$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa File: 7812d5a6-8aa4-3831-abe7-befad072a1d3.roa (raw, json) Hash identifier: IMIFfTT78tNSLa/T3BlCLBeddLui4pmj0bWvWmA/7E8= Subject key identifier: 69:D7:F9:4B:77:09:EC:D5:22:B1:2E:F6:ED:E3:C2:9F:2E:1C:39:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1D5E1E2990720FF8BC40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:5e:1e:29:90:72:0f:f8:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4b40a7cb-574d-4b28-b8a0-f464f1d4290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f6:55:f5:5f:f7:a8:77:31:17:a1:50:aa:6f: 7d:c3:ee:f4:70:e8:7f:56:73:f5:3a:48:11:0b:76: f5:11:1a:3c:4b:4c:ca:06:46:de:f1:c4:0f:e9:f8: 09:1f:6b:be:10:c0:fc:12:23:29:df:8c:b0:05:91: 89:5c:cc:09:49:65:e9:c3:1b:2c:56:70:3b:9c:41: 8f:1d:9a:47:56:0f:f7:80:82:f3:f2:ec:76:7d:6c: da:8b:2e:04:94:82:06:06:1d:02:76:95:ef:bc:bb: 5c:e5:c3:38:19:3a:94:70:cf:5b:96:25:c3:bf:c2: cc:8a:f7:5e:6c:1b:fb:c9:93:9a:06:e2:4c:54:40: b5:10:59:4b:4e:27:0f:a4:d1:31:26:c8:ed:6d:0f: 15:38:dd:84:1b:22:67:5f:79:d8:88:a5:ce:e7:12: b6:c6:2b:ea:22:d2:4d:1e:bd:78:d8:6e:1d:e6:41: b5:21:4b:4a:f6:90:6f:7c:d4:6a:6f:83:7b:e8:f3: 01:c4:37:28:6d:f5:7c:fd:c7:f5:18:dd:f7:da:be: 4e:08:8f:b0:04:87:6b:a1:dd:52:03:94:7e:b4:f4: 36:0e:45:02:dd:dd:45:33:24:6b:d9:e0:12:b9:dc: b6:d3:4d:5a:1d:33:78:8f:3f:6e:1f:09:da:fe:83: de:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D7:F9:4B:77:09:EC:D5:22:B1:2E:F6:ED:E3:C2:9F:2E:1C:39:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:87:2f:75:b3:78:9b:b9:05:5f:27:28:b8:30:43:a8:11:1a: e8:7e:62:9d:c2:99:69:25:cf:a6:a3:60:5d:5b:6a:c8:e1:d8: 47:3a:0b:b3:cd:0d:71:eb:93:0e:43:38:01:ae:56:0e:5a:27: 2d:3a:b2:85:d6:77:8b:d1:49:87:b1:34:2d:46:aa:71:5f:d4: 31:2c:0a:b8:75:c9:8b:f8:12:69:41:c7:2b:44:b6:7d:49:ec: c1:25:fb:61:0d:22:ee:fa:60:82:7f:fb:18:08:be:07:9d:ee: 61:44:a1:af:ed:84:cd:54:3c:ba:43:fc:6c:1e:15:c3:33:4e: 4b:59:12:49:d2:40:0b:9b:0f:6d:77:88:c7:6e:b6:12:f4:0b: 82:68:10:07:75:02:90:1c:84:ce:56:2b:c8:9b:53:46:0b:e7: 66:ec:87:e4:37:54:a4:72:9c:e9:26:2a:62:c8:12:d5:9c:91: ae:cc:e8:a2:ed:48:2a:c1:28:bb:f8:1d:4c:c1:7a:b8:c4:12: ea:27:b8:5a:aa:13:5c:2f:f1:a4:43:ee:8c:b4:2b:0f:e1:f6: 26:2e:36:11:5a:28:bb:9c:63:6f:23:43:e5:f9:b8:59:dc:69: 9d:15:6d:f7:69:89:43:dd:16:54:9d:5d:9c:79:d1:dd:c5:76: 84:47:98:23 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh1eHimQcg/4vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGI0MGE3Y2ItNTc0ZC00YjI4LWI4YTAtZjQ2NGYxZDQyOTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifZV9V/3qHcxF6FQqm99w+70cOh/VnP1OkgR C3b1ERo8S0zKBkbe8cQP6fgJH2u+EMD8EiMp34ywBZGJXMwJSWXpwxssVnA7nEGP HZpHVg/3gILz8ux2fWzaiy4ElIIGBh0CdpXvvLtc5cM4GTqUcM9bliXDv8LMivde bBv7yZOaBuJMVEC1EFlLTicPpNExJsjtbQ8VON2EGyJnX3nYiKXO5xK2xivqItJN Hr142G4d5kG1IUtK9pBvfNRqb4N76PMBxDcobfV8/cf1GN332r5OCI+wBIdrod1S A5R+tPQ2DkUC3d1FMyRr2eASudy2001aHTN4jz9uHwna/oPeEwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGnX+Ut3CezVIrEu9u3jwp8uHDnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzgxMmQ1YTYtOGFhNC0z ODMxLWFiZTctYmVmYWQwNzJhMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZYcvdbN4m7kFXycouDBDqBEa6H5incKZaSXPpqNgXVtqyOHYRzoL s80NceuTDkM4Aa5WDlonLTqyhdZ3i9FJh7E0LUaqcV/UMSwKuHXJi/gSaUHHK0S2 fUnswSX7YQ0i7vpggn/7GAi+B53uYUShr+2EzVQ8ukP8bB4VwzNOS1kSSdJAC5sP bXeIx262EvQLgmgQB3UCkByEzlYryJtTRgvnZuyH5DdUpHKc6SYqYsgS1ZyRrszo ou1IKsEou/gdTMF6uMQS6ie4WqoTXC/xpEPujLQrD+H2Ji42EVoou5xjbyND5fm4 WdxpnRVt92mJQ90WVJ1dnHnR3cV2hEeYIw== -----END CERTIFICATE-----Generated at Sun May 11 05:06:42 2025 by rpki-client