$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa File: 87e9af17-b83d-3cfb-b718-f367a270a589.roa (raw, json) Hash identifier: k9B8MvujaWmYPlPOZ5x52rvZ+hi4hh8TfHjqddjXxBY= Subject key identifier: C3:31:F0:48:E1:79:91:02:B2:00:75:CB:D5:84:78:6D:0D:CD:55:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A459D4D74685541A3AA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:45:9d:4d:74:68:55:41:a3:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1288f406-9d84-4a80-94ae-ff1546035820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:73:39:62:53:7a:c2:3c:7b:1c:da:1c:dc: 1a:d0:8a:7e:17:7d:f2:4d:7c:b3:49:5f:5c:d1:71: eb:9d:f2:f7:d4:d0:be:9c:36:b8:10:11:d0:11:20: 77:84:c3:f2:fc:37:0b:b7:9b:2c:e7:55:23:0e:e1: 4e:1e:2f:f1:36:cb:34:aa:17:6f:97:85:c6:4e:68: 34:03:92:69:2d:d9:9f:5f:c2:4f:7c:86:20:3f:21: a9:c4:a1:95:0c:f4:b9:cf:c2:a8:f4:72:cc:99:8b: e7:d1:b3:09:ca:04:85:fc:ec:0d:5f:0f:7a:c7:c2: 50:7d:38:e1:04:bc:2b:b1:a7:22:cc:e9:05:c6:c3: 4b:54:4d:c8:ab:bc:f9:d6:24:c5:d0:1c:02:43:e5: 7e:ad:5c:8e:2c:aa:ad:b2:37:61:79:52:95:a7:0a: c2:2d:aa:d8:19:56:c4:0e:76:48:16:74:6c:10:e2: 90:fd:36:2a:b5:22:4c:cc:9d:30:23:ad:86:7a:62: 8f:b2:eb:21:82:62:fd:74:7a:29:57:8e:06:46:d2: 6e:3e:2c:60:46:d6:85:1d:5d:17:c2:97:af:8a:f8: 1c:ca:9e:ff:17:5c:49:3b:7f:7d:f8:35:12:c0:d5: 81:32:a3:92:61:a5:a2:8b:6a:6c:43:f3:2f:5f:f0: c2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:31:F0:48:E1:79:91:02:B2:00:75:CB:D5:84:78:6D:0D:CD:55:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e9af17-b83d-3cfb-b718-f367a270a589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:18::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:64:ef:d7:15:ab:c1:17:be:fb:f8:ea:28:fe:3a:c3:46:a2: 66:b0:88:fc:2e:ba:ce:f2:f8:2d:0f:2f:fe:b8:c0:04:73:45: 2c:dc:8e:76:b9:bc:e0:71:0b:30:50:06:f0:d0:f9:d3:dd:68: 31:7b:af:bd:f3:f5:33:05:e3:ab:79:32:00:7d:e6:ea:45:1c: f4:d2:a2:39:dd:71:f6:27:a9:67:a2:3c:a1:46:99:15:c4:cf: d1:48:a2:3d:39:99:d5:b8:7a:e8:ae:50:86:28:9f:7d:44:73: 84:eb:94:e7:26:40:b0:82:f3:72:e7:0f:7e:00:58:2d:f0:06: d3:5d:b5:aa:89:81:34:03:db:9c:9b:6c:49:aa:61:6d:b0:90: 3a:27:53:5d:78:02:5c:3c:fe:97:58:4a:c2:d5:e2:06:66:23: d6:a0:63:43:63:99:d0:80:6f:4c:08:a6:e5:ce:75:64:91:75: cc:08:e1:80:7a:ce:ce:ea:cf:1a:02:26:9a:c4:2a:5b:0e:ff: e0:df:08:5e:cf:80:63:fa:23:78:54:3b:34:d1:9f:10:ff:98: 3a:a3:b9:81:6e:26:33:ba:41:af:8e:20:a8:04:c2:07:d6:c6: 21:07:49:c5:8b:47:e4:18:82:8f:92:03:47:28:5c:5e:94:84: c3:1d:ed:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkWdTXRoVUGjqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTI4OGY0MDYtOWQ4NC00YTgwLTk0YWUtZmYxNTQ2MDM1ODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoylzOWJTesI8exzaHNwa0Ip+F33yTXyzSV9c 0XHrnfL31NC+nDa4EBHQESB3hMPy/DcLt5ss51UjDuFOHi/xNss0qhdvl4XGTmg0 A5JpLdmfX8JPfIYgPyGpxKGVDPS5z8Ko9HLMmYvn0bMJygSF/OwNXw96x8JQfTjh BLwrsacizOkFxsNLVE3Iq7z51iTF0BwCQ+V+rVyOLKqtsjdheVKVpwrCLarYGVbE DnZIFnRsEOKQ/TYqtSJMzJ0wI62GemKPsushgmL9dHopV44GRtJuPixgRtaFHV0X wpevivgcyp7/F1xJO399+DUSwNWBMqOSYaWii2psQ/MvX/DCfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMMx8EjheZECsgB1y9WEeG0NzVUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdlOWFmMTctYjgzZC0z Y2ZiLWI3MTgtZjM2N2EyNzBhNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtk79cVq8EXvvv46ij+OsNGomawiPwuus7y+C0PL/64wARzRSzc jna5vOBxCzBQBvDQ+dPdaDF7r73z9TMF46t5MgB95upFHPTSojndcfYnqWeiPKFG mRXEz9FIoj05mdW4euiuUIYon31Ec4TrlOcmQLCC83LnD34AWC3wBtNdtaqJgTQD 25ybbEmqYW2wkDonU114Alw8/pdYSsLV4gZmI9agY0NjmdCAb0wIpuXOdWSRdcwI 4YB6zs7qzxoCJprEKlsO/+DfCF7PgGP6I3hUOzTRnxD/mDqjuYFuJjO6Qa+OIKgE wgfWxiEHScWLR+QYgo+SA0coXF6UhMMd7RM= -----END CERTIFICATE-----Generated at Thu May 8 18:56:22 2025 by rpki-client