$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/582b7bd6-1ae1-3e65-8b62-4738ef99023c.roa File: 582b7bd6-1ae1-3e65-8b62-4738ef99023c.roa (raw, json) Hash identifier: J0PWkfJ4Oz+tAZ7CeSlPrFPxDXTG5PXjFQ9k/3MHOks= Subject key identifier: FE:C3:A8:3F:29:4E:CD:CE:48:3D:76:7C:F6:6E:99:67:6C:5F:E0:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1D0B290FF1A825285E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/582b7bd6-1ae1-3e65-8b62-4738ef99023c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:0b:29:0f:f1:a8:25:28:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7654f1ee-f1ac-4878-b6ed-8910c338af0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:7b:ef:a2:47:d6:59:11:69:14:db:28:3f: a6:5b:9f:60:1b:4e:fc:1c:89:53:fd:a5:07:86:d2: 07:39:ef:b3:0c:80:bd:0d:52:2a:f9:2c:31:8a:9e: b0:b7:3b:77:38:ae:41:86:58:22:de:c0:46:07:52: d1:d8:77:2d:dc:c0:7c:5e:96:ec:19:78:40:c8:70: 93:a7:81:b0:3e:be:26:1b:e8:17:a0:0f:f8:a3:60: 85:89:43:1d:36:01:59:67:03:49:61:23:8d:bf:2c: ee:cf:ed:c5:a0:9a:16:e0:c2:d7:d0:95:14:48:89: 76:8b:83:f6:1a:2e:55:85:ba:7d:50:c6:a8:13:ba: 29:91:e3:39:7f:bb:b9:a4:59:e5:51:a7:9d:3f:ae: ea:60:5c:20:6b:84:5e:48:20:97:e1:00:e6:e9:ea: 46:13:5e:1d:0b:bb:85:48:2d:6f:56:68:66:56:2a: 2c:30:41:ea:43:3a:1e:d0:fb:5b:e2:37:25:cf:5a: 40:fb:d6:18:ae:8e:ac:2f:7d:8c:21:6c:24:9f:86: e3:c2:8a:a3:63:44:aa:b4:e8:39:74:51:f5:4d:fb: 3a:c3:59:d0:df:c1:de:98:a7:f6:1a:ed:0e:d6:ba: af:59:6f:ce:af:79:38:21:5a:b7:5e:c8:41:23:d9: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C3:A8:3F:29:4E:CD:CE:48:3D:76:7C:F6:6E:99:67:6C:5F:E0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/582b7bd6-1ae1-3e65-8b62-4738ef99023c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:bb:5a:dc:f9:2d:57:ca:54:fd:aa:76:d5:ac:8a:80:df:e0: 58:85:0e:d8:27:c8:12:be:62:f1:7a:03:b1:8b:ea:98:cf:2d: fe:d7:dc:b2:eb:7e:67:97:d7:3a:3a:73:e1:8c:dc:2e:cd:32: 03:fd:ae:3e:29:04:c2:dd:60:3f:89:ea:b5:26:c3:31:92:49: dc:cf:bc:02:4f:5b:f6:80:1e:69:b7:4a:38:20:0c:84:25:83: ee:e3:3b:1e:8a:00:3e:21:d1:af:a3:88:97:37:fa:5c:e8:a3: 80:93:a9:29:70:2a:62:5b:84:84:62:ba:93:c1:de:34:b7:20: 94:e8:a4:a2:5e:b6:57:a9:d3:bf:85:59:8b:5e:f9:65:ad:53: 62:e6:aa:c2:9e:27:19:ee:61:65:cc:c4:60:ce:c0:4a:05:bc: ea:fa:45:f7:bd:ee:83:79:eb:13:09:76:94:e9:05:91:4c:8a: 51:e8:a1:a8:ee:a2:78:a7:90:85:4a:68:7c:ee:7b:9b:22:68: 1b:12:f0:97:7e:3c:ac:22:16:cd:28:8e:b1:14:55:99:4e:5b: bf:18:a7:ff:63:cf:bb:b1:00:d5:2f:2f:35:2e:eb:b6:0b:c6: f3:1e:16:a4:b8:68:df:64:6f:84:6c:98:37:d5:20:d7:cc:0d: 34:ee:da:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSh0LKQ/xqCUoXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NzY1NGYxZWUtZjFhYy00ODc4LWI2ZWQtODkxMGMzMzhhZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Oh776JH1lkRaRTbKD+mW59gG078HIlT/aUH htIHOe+zDIC9DVIq+Swxip6wtzt3OK5Bhlgi3sBGB1LR2Hct3MB8XpbsGXhAyHCT p4GwPr4mG+gXoA/4o2CFiUMdNgFZZwNJYSONvyzuz+3FoJoW4MLX0JUUSIl2i4P2 Gi5Vhbp9UMaoE7opkeM5f7u5pFnlUaedP67qYFwga4ReSCCX4QDm6epGE14dC7uF SC1vVmhmViosMEHqQzoe0Ptb4jclz1pA+9YYro6sL32MIWwkn4bjwoqjY0SqtOg5 dFH1Tfs6w1nQ38HemKf2Gu0O1rqvWW/Or3k4IVq3XshBI9kBJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP7DqD8pTs3OSD12fPZumWdsX+B3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTgyYjdiZDYtMWFlMS0z ZTY1LThiNjItNDczOGVmOTkwMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI67Wtz5LVfKVP2qdtWsioDf4FiFDtgnyBK+YvF6A7GL6pjPLf7X 3LLrfmeX1zo6c+GM3C7NMgP9rj4pBMLdYD+J6rUmwzGSSdzPvAJPW/aAHmm3Sjgg DIQlg+7jOx6KAD4h0a+jiJc3+lzoo4CTqSlwKmJbhIRiupPB3jS3IJTopKJetlep 07+FWYte+WWtU2LmqsKeJxnuYWXMxGDOwEoFvOr6Rfe97oN56xMJdpTpBZFMilHo oajuoninkIVKaHzue5siaBsS8Jd+PKwiFs0ojrEUVZlOW78Yp/9jz7uxANUvLzUu 67YLxvMeFqS4aN9kb4RsmDfVINfMDTTu2u8= -----END CERTIFICATE-----Generated at Sat May 10 13:43:14 2025 by rpki-client