$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa File: 84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa (raw, json) Hash identifier: fuG59bdyyBW+Bt3XPpypB6TVsthwACp4phb+viJ9OG0= Subject key identifier: 89:C6:DB:4E:78:01:01:91:68:73:56:45:94:84:BC:3D:AA:C7:F5:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A47F92B90D41CA51E2410 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2607:fbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:f9:2b:90:d4:1c:a5:1e:24:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ba8110c4-5ae6-4031-a478-13e3811427e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:b6:b2:2d:b3:c4:cb:f1:57:d5:d3:96:75: 20:0c:8f:9b:5c:6b:c6:29:27:9c:2f:c1:d6:8c:ee: a4:b2:15:fc:f8:d7:20:0f:3c:01:b4:33:c2:81:42: 49:c9:99:56:b8:b7:95:fa:27:9f:b6:45:68:31:e9: db:c5:fe:60:9d:44:ec:70:a5:96:ad:6e:42:27:c4: 9c:53:ad:ce:8f:5f:5f:53:1b:0e:4e:17:3d:3b:ba: 4a:5e:50:46:ea:51:de:d8:b4:9f:53:54:72:b0:a1: 15:4f:06:51:17:f2:1b:15:92:03:da:6d:77:d2:8d: 4b:b6:6b:6f:7d:eb:96:59:6b:d4:3f:da:ef:72:dc: 34:99:1b:75:20:a7:b6:bf:5b:e3:92:5b:b1:35:c5: 00:3b:43:fd:92:d7:d3:12:3f:e2:c8:56:d5:92:40: 5b:24:1a:d2:e6:18:ff:77:65:a9:f9:38:6c:16:ce: 50:90:43:c8:64:27:9a:95:af:25:04:7c:23:64:7e: d9:0c:bd:b1:3e:f9:31:8f:5b:f6:2d:79:1b:5e:f7: 2d:e4:4d:bc:3b:f5:8d:44:e4:00:e0:a8:6b:32:8c: 44:d2:d5:b7:89:82:cb:c2:ce:86:b0:d1:d6:d5:05: 43:54:6c:fc:de:7f:3d:33:78:21:23:cd:49:db:d0: f8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C6:DB:4E:78:01:01:91:68:73:56:45:94:84:BC:3D:AA:C7:F5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84cae104-76d8-3ed0-9ea3-5f19d13adf42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fbc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:6f:99:4b:28:dd:73:75:bb:92:a3:ce:02:08:a5:de:c4:2d: 18:b3:90:fe:90:b2:cb:0b:b8:9f:f7:e5:a3:7f:17:ec:ee:b0: 01:c1:e5:f6:d7:dd:f1:19:4a:68:d2:b1:30:8c:57:81:17:89: c1:3d:3e:16:d1:76:7c:2e:08:50:ec:9c:52:af:74:60:77:1d: f1:f4:ce:06:6a:f1:15:29:9f:9e:47:e7:9d:0e:b1:e3:b6:66: f9:b8:d4:60:a0:b9:1d:bb:cf:1c:9e:d1:46:f9:17:2a:b1:aa: f0:b4:72:70:34:3c:0c:de:3e:4b:19:fe:8f:34:17:23:a5:39: 0e:15:46:8b:71:d9:37:1d:67:cb:2b:6f:5c:56:01:17:39:84: 32:55:8d:bc:e7:13:ca:ca:63:8c:33:7c:ca:bc:e2:11:21:82: 40:cd:dc:2a:06:b4:9b:b1:e1:b4:70:89:1a:d3:bb:52:7f:97: 8e:55:b8:01:c9:d1:d5:21:0e:ba:2e:7f:bb:d2:8f:1d:06:6a: d2:79:87:c2:5b:5c:58:8e:39:5e:bb:da:8c:9d:8f:77:74:0d: e6:5d:69:3f:72:d0:06:aa:ad:be:bb:d7:ff:0c:5f:3c:a2:0d: 49:bb:7a:d4:7f:3f:fe:89:f7:d8:da:57:30:51:ad:9e:34:a2: 0c:a5:a2:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSkf5K5DUHKUeJBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmE4MTEwYzQtNWFlNi00MDMxLWE0NzgtMTNlMzgxMTQyN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaC2si2zxMvxV9XTlnUgDI+bXGvGKSecL8HW jO6kshX8+NcgDzwBtDPCgUJJyZlWuLeV+ieftkVoMenbxf5gnUTscKWWrW5CJ8Sc U63Oj19fUxsOThc9O7pKXlBG6lHe2LSfU1RysKEVTwZRF/IbFZID2m130o1Ltmtv feuWWWvUP9rvctw0mRt1IKe2v1vjkluxNcUAO0P9ktfTEj/iyFbVkkBbJBrS5hj/ d2Wp+ThsFs5QkEPIZCeala8lBHwjZH7ZDL2xPvkxj1v2LXkbXvct5E28O/WNROQA 4KhrMoxE0tW3iYLLws6GsNHW1QVDVGz83n89M3ghI81J29D48QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFInG2054AQGRaHNWRZSEvD2qx/XBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODRjYWUxMDQtNzZkOC0z ZWQwLTllYTMtNWYxOWQxM2FkZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHb5lLKN1zdbuSo84CCKXexC0Ys5D+kLLLC7if9+Wjfxfs7rABweX2 193xGUpo0rEwjFeBF4nBPT4W0XZ8LghQ7JxSr3Rgdx3x9M4GavEVKZ+eR+edDrHj tmb5uNRgoLkdu88cntFG+RcqsarwtHJwNDwM3j5LGf6PNBcjpTkOFUaLcdk3HWfL K29cVgEXOYQyVY285xPKymOMM3zKvOIRIYJAzdwqBrSbseG0cIka07tSf5eOVbgB ydHVIQ66Ln+70o8dBmrSeYfCW1xYjjleu9qMnY93dA3mXWk/ctAGqq2+u9f/DF88 og1Ju3rUfz/+iffY2lcwUa2eNKIMpaIF -----END CERTIFICATE-----Generated at Sat May 10 16:41:29 2025 by rpki-client