$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa File: 6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa (raw, json) Hash identifier: mcxhY9pUJG3omrmKgxe27MgWR+O6VeMEYgzICFNq9Nw= Subject key identifier: 43:94:DE:C6:7B:7E:A2:B7:32:4E:FC:C2:B6:F2:72:54:A9:0C:AD:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1CD09B5709FCEC6D7680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1c:d0:9b:57:09:fc:ec:6d:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=fa6e9b77-a049-4913-b3f5-60d0f02196e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:c3:a8:ef:20:32:d9:60:83:2e:20:8e:8e: 33:6f:6b:ec:58:ba:34:24:f8:b7:c6:0d:4e:e4:00: 83:84:c1:d0:42:7f:79:ab:0d:03:0a:08:1b:80:d2: cf:1f:bb:74:ad:86:07:ce:77:6d:2d:0a:fb:e3:da: 14:4a:82:d3:dc:c4:04:cb:a2:6e:e8:d5:60:bc:67: 14:8d:07:9b:bf:8f:22:86:00:f7:8c:1e:df:cb:35: aa:35:99:29:f9:bf:2d:2f:38:2d:0e:5f:7b:54:9f: 2c:3a:d1:fe:4a:98:7d:ca:1a:23:a9:5f:93:cf:99: 20:1e:37:48:ef:71:0b:96:2a:94:16:9e:e5:b2:ee: 19:89:59:70:36:13:ab:1f:76:4b:40:52:0b:bb:c4: 37:0c:ff:38:34:58:48:40:e7:4a:93:d0:6a:10:98: 13:7d:4e:9b:fe:6b:52:db:30:f3:46:24:c2:a4:86: 74:8f:c6:a4:a0:eb:89:1c:e3:4d:68:14:e8:ce:72: fb:16:9c:d4:49:cd:63:17:48:91:99:90:9f:d3:f9: f0:97:e4:98:b6:22:51:ed:20:2d:47:2d:bd:05:d4: 34:b1:aa:ab:dc:cc:db:a3:29:9d:4a:2f:10:31:ae: 67:c5:a8:3a:89:7a:45:07:39:11:64:65:13:3f:16: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:94:DE:C6:7B:7E:A2:B7:32:4E:FC:C2:B6:F2:72:54:A9:0C:AD:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6c6dc1fc-7882-3490-afa1-6e13bcc9d45d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3a:62:a4:03:bb:fb:6c:02:ce:9b:fa:c5:05:57:c8:4a:9d: 8b:b4:81:28:0b:e8:37:ea:8d:14:1f:ef:6c:62:cb:d5:88:89: d3:9e:82:d4:5b:b7:72:a1:83:e9:e2:8a:86:4f:a2:5c:52:07: 5b:b8:80:f1:76:24:f6:1c:6c:40:d4:eb:47:18:e7:d2:90:02: 96:55:96:ef:b1:4a:4a:c2:83:c3:84:44:54:35:6a:ea:b1:5d: 97:03:cb:5d:d5:be:a6:bf:fc:bf:5d:43:d3:d8:f1:aa:c8:b0: b0:fa:19:8f:a7:2f:2d:c5:e3:93:6c:b6:d2:8d:7d:72:50:63: 4c:64:a3:69:01:a9:09:94:0e:6b:5d:2e:b1:38:e9:7a:bd:de: 72:ef:a7:34:46:7a:d0:66:75:6e:93:e0:e4:55:0e:61:b6:ee: 56:6b:e3:8f:92:70:e9:bf:4a:0a:1e:a7:72:ff:c2:da:1f:31: 05:38:47:28:a7:3e:ba:7c:f7:16:db:f6:c4:3e:e1:68:ed:40: c1:82:1c:70:e3:91:f6:1d:d3:98:b5:d0:89:88:83:33:fb:23: 17:0d:ac:db:bd:9e:1a:8a:7e:7d:ce:8f:d0:18:fd:68:97:9a: f9:7e:81:d1:e4:36:aa:db:90:5e:a9:c4:2c:91:1e:4b:9e:74: 4f:1a:e9:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxShzQm1cJ/OxtdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmE2ZTliNzctYTA0OS00OTEzLWIzZjUtNjBkMGYwMjE5NmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4/DqO8gMtlggy4gjo4zb2vsWLo0JPi3xg1O 5ACDhMHQQn95qw0DCggbgNLPH7t0rYYHzndtLQr749oUSoLT3MQEy6Ju6NVgvGcU jQebv48ihgD3jB7fyzWqNZkp+b8tLzgtDl97VJ8sOtH+Sph9yhojqV+Tz5kgHjdI 73ELliqUFp7lsu4ZiVlwNhOrH3ZLQFILu8Q3DP84NFhIQOdKk9BqEJgTfU6b/mtS 2zDzRiTCpIZ0j8akoOuJHONNaBToznL7FpzUSc1jF0iRmZCf0/nwl+SYtiJR7SAt Ry29BdQ0saqr3MzboymdSi8QMa5nxag6iXpFBzkRZGUTPxbdSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEOU3sZ7fqK3Mk78wrbyclSpDK1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmM2ZGMxZmMtNzg4Mi0z NDkwLWFmYTEtNmUxM2JjYzlkNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEo6YqQDu/tsAs6b+sUFV8hKnYu0gSgL6DfqjRQf72xiy9WIidOe gtRbt3Khg+niioZPolxSB1u4gPF2JPYcbEDU60cY59KQApZVlu+xSkrCg8OERFQ1 auqxXZcDy13Vvqa//L9dQ9PY8arIsLD6GY+nLy3F45NsttKNfXJQY0xko2kBqQmU DmtdLrE46Xq93nLvpzRGetBmdW6T4ORVDmG27lZr44+ScOm/Sgoep3L/wtofMQU4 RyinPrp89xbb9sQ+4WjtQMGCHHDjkfYd05i10ImIgzP7IxcNrNu9nhqKfn3Oj9AY /WiXmvl+gdHkNqrbkF6pxCyRHkuedE8a6aM= -----END CERTIFICATE-----Generated at Fri May 9 20:47:48 2025 by rpki-client