$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7ae04d07-1c13-3ef4-a54d-25e5b5674596.roa File: 7ae04d07-1c13-3ef4-a54d-25e5b5674596.roa (raw, json) Hash identifier: e2eg4BQEN37HFNl3q9iPRrHaiTAAQkUdur2Xfv7kbaw= Subject key identifier: 1A:06:98:56:9A:FC:34:1D:31:40:7C:5E:60:7F:D9:B2:2D:53:87:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A17E291918A68BEB27B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7ae04d07-1c13-3ef4-a54d-25e5b5674596.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 2604:cb00:3a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:17:e2:91:91:8a:68:be:b2:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=1f5c4304-7d92-438b-a005-7d454a599238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:32:1c:31:17:c3:10:94:9f:ff:c6:34:ce: 82:8c:c5:5f:6f:cb:3c:90:2e:50:ba:35:3c:b9:f4: d4:d3:be:9c:88:95:3f:e2:2f:d5:5c:f5:c8:ee:b1: 31:91:2c:6a:20:b7:b3:d8:b6:1e:91:fc:fa:35:26: 48:4e:71:fc:d4:21:89:fa:75:e5:69:ff:83:ac:ec: ac:42:27:3d:e3:83:d3:48:b3:a5:cf:e3:3e:d8:e5: a5:ca:d5:04:f5:54:98:35:ba:21:0f:24:c7:77:5a: fb:09:34:c8:d1:e4:f7:c7:e4:ff:dc:db:ea:f0:ea: d0:94:a9:b8:a2:5f:8c:10:10:54:50:cb:8a:44:5f: d6:20:cf:3c:8c:18:69:8d:f1:25:f9:f1:08:1c:aa: 26:cc:46:10:90:01:cc:38:ab:e8:51:56:d3:75:0a: 74:66:4a:6c:2f:28:19:ac:b6:7c:a9:e6:23:a1:b3: b7:53:a6:f7:f4:c0:48:40:91:d2:92:13:d0:9a:c8: 70:7b:26:fa:f9:98:82:c9:56:20:29:35:bf:a3:e8: c5:78:ec:f8:be:5d:1d:ba:a4:7b:d9:c6:17:9a:59: d1:be:b6:c8:1a:a4:0d:1a:0e:6d:e3:8a:52:f9:4c: 8c:dc:de:5a:94:b8:ca:e9:80:94:98:b2:98:e0:8f: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:06:98:56:9A:FC:34:1D:31:40:7C:5E:60:7F:D9:B2:2D:53:87:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7ae04d07-1c13-3ef4-a54d-25e5b5674596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:92:02:96:b2:35:7d:8d:19:da:b1:2a:62:44:5e:97:25:2f: 56:08:6a:d5:26:88:c6:8e:cf:df:f2:c5:b3:f7:80:fb:8b:7a: 71:ab:7c:79:ff:9b:bc:ab:d2:06:3d:b4:7d:93:84:4e:c5:62: fb:8f:70:34:cf:e5:0a:63:e8:40:14:c7:5e:c5:fa:1d:35:15: 72:9c:ce:af:33:88:3e:56:1b:c8:57:19:2b:0c:e3:d1:51:d5: f0:50:e3:95:b5:91:c6:d6:83:93:79:55:74:03:e3:dd:c3:15: 4f:f6:ff:57:2c:c8:6e:ef:34:67:a4:db:ea:12:15:1e:94:d4: 80:d7:16:9e:da:ad:05:d4:86:eb:4e:e6:73:96:be:da:c1:ad: c0:56:77:4b:a5:52:c3:e7:98:a6:b1:2f:09:c8:1f:5d:36:c3: e8:e5:40:4c:d0:1f:8f:36:59:0b:22:35:33:42:6b:23:66:7d: 1a:95:7d:6f:e0:0d:15:38:7d:7c:ab:05:d0:b6:7d:86:a2:b4: 50:8b:19:85:10:eb:9f:19:a4:0f:e7:e5:67:72:e9:92:ba:0e: ee:59:83:21:26:d8:16:7b:70:bb:72:41:ff:9b:e7:ad:a1:a6: 65:01:79:7c:92:48:07:97:98:0e:9c:7d:3a:bd:92:c3:d2:0e: d7:a4:06:3f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmtGhfikZGKaL6yewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MWY1YzQzMDQtN2Q5Mi00MzhiLWEwMDUtN2Q0NTRhNTk5MjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzcyHDEXwxCUn//GNM6CjMVfb8s8kC5QujU8 ufTU076ciJU/4i/VXPXI7rExkSxqILez2LYekfz6NSZITnH81CGJ+nXlaf+DrOys Qic944PTSLOlz+M+2OWlytUE9VSYNbohDyTHd1r7CTTI0eT3x+T/3Nvq8OrQlKm4 ol+MEBBUUMuKRF/WIM88jBhpjfEl+fEIHKomzEYQkAHMOKvoUVbTdQp0ZkpsLygZ rLZ8qeYjobO3U6b39MBIQJHSkhPQmshweyb6+ZiCyVYgKTW/o+jFeOz4vl0duqR7 2cYXmlnRvrbIGqQNGg5t44pS+UyM3N5alLjK6YCUmLKY4I+DywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBoGmFaa/DQdMUB8XmB/2bItU4eCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2FlMDRkMDctMWMxMy0z ZWY0LWE1NGQtMjVlNWI1Njc0NTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAc5IClrI1fY0Z2rEqYkRelyUvVghq1SaIxo7P3/LFs/eA+4t6cat8 ef+bvKvSBj20fZOETsVi+49wNM/lCmPoQBTHXsX6HTUVcpzOrzOIPlYbyFcZKwzj 0VHV8FDjlbWRxtaDk3lVdAPj3cMVT/b/VyzIbu80Z6Tb6hIVHpTUgNcWntqtBdSG 607mc5a+2sGtwFZ3S6VSw+eYprEvCcgfXTbD6OVATNAfjzZZCyI1M0JrI2Z9GpV9 b+ANFTh9fKsF0LZ9hqK0UIsZhRDrnxmkD+flZ3LpkroO7lmDISbYFntwu3JB/5vn raGmZQF5fJJIB5eYDpx9Or2Sw9IO16QGPw== -----END CERTIFICATE-----Generated at Thu May 8 07:41:08 2025 by rpki-client