$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871a75c5-55b5-3b0f-a5f3-646c30049d12.roa File: 871a75c5-55b5-3b0f-a5f3-646c30049d12.roa (raw, json) Hash identifier: yf1sQ6ByaOb/vhaw1Ibhy5opf6d6CaVSUlTvhmSXowU= Subject key identifier: 7A:D3:EB:2E:36:64:A4:45:8B:D0:67:A0:8B:5E:91:4B:39:FA:9E:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A46302EF2C089AA416540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871a75c5-55b5-3b0f-a5f3-646c30049d12.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:34::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:30:2e:f2:c0:89:aa:41:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8bbe26e9-993a-4171-a8c5-be6e8536a6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:77:cc:d5:30:6b:0b:ea:e3:3d:18:63:4e: c3:98:45:e1:32:98:42:a0:98:08:6d:52:d3:c1:fc: 1c:8b:d9:95:4e:45:10:db:60:ef:f5:36:77:06:a8: af:85:b2:c7:60:70:ea:38:63:78:ac:e5:46:4e:28: 87:b9:b1:b9:9d:d1:bc:56:0c:b1:4a:3a:49:b4:84: d2:9d:4f:8c:56:8e:7b:95:a9:48:83:ff:55:ff:ec: 4a:54:c0:86:35:e7:e9:82:d2:24:d1:e3:4d:ff:47: 32:6b:76:06:45:21:be:50:2a:62:ed:ac:e1:fb:6c: 87:15:9a:86:8b:24:c7:93:2e:e4:ba:ca:a1:45:bf: 19:d5:f8:7d:09:44:e2:03:6a:9e:b0:85:af:58:b4: 2a:1e:4e:1a:2a:35:78:d5:e4:98:28:50:e5:a0:f9: de:e4:3d:13:28:73:6b:b6:1a:72:f1:82:74:a9:4f: e9:88:91:af:c6:1e:f0:4a:52:8a:cc:2f:b3:26:1f: 5f:ae:a2:83:0d:5a:19:9e:d7:12:6a:d2:82:71:6d: 14:aa:fd:7a:51:99:4a:49:29:ef:ca:75:18:0b:3c: 16:f0:b7:1e:be:0d:25:79:22:98:20:01:8c:46:70: 5f:e0:ca:04:83:a9:05:55:8b:02:7c:4a:92:fa:b5: 15:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D3:EB:2E:36:64:A4:45:8B:D0:67:A0:8B:5E:91:4B:39:FA:9E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871a75c5-55b5-3b0f-a5f3-646c30049d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:34::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:3b:3b:30:a4:29:61:77:53:19:27:7c:f8:24:67:98:d9:f7: 15:bd:48:80:ce:fa:af:99:7e:63:6c:0f:94:b0:fc:15:1f:02: 23:bf:cd:d4:db:06:f4:f5:06:99:2c:8d:4c:f0:ab:7e:af:f1: 1a:20:a7:71:14:0a:67:67:fa:61:f9:f5:1c:84:0b:6a:8e:ae: 95:a5:23:d7:7f:18:ca:30:85:12:40:6e:27:8e:91:62:e9:8b: d2:2d:82:b4:58:5a:fd:56:2a:56:42:5a:12:c4:86:19:e2:8d: c8:9c:a2:bc:93:c0:9d:d2:c0:70:b4:46:99:52:be:86:91:26: 37:3c:50:b5:c5:93:cc:3a:1c:00:ba:2a:4b:f6:17:cd:ee:63: bb:e6:0b:0c:d3:a7:10:33:83:f6:f1:5c:02:3d:19:d4:b1:86: 92:4a:12:1e:16:7a:50:04:55:6c:7c:de:4a:de:81:bb:96:90: b8:59:b7:da:4e:82:24:91:93:ff:7d:02:2d:70:b6:a5:3a:77: 6a:66:73:c5:7b:00:86:93:63:da:e8:d1:64:b5:34:fd:b2:cc: 09:5e:07:5c:cb:9c:3f:a3:66:a9:26:24:c6:96:25:5c:1d:2d: 0c:73:83:99:52:81:17:2f:b0:c8:7e:20:c2:4f:8b:8a:c5:9c: 30:d0:c4:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkYwLvLAiapBZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OGJiZTI2ZTktOTkzYS00MTcxLWE4YzUtYmU2ZTg1MzZhNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyh3zNUwawvq4z0YY07DmEXhMphCoJgIbVLT wfwci9mVTkUQ22Dv9TZ3BqivhbLHYHDqOGN4rOVGTiiHubG5ndG8VgyxSjpJtITS nU+MVo57lalIg/9V/+xKVMCGNefpgtIk0eNN/0cya3YGRSG+UCpi7azh+2yHFZqG iyTHky7kusqhRb8Z1fh9CUTiA2qesIWvWLQqHk4aKjV41eSYKFDloPne5D0TKHNr thpy8YJ0qU/piJGvxh7wSlKKzC+zJh9frqKDDVoZntcSatKCcW0Uqv16UZlKSSnv ynUYCzwW8Lcevg0leSKYIAGMRnBf4MoEg6kFVYsCfEqS+rUVaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHrT6y42ZKRFi9BnoItekUs5+p7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODcxYTc1YzUtNTViNS0z YjBmLWE1ZjMtNjQ2YzMwMDQ5ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFg7OzCkKWF3UxknfPgkZ5jZ9xW9SIDO+q+ZfmNsD5Sw/BUfAiO/ zdTbBvT1BpksjUzwq36v8Rogp3EUCmdn+mH59RyEC2qOrpWlI9d/GMowhRJAbieO kWLpi9ItgrRYWv1WKlZCWhLEhhnijcicoryTwJ3SwHC0RplSvoaRJjc8ULXFk8w6 HAC6Kkv2F83uY7vmCwzTpxAzg/bxXAI9GdSxhpJKEh4WelAEVWx83kregbuWkLhZ t9pOgiSRk/99Ai1wtqU6d2pmc8V7AIaTY9ro0WS1NP2yzAleB1zLnD+jZqkmJMaW JVwdLQxzg5lSgRcvsMh+IMJPi4rFnDDQxHE= -----END CERTIFICATE-----Generated at Wed May 7 06:16:05 2025 by rpki-client