$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d6078f-ea8e-3f71-9e30-3bb81f0c51e0.roa File: 71d6078f-ea8e-3f71-9e30-3bb81f0c51e0.roa (raw, json) Hash identifier: XHdrobIg2Bsaqfbjj2D0PvZE0bMwIN1sKCwpBR1BIis= Subject key identifier: CB:BE:5A:6A:A6:F8:47:CA:4F:F5:62:95:94:93:49:0A:58:96:08:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A46995C79F73604551100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d6078f-ea8e-3f71-9e30-3bb81f0c51e0.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:99:5c:79:f7:36:04:55:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8295c4a0-8686-436c-a019-ae82dc7dedb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:14:1f:af:89:5b:21:65:79:4f:c0:98:76: a5:d0:19:cc:c9:68:62:25:6a:77:73:e8:b7:c9:c9: 80:81:50:bb:18:e8:aa:c5:44:55:f2:b9:1f:f9:96: e7:4d:e4:1a:0c:89:dd:ac:f9:00:eb:eb:8a:a7:17: 10:19:12:c9:81:dd:04:90:82:45:1d:bb:f7:36:21: bc:b5:60:55:b7:4a:c0:fe:88:6f:d6:04:9a:f7:a0: 4b:71:b9:de:65:e6:ed:ad:2d:ee:79:77:ad:ed:8d: 6a:06:ce:30:15:f1:78:fc:16:c8:d0:79:40:6f:4f: d1:46:8b:a8:50:72:3f:64:9b:7e:68:ec:b5:df:ed: f6:fa:2e:27:53:b0:b0:42:1e:87:a1:90:7e:f3:f9: a9:72:eb:90:dc:df:9e:3e:f7:2f:d5:50:02:6c:1b: a8:be:39:53:28:a5:b1:cf:41:09:cd:e6:40:aa:b5: db:3c:6b:ad:4c:1c:c5:9b:1a:b6:01:39:62:17:1c: cb:09:ff:41:d5:91:3e:29:75:6e:d9:6f:7a:60:e4: 70:9e:45:47:5b:8a:0e:0f:6f:2f:99:73:5f:c5:76: ff:7a:53:89:98:1a:0f:5c:47:1f:12:0c:37:40:b5: db:33:be:ae:3a:dc:77:07:d9:3d:6a:16:64:f6:6d: a9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BE:5A:6A:A6:F8:47:CA:4F:F5:62:95:94:93:49:0A:58:96:08:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d6078f-ea8e-3f71-9e30-3bb81f0c51e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5c:eb:32:65:43:2a:33:5d:92:d5:49:7e:3c:7e:33:d7:92: d8:ac:7c:2c:81:92:99:90:99:1f:a5:42:c7:2c:06:f9:51:cd: 49:24:42:62:90:e1:a6:4d:0c:12:ab:a2:b6:17:4f:68:d4:a0: c0:66:88:86:b3:e8:7f:46:cf:78:ce:66:12:3b:c0:9e:63:d4: bb:d2:f5:c1:d3:1e:e0:d9:6c:1a:34:62:c2:ab:52:47:b1:d0: fd:ae:d0:be:2f:f9:ca:55:04:f4:ad:27:14:9b:22:82:8f:f7: ad:57:5c:06:c7:31:1e:84:25:fe:d6:ee:0e:10:14:aa:3b:15: 68:e2:e1:6e:55:ce:3a:05:79:7c:e0:fa:fe:63:d3:82:8c:7c: 4b:e4:13:d4:4a:12:d8:a5:e1:b0:2e:0b:01:12:41:0b:43:85: f2:82:7c:44:5c:8a:00:6b:28:c3:09:ca:d5:7e:b0:57:41:34: 27:5f:c8:c5:56:f9:ad:e3:1b:bd:2c:1c:da:39:f3:be:3c:b0: 8f:b9:32:cd:01:a0:84:43:e1:18:1f:11:ca:5e:93:a2:c8:8e: a8:69:6f:d6:69:16:4e:06:9f:e9:1b:23:61:26:83:c3:a7:21: c8:6a:66:b1:bb:00:a2:f0:78:9f:b4:dc:ff:59:5d:ac:72:c6: 74:8c:48:b0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkaZXHn3NgRVEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODI5NWM0YTAtODY4Ni00MzZjLWEwMTktYWU4MmRjN2RlZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQIUH6+JWyFleU/AmHal0BnMyWhiJWp3c+i3 ycmAgVC7GOiqxURV8rkf+ZbnTeQaDIndrPkA6+uKpxcQGRLJgd0EkIJFHbv3NiG8 tWBVt0rA/ohv1gSa96BLcbneZebtrS3ueXet7Y1qBs4wFfF4/BbI0HlAb0/RRouo UHI/ZJt+aOy13+32+i4nU7CwQh6HoZB+8/mpcuuQ3N+ePvcv1VACbBuovjlTKKWx z0EJzeZAqrXbPGutTBzFmxq2ATliFxzLCf9B1ZE+KXVu2W96YORwnkVHW4oOD28v mXNfxXb/elOJmBoPXEcfEgw3QLXbM76uOtx3B9k9ahZk9m2p7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMu+Wmqm+EfKT/VilZSTSQpYlginMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzFkNjA3OGYtZWE4ZS0z ZjcxLTllMzAtM2JiODFmMGM1MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAA0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANVzrMmVDKjNdktVJfjx+M9eS2Kx8LIGSmZCZH6VCxywG+VHNSSRC YpDhpk0MEquithdPaNSgwGaIhrPof0bPeM5mEjvAnmPUu9L1wdMe4NlsGjRiwqtS R7HQ/a7Qvi/5ylUE9K0nFJsigo/3rVdcBscxHoQl/tbuDhAUqjsVaOLhblXOOgV5 fOD6/mPTgox8S+QT1EoS2KXhsC4LARJBC0OF8oJ8RFyKAGsowwnK1X6wV0E0J1/I xVb5reMbvSwc2jnzvjywj7kyzQGghEPhGB8Ryl6TosiOqGlv1mkWTgaf6RsjYSaD w6chyGpmsbsAovB4n7Tc/1ldrHLGdIxIsA== -----END CERTIFICATE-----Generated at Thu May 8 00:53:02 2025 by rpki-client