$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa File: 3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa (raw, json) Hash identifier: yEcwVcAeNTCIb7HqcVrmN9Vxhf4TEmXhgQVRTrICqWg= Subject key identifier: 61:0E:98:A1:D1:3F:F9:02:76:D1:B8:37:B1:65:D9:22:E5:64:CB:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A466A2EFD1858412EA180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:6a:2e:fd:18:58:41:2e:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c992ab03-3af2-4439-8efc-534d5dd5873f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:95:0b:fd:bf:dd:e0:04:aa:1f:07:57:9c: 25:b8:e1:58:1d:57:a7:41:78:f2:20:25:46:bc:bb: ec:0b:8c:83:98:1f:59:28:8c:fd:f9:ce:37:f9:94: 02:d9:49:dd:1f:bf:be:a1:94:b4:d8:19:00:3a:bb: bf:be:67:15:6c:e9:82:39:45:25:e2:3c:99:56:62: 60:a1:c9:fb:44:e3:e5:ba:77:df:ce:29:f4:cc:67: 95:65:fc:8b:57:79:ec:e0:86:b8:73:f3:8d:00:db: f4:2f:56:25:fa:74:c8:e2:16:de:05:f4:f6:3d:99: c3:ac:09:f4:14:c3:a2:d4:f7:b9:3d:10:0b:a5:84: b4:14:b0:dd:56:d0:77:3f:e1:3f:bb:66:a4:43:0c: 8d:dd:b4:a5:ce:e9:7b:81:bc:31:e5:c8:2a:8e:97: 57:a1:5a:b0:79:10:3e:8d:11:48:fa:78:00:0d:ea: 03:74:97:a9:af:85:95:13:ae:ae:39:c4:4c:6b:c7: 2d:6f:c6:c5:ef:73:a1:b7:ba:d6:90:07:50:90:70: fa:25:b7:a2:59:4c:26:5d:c1:7e:2f:42:34:da:c3: 31:ea:22:59:97:5a:d1:72:a1:3c:08:65:83:bf:01: b5:0d:6f:a7:97:57:2c:08:01:8c:32:8a:70:d1:d3: 13:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0E:98:A1:D1:3F:F9:02:76:D1:B8:37:B1:65:D9:22:E5:64:CB:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:31:94:1e:b3:89:3c:8e:41:49:7c:66:03:26:ff:ac:43:a9: 25:f1:0f:13:22:51:95:c2:34:93:2f:94:05:ec:50:50:01:c7: 3a:04:42:f9:98:ee:98:ad:c7:5e:e6:08:9f:66:dc:cd:74:19: a1:2f:12:b8:73:35:3c:05:97:21:8c:a9:e5:dd:f6:af:d2:9d: a5:ea:5e:89:d4:49:66:c6:4e:3c:c7:54:35:89:0e:3c:65:2a: 44:61:2d:a2:3d:32:d0:7f:9c:9c:55:cc:8f:6e:9e:59:4c:3f: 08:35:2c:5b:a8:ef:6c:e1:33:af:1a:f2:ff:2a:cb:4c:a0:f5: 4c:3a:b2:1a:6d:bb:c8:d2:39:be:e6:99:3f:9a:5c:9f:e4:ea: 29:eb:2f:52:68:5d:50:23:e6:20:1e:57:2a:e4:f8:0e:85:07: a7:0e:36:73:fd:7a:9d:2b:7d:aa:52:21:9f:05:a8:a0:9e:b5: 80:33:aa:5a:3b:4e:81:c4:e8:ec:45:2e:08:27:22:44:76:da: af:56:0f:c7:c4:1b:d9:dd:06:9b:c4:4f:57:22:e9:3a:31:f6: ee:62:7b:96:7a:e7:92:80:60:e5:3d:eb:dc:75:aa:63:dc:46: 88:3d:ac:6e:e9:6e:d2:2e:67:c4:af:e8:e0:5d:7b:6c:1c:77: 3f:3a:dc:66 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkZqLv0YWEEuoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Yzk5MmFiMDMtM2FmMi00NDM5LThlZmMtNTM0ZDVkZDU4NzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq32VC/2/3eAEqh8HV5wluOFYHVenQXjyICVG vLvsC4yDmB9ZKIz9+c43+ZQC2UndH7++oZS02BkAOru/vmcVbOmCOUUl4jyZVmJg ocn7ROPlunffzin0zGeVZfyLV3ns4Ia4c/ONANv0L1Yl+nTI4hbeBfT2PZnDrAn0 FMOi1Pe5PRALpYS0FLDdVtB3P+E/u2akQwyN3bSlzul7gbwx5cgqjpdXoVqweRA+ jRFI+ngADeoDdJepr4WVE66uOcRMa8ctb8bF73Oht7rWkAdQkHD6JbeiWUwmXcF+ L0I02sMx6iJZl1rRcqE8CGWDvwG1DW+nl1csCAGMMopw0dMTbwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGEOmKHRP/kCdtG4N7Fl2SLlZMuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2NmYjg4NTMtMjQyNi0z YjcyLWJkNGUtM2QxYmMxN2Q5ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcjGUHrOJPI5BSXxmAyb/rEOpJfEPEyJRlcI0ky+UBexQUAHHOgRC +ZjumK3HXuYIn2bczXQZoS8SuHM1PAWXIYyp5d32r9KdpepeidRJZsZOPMdUNYkO PGUqRGEtoj0y0H+cnFXMj26eWUw/CDUsW6jvbOEzrxry/yrLTKD1TDqyGm27yNI5 vuaZP5pcn+TqKesvUmhdUCPmIB5XKuT4DoUHpw42c/16nSt9qlIhnwWooJ61gDOq WjtOgcTo7EUuCCciRHbar1YPx8Qb2d0Gm8RPVyLpOjH27mJ7lnrnkoBg5T3r3HWq Y9xGiD2sbulu0i5nxK/o4F17bBx3PzrcZg== -----END CERTIFICATE-----Generated at Fri May 9 21:40:52 2025 by rpki-client