$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa File: 47a38678-065d-3329-a105-fa94cfdcfee1.roa (raw, json) Hash identifier: E3Uq7ydvzqjTZ24uigvlXmUG7QAOxl0iUNHZSm3qVLM= Subject key identifier: F9:92:23:C2:2A:11:2E:74:E2:03:73:67:DB:5E:E4:FA:C3:7B:F6:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4527AB680870EB4A3800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2600:5000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:45:27:ab:68:08:70:eb:4a:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b0cff49b-4a7b-48eb-a3a6-fd5bd13e6d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:52:78:00:f5:39:51:e5:91:c1:6b:86:2f: e3:67:fa:bf:e3:45:f9:46:14:75:68:b4:c6:3f:e9: ba:14:56:d9:65:4c:77:17:d2:3d:e4:71:8b:21:22: 8a:f5:39:9c:f2:56:96:4c:df:86:fd:06:ba:a9:21: 20:79:35:38:a8:78:0b:e0:9c:d6:06:45:34:6a:5b: 67:1c:1a:04:b7:8a:97:b2:5f:b0:be:f2:94:8e:29: 0f:26:26:9a:32:b8:07:50:1e:58:c7:87:16:f5:47: b9:c6:e3:66:7e:3a:f2:c1:b0:53:1d:a5:34:86:d2: 79:40:4a:aa:84:58:ed:ac:ba:dd:62:dc:38:d1:00: 0e:12:4d:77:10:51:48:6c:a7:27:e2:1e:8f:78:8f: 01:39:8a:4a:a1:0c:11:08:d3:64:50:f0:26:f9:5d: 20:d0:20:22:e1:6b:8b:03:94:b6:ae:34:d5:ed:86: 17:a6:65:9b:e2:28:2e:fd:86:f2:0a:35:09:49:ed: f0:7c:51:d1:69:11:79:a6:14:75:ee:fb:ee:36:98: ff:fc:0f:a6:1a:bf:92:26:f2:2f:b1:b7:77:59:80: bd:dc:54:65:d6:07:cf:d1:7c:ac:d1:11:c4:ea:8f: 41:23:f0:be:73:df:a5:f5:85:99:9e:e0:b8:c2:39: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:92:23:C2:2A:11:2E:74:E2:03:73:67:DB:5E:E4:FA:C3:7B:F6:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47a38678-065d-3329-a105-fa94cfdcfee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2600:5000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:76:06:09:f5:7b:ce:52:10:b2:23:9d:99:06:b2:17:0d:60: 14:9a:0d:27:a2:f9:b6:28:46:7e:af:ee:a7:d4:f9:27:d1:07: f4:f7:26:60:25:99:c6:1c:b0:f4:fd:2b:cc:18:ca:f2:b7:f4: 8e:b3:3c:87:0f:62:1a:0c:a0:4a:c1:30:bf:36:f6:4a:c7:69: 0f:b4:6a:84:28:ca:90:72:6e:37:e5:82:b0:4a:e4:19:cb:6c: cc:31:34:24:c4:e3:4f:b5:49:41:8f:93:b6:d7:46:48:7e:3a: ea:6b:e3:0d:51:0a:af:9c:23:cd:97:f1:5e:6c:8a:5a:65:52: ec:2f:eb:61:9c:c4:a2:f1:4b:79:cb:5a:bb:8c:d6:88:cc:8b: 52:d0:1f:8e:0b:27:77:0c:ff:a1:34:43:9d:0c:b8:ee:5d:ab: a7:e9:89:f0:12:3f:52:e1:ab:14:56:1c:28:c1:90:4c:e0:cd: 02:07:31:7e:80:9c:5f:81:9f:af:19:22:86:65:51:b3:75:0f: 38:5a:20:af:c4:8e:b4:54:e8:3c:2f:f6:b5:13:b1:b2:c0:9f: 7c:f0:00:b1:8b:de:b9:01:3a:26:5a:12:22:67:18:bd:aa:d9: 4f:38:d2:65:f8:c0:3e:49:91:90:bb:74:06:c8:df:1e:7a:4d: c2:b6:52:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSkUnq2gIcOtKOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjBjZmY0OWItNGE3Yi00OGViLWEzYTYtZmQ1YmQxM2U2ZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrVSeAD1OVHlkcFrhi/jZ/q/40X5RhR1aLTG P+m6FFbZZUx3F9I95HGLISKK9Tmc8laWTN+G/Qa6qSEgeTU4qHgL4JzWBkU0altn HBoEt4qXsl+wvvKUjikPJiaaMrgHUB5Yx4cW9Ue5xuNmfjrywbBTHaU0htJ5QEqq hFjtrLrdYtw40QAOEk13EFFIbKcn4h6PeI8BOYpKoQwRCNNkUPAm+V0g0CAi4WuL A5S2rjTV7YYXpmWb4igu/YbyCjUJSe3wfFHRaRF5phR17vvuNpj//A+mGr+SJvIv sbd3WYC93FRl1gfP0Xys0RHE6o9BI/C+c9+l9YWZnuC4wjl+jwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPmSI8IqES504gNzZ9te5PrDe/bBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDdhMzg2NzgtMDY1ZC0z MzI5LWExMDUtZmE5NGNmZGNmZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgBQADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEdgYJ9XvOUhCyI52ZBrIXDWAUmg0novm2KEZ+r+6n1Pkn0Qf09yZg JZnGHLD0/SvMGMryt/SOszyHD2IaDKBKwTC/NvZKx2kPtGqEKMqQcm435YKwSuQZ y2zMMTQkxONPtUlBj5O210ZIfjrqa+MNUQqvnCPNl/FebIpaZVLsL+thnMSi8Ut5 y1q7jNaIzItS0B+OCyd3DP+hNEOdDLjuXaun6YnwEj9S4asUVhwowZBM4M0CBzF+ gJxfgZ+vGSKGZVGzdQ84WiCvxI60VOg8L/a1E7GywJ988ACxi965ATomWhIiZxi9 qtlPONJl+MA+SZGQu3QGyN8eek3CtlKn -----END CERTIFICATE-----Generated at Sun May 11 04:35:56 2025 by rpki-client