$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa File: 6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa (raw, json) Hash identifier: cTNHOAIhj3wMI4Z9MYbxEKi4VmCC2OIoSU1Ygeg6kUg= Subject key identifier: 6B:71:D2:CE:71:28:72:87:C8:91:24:7D:CD:8B:96:0B:F8:B8:8C:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1D4EED7C45DD6B8A7DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:4e:ed:7c:45:dd:6b:8a:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=0496b97a-bc06-4f5c-82c7-0c6b8651ade6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8f:18:b1:ef:73:70:89:c0:7e:ee:79:1f:15: 94:e3:01:34:25:40:bf:f5:58:45:09:8c:a8:61:b9: 09:bb:ff:ba:26:36:57:a7:eb:65:1a:77:b7:e6:e5: 8b:25:40:b3:38:c5:b7:7b:fa:7a:42:5c:55:14:bc: 82:2d:09:08:88:a4:99:88:9e:2f:26:05:4c:cd:76: 19:02:b1:dc:4d:8e:3b:46:ac:b2:41:fd:8e:a3:48: 7e:7e:35:77:0e:80:fe:37:8b:d2:0c:8b:7a:d8:fe: 79:04:3e:6f:2f:dc:65:2e:6b:8f:4f:fb:3e:76:75: 41:5e:db:c1:94:7b:36:e3:4f:7f:4d:2a:7d:c0:00: ff:d3:06:7b:fd:34:77:15:5c:27:88:04:88:e9:f4: cf:50:70:40:50:03:2b:f7:e0:96:31:9f:53:7e:bb: 99:1d:40:85:c0:79:84:d2:9f:17:1e:4b:9e:9f:6a: 51:ed:97:f5:c2:1a:cf:8f:82:1d:bd:95:2b:ce:fd: 81:7a:20:f9:e4:e2:45:84:19:ae:d6:00:71:a1:ba: fd:c3:f6:d0:80:36:43:56:ae:e6:f0:8b:13:92:1b: 80:98:e2:b1:2f:fe:98:0e:15:97:bd:f8:eb:1e:a3: 2a:75:73:73:9a:96:b2:d9:ba:7c:24:9a:4c:cd:99: e1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:71:D2:CE:71:28:72:87:C8:91:24:7D:CD:8B:96:0B:F8:B8:8C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d4a99d8-394d-3111-985e-ad20b9c68ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:42:a7:21:9f:e8:2f:ca:1e:2a:50:21:a5:5c:03:b7:32:92: 14:bc:63:5d:76:ee:dc:9c:85:79:aa:f1:f0:e8:07:98:23:a5: f2:d2:33:25:0e:72:d8:e2:8e:6f:69:1c:68:72:68:31:65:c0: da:c2:05:7c:1f:2d:ca:44:3d:d4:5d:d1:5b:81:ec:48:50:82: 3b:4e:79:06:33:c8:6f:26:5f:64:96:01:7b:bd:9c:c6:77:cd: c0:c9:e9:84:83:4d:09:6d:29:e2:a3:05:42:4a:18:9a:e1:3c: ae:39:99:32:c8:cf:1a:3e:72:99:51:0b:4d:5c:05:5c:2f:79: 43:b6:93:4f:d6:3e:c9:0e:96:14:0a:e8:79:68:cd:d2:e6:02: 94:75:0b:86:fa:33:4a:68:4d:37:ea:49:25:60:9b:30:62:76: b6:d8:04:d7:dc:99:c9:49:6e:7a:89:c0:25:7f:30:0e:cc:17: b2:21:30:5f:61:dc:c6:02:ca:4c:72:27:87:13:82:46:b6:8a: 1b:0b:a7:ca:65:59:bb:8e:5f:13:75:69:e9:1a:28:d3:f1:18: dd:7c:ef:d5:f1:9f:bb:f7:64:71:c6:93:c1:d4:50:ef:b4:42: b9:4b:5b:15:a5:09:65:8f:fd:25:f8:6e:09:a5:c4:7b:e7:0a: eb:b1:08:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh1O7XxF3WuKfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDQ5NmI5N2EtYmMwNi00ZjVjLTgyYzctMGM2Yjg2NTFhZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y8Yse9zcInAfu55HxWU4wE0JUC/9VhFCYyo YbkJu/+6JjZXp+tlGne35uWLJUCzOMW3e/p6QlxVFLyCLQkIiKSZiJ4vJgVMzXYZ ArHcTY47RqyyQf2Oo0h+fjV3DoD+N4vSDIt62P55BD5vL9xlLmuPT/s+dnVBXtvB lHs2409/TSp9wAD/0wZ7/TR3FVwniASI6fTPUHBAUAMr9+CWMZ9TfruZHUCFwHmE 0p8XHkuen2pR7Zf1whrPj4IdvZUrzv2BeiD55OJFhBmu1gBxobr9w/bQgDZDVq7m 8IsTkhuAmOKxL/6YDhWXvfjrHqMqdXNzmpay2bp8JJpMzZnhNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGtx0s5xKHKHyJEkfc2Llgv4uIyLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQ0YTk5ZDgtMzk0ZC0z MTExLTk4NWUtYWQyMGI5YzY4ZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAI0KnIZ/oL8oeKlAhpVwDtzKSFLxjXXbu3JyFearx8OgHmCOl8tIz JQ5y2OKOb2kcaHJoMWXA2sIFfB8tykQ91F3RW4HsSFCCO055BjPIbyZfZJYBe72c xnfNwMnphINNCW0p4qMFQkoYmuE8rjmZMsjPGj5ymVELTVwFXC95Q7aTT9Y+yQ6W FAroeWjN0uYClHULhvozSmhNN+pJJWCbMGJ2ttgE19yZyUlueonAJX8wDswXsiEw X2HcxgLKTHInhxOCRraKGwunymVZu45fE3Vp6Roo0/EY3Xzv1fGfu/dkccaTwdRQ 77RCuUtbFaUJZY/9JfhuCaXEe+cK67EIFA== -----END CERTIFICATE-----Generated at Tue Jul 1 12:31:57 2025 by rpki-client