$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa File: 3984502e-c09e-303c-bae0-fddf3483cb3a.roa (raw, json) Hash identifier: XAZgp2xc8nkcearpz6rjn+f1tAlWD0rkMrH0U7k7lEA= Subject key identifier: DE:AD:DE:88:94:3C:9E:57:01:2A:C7:4A:17:01:26:E3:FC:EC:68:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A178FAF17FFF051CA5500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2001:4908::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:17:8f:af:17:ff:f0:51:ca:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=827f63ee-d802-432e-9c58-9fbdd77e5cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:53:ae:d3:ab:a8:8d:5a:d6:9f:3a:70:45: 41:75:3c:a0:47:5b:e4:ea:1f:25:ff:33:cd:bc:6b: 69:2a:6c:d1:ca:e6:a9:25:2b:99:1d:98:97:63:b0: 2f:17:88:93:a3:4d:53:37:68:05:1a:ea:92:4c:a8: 89:9d:34:7b:d8:65:8d:e0:a9:04:04:1f:44:e5:ce: 28:32:db:85:3c:81:c2:bb:d5:6c:43:44:5f:e2:c0: 6c:08:99:43:b9:a9:78:16:e4:84:db:1d:0c:42:1b: c1:f1:45:6d:8b:0c:f8:54:e4:12:d5:0e:fc:41:90: 02:29:b0:06:e5:86:37:80:a0:2a:90:00:04:4e:57: 87:e5:1b:c7:bd:bd:d0:2e:f3:01:b7:38:8e:86:10: 23:c0:33:47:38:9b:11:2d:a8:6b:f9:a8:94:19:70: ba:33:08:a0:be:c3:a5:c5:71:52:d6:02:de:51:11: 59:0e:16:72:da:8f:93:d9:25:e7:78:33:6f:ed:c7: 1c:bf:c8:47:25:8e:67:a9:82:db:38:f6:4e:b1:6b: 61:c7:16:ea:4a:00:b9:78:82:7e:e3:e0:8e:3f:f1: 45:e2:19:fd:21:f5:b5:00:b1:22:d5:18:bb:ee:19: 07:49:9e:90:4d:07:78:e3:92:97:6c:87:8d:f2:45: d9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AD:DE:88:94:3C:9E:57:01:2A:C7:4A:17:01:26:E3:FC:EC:68:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3984502e-c09e-303c-bae0-fddf3483cb3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4908::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:2f:ed:03:f5:52:83:d4:72:fe:0a:bc:2d:cf:9f:76:df:63: 27:07:cf:83:12:19:52:c6:e6:db:a2:7e:2b:cf:61:b3:cd:05: ac:f7:9b:b9:e4:a4:5c:b5:29:1d:41:0e:b6:ca:a2:da:b3:70: 34:3b:fa:e5:e3:95:95:a0:24:5b:34:09:27:ce:e0:e8:e2:0d: e8:c5:e8:1a:ec:fd:31:15:ac:ad:ab:f6:a0:e0:58:81:6c:c9: ca:b1:fa:d1:21:c7:06:f4:31:8e:ed:20:6a:e7:e3:8a:e5:cf: aa:c7:39:81:97:24:bd:c5:1d:50:fb:43:a0:dc:49:54:d9:1c: 58:36:35:99:13:89:c9:94:5d:12:0f:ed:9e:e3:05:4e:0b:83: cb:47:e8:ab:1d:b9:93:44:6c:71:fa:93:c3:19:6b:f9:2c:70: 80:b7:06:65:06:17:54:54:e6:c9:08:35:14:66:ce:1f:94:2a: 2a:32:ba:9f:4a:91:2b:e4:f8:04:02:65:5a:9e:f6:ad:2a:7a: 7a:c7:cb:3e:67:40:1c:4d:de:0c:7f:e0:33:19:ec:0b:d6:02: 7f:ff:29:54:df:ef:43:d7:14:25:9d:fc:7d:f2:6d:44:35:b7: 9b:43:a5:d0:1e:00:ea:a3:f4:72:c4:66:bd:76:98:0d:d8:ad: 2d:ee:d5:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxShePrxf/8FHKVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODI3ZjYzZWUtZDgwMi00MzJlLTljNTgtOWZiZGQ3N2U1Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+dTrtOrqI1a1p86cEVBdTygR1vk6h8l/zPN vGtpKmzRyuapJSuZHZiXY7AvF4iTo01TN2gFGuqSTKiJnTR72GWN4KkEBB9E5c4o MtuFPIHCu9VsQ0Rf4sBsCJlDual4FuSE2x0MQhvB8UVtiwz4VOQS1Q78QZACKbAG 5YY3gKAqkAAETleH5RvHvb3QLvMBtziOhhAjwDNHOJsRLahr+aiUGXC6MwigvsOl xXFS1gLeURFZDhZy2o+T2SXneDNv7cccv8hHJY5nqYLbOPZOsWthxxbqSgC5eIJ+ 4+COP/FF4hn9IfW1ALEi1Ri77hkHSZ6QTQd445KXbIeN8kXZnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN6t3oiUPJ5XASrHShcBJuP87GgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzk4NDUwMmUtYzA5ZS0z MDNjLWJhZTAtZmRkZjM0ODNjYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrL+0D9VKD1HL+Crwtz59232MnB8+DEhlSxubbon4rz2GzzQWs95u5 5KRctSkdQQ62yqLas3A0O/rl45WVoCRbNAknzuDo4g3oxega7P0xFaytq/ag4FiB bMnKsfrRIccG9DGO7SBq5+OK5c+qxzmBlyS9xR1Q+0Og3ElU2RxYNjWZE4nJlF0S D+2e4wVOC4PLR+irHbmTRGxx+pPDGWv5LHCAtwZlBhdUVObJCDUUZs4flCoqMrqf SpEr5PgEAmVanvatKnp6x8s+Z0AcTd4Mf+AzGewL1gJ//ylU3+9D1xQlnfx98m1E NbebQ6XQHgDqo/RyxGa9dpgN2K0t7tVz -----END CERTIFICATE-----Generated at Wed May 7 14:28:58 2025 by rpki-client