$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa File: 84bad8c2-46cd-3a42-80d0-ff2891389b87.roa (raw, json) Hash identifier: 81KROj/NVmJqvK+FxWCt9BdWXnql8sKng2Zc//kZoQk= Subject key identifier: 66:3E:B2:A2:F0:C0:D4:16:8D:A1:00:EC:D4:4B:4C:7F:73:87:EA:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A47B938C027897F8AC6C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:3700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:b9:38:c0:27:89:7f:8a:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=44ce9006-da67-4a32-ba8b-0cb8a285efbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:1e:02:41:70:07:0c:8a:50:07:d1:3f:56: b4:1d:35:cd:fd:07:3a:35:c4:b7:03:35:12:b2:09: 7a:2a:57:30:17:4a:81:0b:01:ab:53:1b:d8:23:e4: b1:62:7e:ef:7a:a4:94:7b:53:9a:55:2d:83:74:df: b4:df:e7:7f:d1:fe:cc:e2:ce:72:74:7c:3d:b2:1e: ff:07:9f:88:19:4e:ea:3b:f8:c6:e7:1e:f4:c7:47: fd:28:3f:5e:f8:e0:d7:1a:67:c0:d5:11:22:bf:35: 05:74:21:35:3f:84:c8:64:93:fd:9f:23:43:3b:b2: c0:ae:b7:35:46:ea:1b:49:e9:72:d0:bb:7b:b3:04: c8:ee:0e:14:d4:80:b3:bc:67:cc:58:f5:49:ce:9d: 75:9c:95:53:ec:b1:dd:7a:26:3a:20:05:4b:a5:59: 18:9b:01:ef:ed:64:d0:0a:aa:78:83:ef:2d:61:d6: c9:40:7a:0d:5f:40:a1:68:b2:a6:e8:82:78:ac:c0: 63:88:0b:fd:78:12:71:5e:b2:b1:5b:a6:07:f8:8c: 7e:32:f5:94:37:40:37:3e:f1:89:06:80:cf:58:68: 4a:f3:08:af:83:bf:e3:90:d7:fa:f0:ac:eb:61:d5: 3a:80:ce:39:36:02:ed:84:30:4d:86:c1:f7:0d:f5: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3E:B2:A2:F0:C0:D4:16:8D:A1:00:EC:D4:4B:4C:7F:73:87:EA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84bad8c2-46cd-3a42-80d0-ff2891389b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9a:f6:d0:27:99:e6:50:3d:16:24:7b:20:00:8e:58:66:78: 08:93:5f:b1:be:e3:56:aa:d9:88:42:91:c5:41:07:f3:1f:bb: f8:0c:e1:73:bf:aa:fd:22:d7:e8:c8:4b:6d:b5:53:ec:34:fa: ad:63:ba:09:95:c2:21:68:95:74:b0:b1:e4:bc:3c:38:a7:46: 8b:1a:9a:44:a3:26:48:c1:f1:ac:be:49:2e:32:18:76:77:22: 5e:fe:34:42:df:86:35:de:0b:d4:c8:55:78:6a:e3:c8:96:1b: 2d:fb:cd:a1:95:38:bd:e9:17:cc:31:18:a4:3c:f6:11:cf:51: 3e:f2:b1:89:cb:ca:95:8a:89:08:3e:e9:15:fa:07:1e:74:0b: ed:d4:39:9a:c4:36:fe:4f:5d:71:ab:9f:0d:4b:6d:0d:6e:88: 40:2b:ce:1b:53:7e:eb:fd:ba:55:3f:1a:15:8e:4f:91:8f:a2: 23:0c:14:8a:34:f1:d1:92:bc:6d:2f:6f:2b:b7:b5:03:a5:a4: 80:d3:4b:43:07:24:6e:9b:6b:3d:e9:70:b2:57:a8:c5:4a:82: e8:b8:63:35:5f:e2:52:08:33:42:ff:85:ca:c2:69:e1:0f:2e: 2e:0b:13:30:0f:79:19:73:8b:9c:b4:f2:4e:cf:81:17:b6:91: 8e:2f:d6:d5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSke5OMAniX+KxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDRjZTkwMDYtZGE2Ny00YTMyLWJhOGItMGNiOGEyODVlZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5geAkFwBwyKUAfRP1a0HTXN/Qc6NcS3AzUS sgl6KlcwF0qBCwGrUxvYI+SxYn7veqSUe1OaVS2DdN+03+d/0f7M4s5ydHw9sh7/ B5+IGU7qO/jG5x70x0f9KD9e+ODXGmfA1REivzUFdCE1P4TIZJP9nyNDO7LArrc1 RuobSely0Lt7swTI7g4U1ICzvGfMWPVJzp11nJVT7LHdeiY6IAVLpVkYmwHv7WTQ Cqp4g+8tYdbJQHoNX0ChaLKm6IJ4rMBjiAv9eBJxXrKxW6YH+Ix+MvWUN0A3PvGJ BoDPWGhK8wivg7/jkNf68KzrYdU6gM45NgLthDBNhsH3DfWi0wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGY+sqLwwNQWjaEA7NRLTH9zh+p2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODRiYWQ4YzItNDZjZC0z YTQyLTgwZDAtZmYyODkxMzg5Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYZr20CeZ5lA9FiR7IACOWGZ4CJNfsb7jVqrZiEKRxUEH8x+7+Azh c7+q/SLX6MhLbbVT7DT6rWO6CZXCIWiVdLCx5Lw8OKdGixqaRKMmSMHxrL5JLjIY dnciXv40Qt+GNd4L1MhVeGrjyJYbLfvNoZU4vekXzDEYpDz2Ec9RPvKxicvKlYqJ CD7pFfoHHnQL7dQ5msQ2/k9dcaufDUttDW6IQCvOG1N+6/26VT8aFY5PkY+iIwwU ijTx0ZK8bS9vK7e1A6WkgNNLQwckbptrPelwsleoxUqC6LhjNV/iUggzQv+FysJp 4Q8uLgsTMA95GXOLnLTyTs+BF7aRji/W1Q== -----END CERTIFICATE-----Generated at Sun May 11 09:14:38 2025 by rpki-client