$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61a42dda-84bf-3277-ad48-3b5092bb0c18.roa File: 61a42dda-84bf-3277-ad48-3b5092bb0c18.roa (raw, json) Hash identifier: vJQqi4T4haMH8ypFbwBwIfPfMLmk50kVBn3Zc/daeaU= Subject key identifier: D1:5F:69:49:21:CF:DB:52:3E:F5:C5:36:B2:17:36:A1:92:7F:25:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A460190A964313954C0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61a42dda-84bf-3277-ad48-3b5092bb0c18.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:01:90:a9:64:31:39:54:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=96d35f9e-9cf9-40a6-a1cf-9b924225a7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:a4:ef:4a:1d:c1:57:94:25:b7:98:17:37: 90:8c:1b:fa:9f:ff:5e:8e:2a:16:f1:0d:6c:f8:f0: 6c:c9:fe:31:e8:61:67:8a:b1:66:4e:0e:19:52:9b: 8a:75:e9:13:3c:0b:df:88:10:16:4a:b8:40:3c:05: c0:96:31:7a:62:c8:22:6e:a8:78:2d:12:44:c7:09: 8f:2c:2c:de:34:b9:18:6e:66:cc:60:3e:2e:5a:40: 51:92:0d:c0:e6:ad:e5:83:ce:31:3b:c4:bf:3a:22: a5:1e:f4:19:4c:78:80:0f:5f:c2:ef:cd:35:25:64: 5a:ee:32:c0:27:58:2b:f7:ec:a6:74:2f:08:cf:66: ab:c3:b4:34:64:34:4d:ae:ed:71:b0:d8:6a:b1:7b: 75:4c:e4:33:38:2c:c4:86:68:64:37:26:2c:56:13: 4d:b1:23:d9:85:0e:77:f3:20:b8:de:a2:de:16:3f: 73:5b:c9:50:4d:7d:32:71:5d:ff:62:87:bf:98:36: be:9d:75:26:e3:e9:ef:3d:0c:8b:49:05:c4:c8:ba: 84:60:af:fb:dd:c2:b9:d7:bc:52:ca:9c:3a:12:52: 5a:77:7e:25:7c:27:f6:52:c7:a4:c7:9b:90:f4:26: b4:bf:f7:51:81:35:b0:ed:13:58:a9:e0:fb:88:d2: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5F:69:49:21:CF:DB:52:3E:F5:C5:36:B2:17:36:A1:92:7F:25:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61a42dda-84bf-3277-ad48-3b5092bb0c18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:cb:7b:df:f4:15:ac:a8:36:85:38:8c:24:8c:b0:7c:9a:eb: b4:05:54:6b:8f:dc:65:15:e9:5b:61:70:07:0f:8a:70:db:00: c9:10:30:e9:3e:fc:8a:f1:41:0c:59:34:8c:05:55:9d:63:02: ff:62:79:3d:66:17:61:2c:e3:12:4e:34:a4:e1:99:40:7c:71: fb:82:ec:98:63:31:79:e5:e4:ff:a2:7f:8b:f3:fa:43:91:78: eb:e9:3f:7b:89:6f:10:14:77:bc:a3:ff:eb:ae:de:99:2a:49: e8:ca:d5:33:0c:cc:16:2a:d7:fc:12:6b:94:91:69:ed:e4:29: 56:34:ad:d1:86:b5:45:de:6d:8a:d6:72:0f:1a:c8:0d:cd:17: ec:6c:d8:b9:d2:c4:57:17:b5:4b:2c:f9:d3:e3:f6:55:ec:5a: 95:57:c0:b2:a7:0d:dd:2a:11:dd:68:f7:b4:24:4a:f3:14:23: f3:63:70:8c:fb:c3:ad:d2:11:fe:34:ed:a4:1e:61:aa:c9:ce: 91:05:f9:e4:d3:1f:0f:a3:a2:ff:aa:9d:ce:ab:eb:b2:58:3d: 3b:62:ad:db:53:f3:d2:9d:0b:b3:60:f3:26:f2:1b:b8:a8:96: 9a:a1:a9:37:26:ac:bc:f5:77:cf:34:56:70:1b:34:be:ff:35: c4:5f:45:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkYBkKlkMTlUwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTZkMzVmOWUtOWNmOS00MGE2LWExY2YtOWI5MjQyMjVhN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Ok70odwVeUJbeYFzeQjBv6n/9ejioW8Q1s +PBsyf4x6GFnirFmTg4ZUpuKdekTPAvfiBAWSrhAPAXAljF6Ysgibqh4LRJExwmP LCzeNLkYbmbMYD4uWkBRkg3A5q3lg84xO8S/OiKlHvQZTHiAD1/C7801JWRa7jLA J1gr9+ymdC8Iz2arw7Q0ZDRNru1xsNhqsXt1TOQzOCzEhmhkNyYsVhNNsSPZhQ53 8yC43qLeFj9zW8lQTX0ycV3/Yoe/mDa+nXUm4+nvPQyLSQXEyLqEYK/73cK517xS ypw6ElJad34lfCf2Usekx5uQ9Ca0v/dRgTWw7RNYqeD7iNLIzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNFfaUkhz9tSPvXFNrIXNqGSfyXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjFhNDJkZGEtODRiZi0z Mjc3LWFkNDgtM2I1MDkyYmIwYzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADbLe9/0FayoNoU4jCSMsHya67QFVGuP3GUV6VthcAcPinDbAMkQ MOk+/IrxQQxZNIwFVZ1jAv9ieT1mF2Es4xJONKThmUB8cfuC7JhjMXnl5P+if4vz +kOReOvpP3uJbxAUd7yj/+uu3pkqSejK1TMMzBYq1/wSa5SRae3kKVY0rdGGtUXe bYrWcg8ayA3NF+xs2LnSxFcXtUss+dPj9lXsWpVXwLKnDd0qEd1o97QkSvMUI/Nj cIz7w63SEf407aQeYarJzpEF+eTTHw+jov+qnc6r67JYPTtirdtT89KdC7Ng8yby G7iolpqhqTcmrLz1d880VnAbNL7/NcRfRdE= -----END CERTIFICATE-----Generated at Sun May 11 02:11:36 2025 by rpki-client