:06:91:28:99:5d:32:2f:09:bd:eb:fa:a2:7a:3d:6b: c3:ee:b2:57:79:0c:ed:d4:aa:d5:7f:84:b1:65:84:ad:21:ae: c2:2e:b7:4d:0e:80:39:d2:78:a3:61:0c:6a:1c:a4:d0:73:bd: 85:bd:97:25:56:0d:36:f1:35:c5:5a:0b:0d:9a:c5:f0:37:1d: 27:4e:ff:13:b3:f4:37:7b:96:98:cd:80:e4:07:e5:4a:17:b4: 81:8e:55:be -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkcwmPUGeTCoPqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTVmNjVhYjktNDZjOS00Nzc5LTg5ZjQtNjhhN2UwOTNhNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5srBS2Hg9IO8+zARfThPoipZ0RGcjWGX4U5m xxPt7EDVv7qYozPKYSTWn13LLYttjZJIoz1LOYWMdhq87nr2R9cQVbswhe058H3f Uf9t9Ai8Fs9EGITZNZsPGnDZ6GXWy8HTvX4rWFEYRiSwrvJPuyKmQ3woVNhji6a0 4H9aX2F/fUGpFsfJG4Ut1mSnyHspbZ5gu9PVqzUyb8QJrwK/BvAcIwPzLyRExuG9 gkk4t54//WrOLBuWd5by0KgK1KRUZx40kqqsYApMyo5gu10Lzk8gX2nAyuAQQAJp iP0d2RMKVzMmCifIbOuVuLtUq+WzNkuMxkNblu4K7ZQOljYw6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM87fvVAyfqVKTfNtEChtqtUBD/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmY2NjZiMjEtNmE4Zi0z Y2FkLTlmYzAtZjYwZDA2MzA0NzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAglxhqri2JTgrk0ZwNLLtXA9uhMM+th/ipHTLisAVk6LB03Wrl4d0 IQ9gn2Xlqw3e8mjAfcsaMHQ20xzAIONWuoHZhgGjeULk83re7E3Dbac2No6F+S0E jIN5sDvHcIg/kZkl6ZhBFGN5s7y5kK9Qw+f1/MfQa/ooPpXGm69+VDuV8JUCrDuw k3xodZKmLGbxuHx/RH5X1VLlFVKYvT44010lnvcEBpEomV0yLwm96/qiej1rw+6y V3kM7dSq1X+EsWWErSGuwi63TQ6AOdJ4o2EMahyk0HO9hb2XJVYNNvE1xVoLDZrF 8DcdJ07/E7P0N3uWmM2A5AflShe0gY5Vvg== -----END CERTIFICATE-----Generated at Fri May 9 02:47:38 2025 by rpki-client