$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69ca785a-e5ce-3779-b79a-bcf68ce14de8.roa File: 69ca785a-e5ce-3779-b79a-bcf68ce14de8.roa (raw, json) Hash identifier: BKaQPAv9zjIem48WqxjupvBrhCqNNbk4ZfqUXBAB6Rs= Subject key identifier: E0:8D:75:3C:20:A1:93:95:5F:EC:88:F2:EF:AA:EA:59:21:DE:75:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4794EAF4FA0C261CDF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69ca785a-e5ce-3779-b79a-bcf68ce14de8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:3200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:94:ea:f4:fa:0c:26:1c:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e28f3bc3-edd9-4525-b556-bd89e957308e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b8:aa:3f:2d:be:74:1e:da:3b:3a:93:88:4d: c5:ac:41:af:97:c0:ba:b4:d4:0e:e6:59:9e:ba:ee: 41:ff:24:ef:b1:30:1d:1f:86:c3:4f:5e:31:ad:b0: f7:6f:2f:92:ef:7b:73:1d:88:83:3f:29:24:8f:94: 0e:f8:27:75:73:2c:0e:6a:12:33:eb:23:0a:85:15: 72:9a:81:a1:05:b1:a2:ca:b5:8a:17:57:bb:c6:10: 3d:18:a2:c5:4c:2f:64:bb:e7:a5:fa:24:02:e5:a1: 0d:5f:6f:3c:5a:51:7f:6d:6e:1b:26:ad:73:50:da: 44:a6:ee:d5:9d:b2:98:e5:3a:22:88:16:2f:23:3a: a5:0b:e6:ab:13:ab:67:ab:ca:f7:5a:44:7d:a2:5c: 27:2d:9a:85:d2:b9:6c:2c:2c:a6:02:de:67:f0:83: eb:59:57:ec:02:35:9c:f3:98:2a:f5:5d:4b:d7:41: ff:bf:3a:40:4c:73:35:60:7c:c3:04:40:12:be:ab: dd:6e:02:c9:b1:a6:60:4e:b3:90:8b:da:de:bb:f2: b2:60:24:42:b9:b7:df:88:4c:42:61:28:b0:6a:8a: 30:f0:c9:5d:2c:81:74:f4:88:04:20:4b:92:6c:28: e0:ff:0a:3f:23:08:10:6d:97:33:b2:0f:21:21:f3: 07:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8D:75:3C:20:A1:93:95:5F:EC:88:F2:EF:AA:EA:59:21:DE:75:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69ca785a-e5ce-3779-b79a-bcf68ce14de8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e6:85:71:a8:95:42:64:22:e8:21:7d:49:8a:8f:51:99:e8: 57:87:d7:c9:af:72:66:09:cf:28:e6:71:f9:b4:9e:af:7b:17: 3a:4f:80:13:dd:47:6b:ef:4a:b6:53:53:ce:b2:92:c9:83:67: ba:f2:6c:1b:45:79:d8:50:c4:c2:f8:03:7a:8c:aa:55:8f:64: 3a:58:28:b4:74:ac:c5:0c:ac:73:d0:1b:6b:6b:02:bd:96:15: ea:55:0d:59:fa:8c:2a:d2:29:fc:e4:22:cb:17:e6:6c:d0:f8: 99:bc:a9:95:53:b5:08:dc:10:90:e2:87:fe:72:29:13:a5:3c: 0f:a3:57:b6:5f:9f:fd:af:2a:e5:82:01:4c:75:18:13:fa:94: 55:4b:89:27:a1:49:80:26:80:ac:fd:31:12:e2:a6:29:50:ef: 90:bc:56:2b:d7:ef:09:18:74:c6:81:39:e3:ab:6c:42:e4:da: 44:6b:cf:d3:53:ee:9f:80:af:f9:e9:b7:0e:60:3f:46:f5:32: 26:4d:eb:99:77:f6:72:00:f7:d6:de:41:e5:c8:02:f4:81:d8: ac:7d:4d:3c:66:39:10:27:70:ab:13:9a:01:ac:11:29:3e:e4: a5:43:42:eb:b0:7b:73:0d:a2:ba:42:34:ae:4a:9d:3d:55:0a: a9:66:35:8d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkeU6vT6DCYc34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTI4ZjNiYzMtZWRkOS00NTI1LWI1NTYtYmQ4OWU5NTczMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4riqPy2+dB7aOzqTiE3FrEGvl8C6tNQO5lme uu5B/yTvsTAdH4bDT14xrbD3by+S73tzHYiDPykkj5QO+Cd1cywOahIz6yMKhRVy moGhBbGiyrWKF1e7xhA9GKLFTC9ku+el+iQC5aENX288WlF/bW4bJq1zUNpEpu7V nbKY5ToiiBYvIzqlC+arE6tnq8r3WkR9olwnLZqF0rlsLCymAt5n8IPrWVfsAjWc 85gq9V1L10H/vzpATHM1YHzDBEASvqvdbgLJsaZgTrOQi9reu/KyYCRCubffiExC YSiwaoow8MldLIF09IgEIEuSbCjg/wo/IwgQbZczsg8hIfMH+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOCNdTwgoZOVX+yI8u+q6lkh3nUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjljYTc4NWEtZTVjZS0z Nzc5LWI3OWEtYmNmNjhjZTE0ZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAf+aFcaiVQmQi6CF9SYqPUZnoV4fXya9yZgnPKOZx+bSer3sXOk+A E91Ha+9KtlNTzrKSyYNnuvJsG0V52FDEwvgDeoyqVY9kOlgotHSsxQysc9Aba2sC vZYV6lUNWfqMKtIp/OQiyxfmbND4mbyplVO1CNwQkOKH/nIpE6U8D6NXtl+f/a8q 5YIBTHUYE/qUVUuJJ6FJgCaArP0xEuKmKVDvkLxWK9fvCRh0xoE546tsQuTaRGvP 01Pun4Cv+em3DmA/RvUyJk3rmXf2cgD31t5B5cgC9IHYrH1NPGY5ECdwqxOaAawR KT7kpUNC67B7cw2iukI0rkqdPVUKqWY1jQ== -----END CERTIFICATE-----Generated at Sun May 11 15:04:47 2025 by rpki-client