$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3684c13c-5cc4-3b08-beaa-c1abeaf1ed03.roa File: 3684c13c-5cc4-3b08-beaa-c1abeaf1ed03.roa (raw, json) Hash identifier: OTvpW+LnYvsLCfbyQf2FEPmKSmvKiKDPwv7yAvXJzJA= Subject key identifier: 17:49:A2:43:B9:95:FD:1D:83:99:B9:7B:E0:D1:32:6E:45:B9:7A:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1CFEBBBDE371748C4080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3684c13c-5cc4-3b08-beaa-c1abeaf1ed03.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1c:fe:bb:bd:e3:71:74:8c:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=dfeac1d4-0cac-4a4f-9d11-0b75cb7e27f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:1b:c9:0b:66:ff:bc:5b:17:7b:13:7c:4c: 41:a6:03:ee:54:da:27:15:b6:98:d7:ab:ad:12:86: 76:34:98:8b:85:5b:20:ae:7a:99:cc:29:0b:28:cb: af:33:79:aa:27:29:bf:29:c1:d8:03:62:2e:0c:d0: 71:92:2c:09:36:28:44:53:eb:a9:c2:70:69:0a:2e: eb:5a:2e:66:ef:c6:34:11:fb:81:59:a9:f6:38:ca: e2:b8:df:b3:bd:95:c0:17:cb:c4:72:90:52:4b:61: b1:43:58:81:a2:71:8a:5f:36:08:22:7c:bc:9b:78: 07:b9:fc:cc:6f:bb:fa:58:dc:03:fc:22:f2:e6:a4: 32:5f:0d:1a:9f:60:30:df:38:b0:61:e4:ff:ad:c4: b8:2f:df:4c:ec:ca:36:fa:51:e2:76:d2:75:24:a6: 90:3a:e0:54:7e:9f:68:d9:e7:fc:95:cb:5b:4d:92: 6d:00:5f:89:46:a2:ff:fa:64:5d:df:a1:5f:65:35: 8e:97:3e:6c:14:9b:22:54:ff:2f:42:88:4e:75:b2: 81:c3:9f:28:aa:89:b3:6a:21:05:a2:d6:b2:90:79: fa:c3:7d:1c:60:65:0e:d0:2f:db:c0:9d:e0:e0:99: c4:d8:72:29:ed:c4:84:d6:d1:b6:e8:fa:b9:bd:a8: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:49:A2:43:B9:95:FD:1D:83:99:B9:7B:E0:D1:32:6E:45:B9:7A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3684c13c-5cc4-3b08-beaa-c1abeaf1ed03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f0:2a:fb:dc:5a:01:fa:35:46:ac:0a:d5:e3:1c:8f:7d:40: d1:61:2c:be:2c:2f:9e:a6:80:e2:2d:a3:30:79:53:3c:3b:68: bd:b3:c7:de:93:6e:5a:67:52:ff:dd:b1:43:75:e2:4e:06:37: 2d:5d:ef:58:59:12:b9:39:3e:33:8d:35:9e:c0:af:c9:bc:cf: 7c:d9:97:e6:8e:f3:ce:a6:3b:79:0a:74:25:34:2a:0d:7e:a3: 6c:31:b8:94:e0:9b:aa:6e:bc:b0:ea:42:00:3b:64:b3:5e:f7: c2:11:77:9b:10:3c:03:68:fe:ef:d6:d6:f1:ef:6a:df:b1:d9: 65:52:7a:f2:55:96:f2:96:05:c5:dc:3a:c4:8c:85:91:91:94: 14:8b:4b:75:f4:3d:62:30:74:b6:eb:e8:7e:5f:29:a5:e2:57: 66:3a:82:04:6c:87:97:ea:df:97:d2:58:ac:f6:7d:56:da:cc: ed:6c:e3:63:2b:31:a9:0d:60:cb:cb:77:24:c8:7f:d2:ee:59: 60:10:06:99:92:dc:d3:c1:e1:4b:4b:05:27:51:5e:fb:d4:39: c1:af:6d:ab:e8:e0:0f:24:78:ae:1a:43:e2:da:e3:87:f2:ee: cc:bf:cd:d5:41:5b:bd:56:d9:ce:7d:54:75:77:aa:eb:51:23: 8e:da:22:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxShz+u73jcXSMQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGZlYWMxZDQtMGNhYy00YTRmLTlkMTEtMGI3NWNiN2UyN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV8byQtm/7xbF3sTfExBpgPuVNonFbaY16ut EoZ2NJiLhVsgrnqZzCkLKMuvM3mqJym/KcHYA2IuDNBxkiwJNihEU+upwnBpCi7r Wi5m78Y0EfuBWan2OMriuN+zvZXAF8vEcpBSS2GxQ1iBonGKXzYIIny8m3gHufzM b7v6WNwD/CLy5qQyXw0an2Aw3ziwYeT/rcS4L99M7Mo2+lHidtJ1JKaQOuBUfp9o 2ef8lctbTZJtAF+JRqL/+mRd36FfZTWOlz5sFJsiVP8vQohOdbKBw58oqomzaiEF otaykHn6w30cYGUO0C/bwJ3g4JnE2HIp7cSE1tG26Pq5vah8eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBdJokO5lf0dg5m5e+DRMm5FuXqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzY4NGMxM2MtNWNjNC0z YjA4LWJlYWEtYzFhYmVhZjFlZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAnwKvvcWgH6NUasCtXjHI99QNFhLL4sL56mgOItozB5Uzw7aL2z x96TblpnUv/dsUN14k4GNy1d71hZErk5PjONNZ7Ar8m8z3zZl+aO886mO3kKdCU0 Kg1+o2wxuJTgm6puvLDqQgA7ZLNe98IRd5sQPANo/u/W1vHvat+x2WVSevJVlvKW BcXcOsSMhZGRlBSLS3X0PWIwdLbr6H5fKaXiV2Y6ggRsh5fq35fSWKz2fVbazO1s 42MrMakNYMvLdyTIf9LuWWAQBpmS3NPB4UtLBSdRXvvUOcGvbavo4A8keK4aQ+La 44fy7sy/zdVBW71W2c59VHV3qutRI47aIgE= -----END CERTIFICATE-----Generated at Wed May 7 03:57:00 2025 by rpki-client