$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8749adee-27f3-32d3-983e-47ac820658d3.roa File: 8749adee-27f3-32d3-983e-47ac820658d3.roa (raw, json) Hash identifier: Bb9MRIsO5N7K+Z9uTl8ped7W+1Qso0gBTaBuaTYL9/8= Subject key identifier: D3:1C:79:08:BA:5D:0A:50:B6:84:A9:C2:7A:30:32:F8:7D:55:AD:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1D1A5589DD350950DDF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8749adee-27f3-32d3-983e-47ac820658d3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:1a:55:89:dd:35:09:50:dd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4ddac42a-9f84-4357-a6ab-c4c91e725623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:65:02:56:2e:9f:a3:72:bd:e9:ca:87:95: fd:26:6d:b6:be:aa:3b:cd:99:b0:f0:73:30:c0:0a: 85:d4:04:42:44:ae:e0:87:12:37:a1:d8:28:74:08: af:5e:2a:fd:6c:d3:6e:ba:39:ab:f6:cf:5b:d9:7b: 7a:9d:d9:2b:8f:93:0e:fc:e5:54:e3:14:4b:b5:77: dc:25:48:98:58:cf:07:3d:66:b5:d4:01:e0:e1:ac: 49:80:5e:5f:e7:38:fa:8a:80:85:4b:31:cf:02:97: eb:a5:eb:59:5c:b1:2c:71:90:3e:07:48:60:1a:f9: 3a:7c:78:2e:36:5c:d7:5d:54:90:2c:1b:c4:33:30: 82:31:f7:f5:76:c7:2d:3f:1a:da:cd:01:a6:10:fc: 67:6b:06:2f:d2:07:59:40:d7:84:8e:1f:0d:51:8e: 70:36:3b:87:d0:a8:3e:6b:00:54:1f:e0:5b:81:4f: fd:92:a1:71:cd:53:b1:28:0f:f4:2f:df:8a:ab:4f: 16:81:08:18:9b:9b:76:9f:f4:f2:c2:58:b5:34:20: 90:68:1b:ca:82:ae:5a:c3:41:09:b2:d1:3d:4f:67: 09:fe:e3:d5:81:1c:b4:ae:16:ff:89:01:3f:bb:7f: 0c:41:6a:18:dd:8f:9c:6c:53:88:a3:df:fb:60:84: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1C:79:08:BA:5D:0A:50:B6:84:A9:C2:7A:30:32:F8:7D:55:AD:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8749adee-27f3-32d3-983e-47ac820658d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:36::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:9e:d1:ed:cc:2b:de:e7:86:17:e8:bb:25:c8:f2:7c:c7:cb: 9e:51:04:31:6c:b4:57:9e:ff:d9:60:6c:9f:74:32:5c:f3:38: b0:28:80:79:07:d4:da:64:fe:5f:fa:3b:70:31:c4:8f:c5:8b: 53:7b:ac:27:c9:6f:44:a3:89:b3:8a:16:a7:55:42:d1:71:7e: 80:bb:2d:10:98:7f:f6:0a:e2:18:cc:ed:0e:0f:08:26:4c:79: ee:46:6c:3d:3f:96:2a:88:a0:71:50:f8:5e:1e:35:59:43:91: 70:05:69:13:24:08:56:66:21:ed:1a:bf:26:46:3f:0e:eb:66: 9a:25:41:75:09:51:3a:77:32:62:fc:f3:9d:c9:f3:eb:39:e3: dd:eb:e5:8e:b4:9e:7c:99:cb:07:f4:ed:0b:ce:12:b1:2c:35: a0:11:7e:52:e7:b7:2c:a3:ad:33:78:18:5e:cb:d4:ce:0a:9e: e6:b8:da:f0:2d:a5:df:53:32:69:90:02:de:cb:fc:c9:5d:c0: 50:d5:e2:4b:37:c0:ec:3a:1c:22:eb:e2:74:1e:87:83:38:19: dc:22:d1:1a:e7:18:f0:f9:8b:10:cd:32:78:e9:fb:4b:00:5d: 9e:9b:3c:97:ed:d5:59:e4:6f:bf:80:78:e2:5d:d7:59:47:a2: cd:f7:86:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSh0aVYndNQlQ3fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGRkYWM0MmEtOWY4NC00MzU3LWE2YWItYzRjOTFlNzI1NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud5lAlYun6NyvenKh5X9Jm22vqo7zZmw8HMw wAqF1ARCRK7ghxI3odgodAivXir9bNNuujmr9s9b2Xt6ndkrj5MO/OVU4xRLtXfc JUiYWM8HPWa11AHg4axJgF5f5zj6ioCFSzHPApfrpetZXLEscZA+B0hgGvk6fHgu NlzXXVSQLBvEMzCCMff1dsctPxrazQGmEPxnawYv0gdZQNeEjh8NUY5wNjuH0Kg+ awBUH+BbgU/9kqFxzVOxKA/0L9+Kq08WgQgYm5t2n/Tywli1NCCQaBvKgq5aw0EJ stE9T2cJ/uPVgRy0rhb/iQE/u38MQWoY3Y+cbFOIo9/7YIR+MwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNMceQi6XQpQtoSpwnowMvh9Va0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODc0OWFkZWUtMjdmMy0z MmQzLTk4M2UtNDdhYzgyMDY1OGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFae0e3MK97nhhfouyXI8nzHy55RBDFstFee/9lgbJ90MlzzOLAo gHkH1Npk/l/6O3AxxI/Fi1N7rCfJb0SjibOKFqdVQtFxfoC7LRCYf/YK4hjM7Q4P CCZMee5GbD0/liqIoHFQ+F4eNVlDkXAFaRMkCFZmIe0avyZGPw7rZpolQXUJUTp3 MmL8853J8+s5493r5Y60nnyZywf07QvOErEsNaARflLntyyjrTN4GF7L1M4Knua4 2vAtpd9TMmmQAt7L/MldwFDV4ks3wOw6HCLr4nQeh4M4Gdwi0RrnGPD5ixDNMnjp +0sAXZ6bPJft1Vnkb7+AeOJd11lHos33hno= -----END CERTIFICATE-----Generated at Sun May 11 15:56:56 2025 by rpki-client