$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5589d041-bab0-368b-bc49-a67b761842dc.roa File: 5589d041-bab0-368b-bc49-a67b761842dc.roa (raw, json) Hash identifier: onogPisrxcmEe1OP+eOwdAcUSNsXBIaLX/24oi9SopY= Subject key identifier: 8A:13:01:31:5F:BB:AA:9E:AA:82:29:60:57:B8:62:BE:11:16:6E:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A47C6C81B61B969634500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5589d041-bab0-368b-bc49-a67b761842dc.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:3800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:c6:c8:1b:61:b9:69:63:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ffd4484e-0d85-4a9c-831e-5c6382d5562f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:17:8f:5e:43:4f:02:0e:98:8a:59:e7:f5: 17:68:57:6d:aa:92:f5:96:0f:48:54:5b:f4:c8:66: 58:db:b3:01:a5:19:3a:f3:63:39:59:a2:c8:14:41: 3c:87:d7:7a:87:3c:2a:fc:dd:62:1b:d5:37:99:0c: 1d:4e:79:3f:46:2b:ef:0b:ae:5d:b7:65:34:e1:b0: b9:0f:2d:48:56:ed:dc:0f:de:89:83:c9:d2:ab:bd: d0:ac:bd:27:15:75:99:0e:cc:bf:a8:a2:e1:9f:60: 94:b9:4a:a0:16:40:00:a3:f0:8d:65:5c:b0:93:ee: db:6f:30:7b:c1:23:ed:3b:11:c8:ef:b8:de:8a:60: 13:41:59:41:4a:7c:dc:c4:1c:55:7e:8a:dd:30:a9: 94:d7:5f:57:b7:ad:83:39:77:a6:3c:1d:2f:b6:b6: 3f:64:bd:be:82:82:0d:24:8e:11:d2:2f:ce:f9:4f: 0e:a2:59:6d:60:7d:34:ef:d5:16:0f:83:c3:68:75: a1:8e:f4:ad:1b:92:1b:79:62:1b:09:05:63:51:e3: 00:f9:f1:85:c5:ae:be:6a:4f:80:40:76:e0:78:fd: 68:d4:7c:68:9e:47:e4:9c:d3:9b:f0:02:df:ef:58: 98:96:73:cc:02:e5:5c:3d:1d:6a:25:6f:eb:e9:c7: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:13:01:31:5F:BB:AA:9E:AA:82:29:60:57:B8:62:BE:11:16:6E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5589d041-bab0-368b-bc49-a67b761842dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b7:61:14:28:58:0a:14:43:e3:23:9d:e0:05:f8:43:2d:e0: 15:7e:6d:25:b0:b6:a0:28:83:71:06:84:08:b9:6e:63:9a:f2: 31:b5:23:56:34:f7:4f:43:32:ae:91:6e:08:8d:93:11:95:10: 73:2b:6b:14:c3:90:9f:0b:eb:23:f8:10:c7:81:eb:b5:60:a7: 87:4b:a1:df:38:30:bd:2f:f0:a5:8f:35:2c:18:ab:1d:42:34: 78:3e:f7:9e:cd:48:b6:a4:d6:b7:83:13:39:98:fc:f4:35:02: 4b:48:da:39:c2:26:95:c7:ac:1b:41:60:99:01:55:a9:e2:5b: 4e:45:2b:63:83:f7:9a:8a:d9:1f:3d:94:82:12:24:cd:97:ba: f8:f7:b2:64:b6:13:b5:06:27:5e:69:6a:37:bc:89:c6:91:9b: d9:6d:4e:1a:72:83:1c:9d:65:69:9d:74:55:f4:7c:1b:10:b0: 35:28:5e:3c:76:28:5b:67:80:87:60:88:69:e8:da:a1:db:21: bf:18:17:cb:a4:b9:ce:c7:b7:6c:e8:78:93:37:cc:d4:2e:0c: 20:9b:94:1f:4c:0c:97:11:b7:0c:7b:55:74:c7:a5:bd:9c:d3: da:43:1c:a9:71:4c:33:3d:22:54:fd:04:f2:45:49:22:ec:c2: 7c:c4:fc:37 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkfGyBthuWljRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmZkNDQ4NGUtMGQ4NS00YTljLTgzMWUtNWM2MzgyZDU1NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQoXj15DTwIOmIpZ5/UXaFdtqpL1lg9IVFv0 yGZY27MBpRk682M5WaLIFEE8h9d6hzwq/N1iG9U3mQwdTnk/RivvC65dt2U04bC5 Dy1IVu3cD96Jg8nSq73QrL0nFXWZDsy/qKLhn2CUuUqgFkAAo/CNZVywk+7bbzB7 wSPtOxHI77jeimATQVlBSnzcxBxVfordMKmU119Xt62DOXemPB0vtrY/ZL2+goIN JI4R0i/O+U8OolltYH0079UWD4PDaHWhjvStG5IbeWIbCQVjUeMA+fGFxa6+ak+A QHbgeP1o1HxonkfknNOb8ALf71iYlnPMAuVcPR1qJW/r6cc9iwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIoTATFfu6qeqoIpYFe4Yr4RFm7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU4OWQwNDEtYmFiMC0z NjhiLWJjNDktYTY3Yjc2MTg0MmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOrdhFChYChRD4yOd4AX4Qy3gFX5tJbC2oCiDcQaECLluY5ryMbUj VjT3T0MyrpFuCI2TEZUQcytrFMOQnwvrI/gQx4HrtWCnh0uh3zgwvS/wpY81LBir HUI0eD73ns1ItqTWt4MTOZj89DUCS0jaOcImlcesG0FgmQFVqeJbTkUrY4P3morZ Hz2UghIkzZe6+PeyZLYTtQYnXmlqN7yJxpGb2W1OGnKDHJ1laZ10VfR8GxCwNShe PHYoW2eAh2CIaejaodshvxgXy6S5zse3bOh4kzfM1C4MIJuUH0wMlxG3DHtVdMel vZzT2kMcqXFMMz0iVP0E8kVJIuzCfMT8Nw== -----END CERTIFICATE-----Generated at Sun May 11 15:18:28 2025 by rpki-client