$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88588dd6-936f-3783-ae42-fd4faa839ed2.roa File: 88588dd6-936f-3783-ae42-fd4faa839ed2.roa (raw, json) Hash identifier: DA0tjxxYzlO4UhWQeeg7i8uOoHSYfBtB5LHZQCroaAE= Subject key identifier: 3E:BC:8B:7D:86:2A:12:70:B7:BD:CC:29:56:54:8B:99:C2:CF:28:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1D84964B6FDCCDFB6320 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88588dd6-936f-3783-ae42-fd4faa839ed2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:84:96:4b:6f:dc:cd:fb:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1344f48a-aa4a-45e2-bb47-89f8133ed6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:4f:fb:dd:8a:0c:7d:a3:69:54:47:a1:67: 67:b4:e0:dd:f2:3d:82:b3:99:95:cb:2f:20:a6:01: 1d:fe:b5:e8:32:c6:8c:f8:a0:36:26:c2:41:e8:03: f6:2b:4b:c3:d1:b6:96:6f:c8:04:d8:47:64:4f:7e: ae:00:cc:5f:f3:b9:c3:75:27:26:c0:ce:28:87:07: 46:76:18:ea:2d:cb:ef:b4:87:e6:9f:36:bf:e9:e6: ee:c2:4c:d3:fb:8b:20:d7:09:f6:8f:c1:9b:b8:52: c4:d3:37:71:ee:c0:52:01:b0:b1:3c:86:5d:67:7a: 44:3a:35:fb:26:a6:14:5c:dc:7a:e6:e3:6e:c2:22: 92:97:82:2e:5b:b0:84:38:80:27:15:4a:15:5b:28: c2:8b:e3:40:c0:2a:dd:71:52:d8:9c:fc:ca:d5:df: a2:31:6b:01:d4:e9:57:37:11:57:e1:d6:4f:0c:fe: 59:cb:d7:e9:94:5e:6c:10:86:ae:4e:d3:7f:63:f2: a2:77:0e:bf:e2:1d:4d:ee:fd:69:4d:4e:2f:bf:31: 24:6b:ce:dd:03:77:af:07:e7:07:1f:9a:0e:45:e0: 99:76:b6:1c:f2:af:fe:e6:23:a8:aa:2c:d3:b8:b7: 23:63:70:3c:5d:67:3a:7e:c2:a3:78:21:c8:1a:15: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BC:8B:7D:86:2A:12:70:B7:BD:CC:29:56:54:8B:99:C2:CF:28:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88588dd6-936f-3783-ae42-fd4faa839ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ca:4b:eb:48:83:8d:60:39:58:96:e7:9d:80:96:70:a9:dc: e9:ad:1f:59:6f:fc:0d:02:45:50:06:27:db:ba:a1:d9:89:c1: b0:e5:8b:21:f2:1a:f3:ae:cd:f2:df:a0:95:e2:92:69:a4:4f: 9a:30:7a:0a:71:ca:c6:f8:1b:36:22:c9:cc:69:36:6a:45:ee: 7e:f1:93:5b:81:9a:25:d7:8b:cf:09:3f:71:58:ad:49:46:e5: 7f:39:42:88:fc:ec:25:b9:5b:da:39:e7:3c:de:16:af:e2:2b: e5:4b:65:52:7f:3c:bd:ed:b8:da:a6:b3:61:92:32:65:7d:26: a3:3e:bf:3e:60:e8:ed:8a:aa:ac:d1:b6:16:68:0f:5b:16:83: 0c:e2:82:a2:35:db:e5:c9:1d:01:ae:00:b1:81:2d:c1:b2:57: 0c:20:8d:7f:e5:9f:2d:84:8a:88:1f:7c:d4:90:f4:6a:d8:da: 0b:e0:5d:b4:e5:21:3c:78:85:49:54:46:c4:b4:e1:fc:46:c1: 51:1e:0a:c6:5e:3f:9f:84:d6:35:a5:6c:cf:77:13:51:c2:06: 0c:7d:5c:f5:4b:0e:45:22:ec:54:40:0b:0a:e0:ed:b5:58:8a: 2c:44:1e:fe:83:32:30:4c:4c:9a:2c:9c:bc:ac:23:ff:91:9d: 43:52:90:e5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh2Elktv3M37YyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTM0NGY0OGEtYWE0YS00NWUyLWJiNDctODlmODEzM2VkNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxStP+92KDH2jaVRHoWdntODd8j2Cs5mVyy8g pgEd/rXoMsaM+KA2JsJB6AP2K0vD0baWb8gE2EdkT36uAMxf87nDdScmwM4ohwdG dhjqLcvvtIfmnza/6ebuwkzT+4sg1wn2j8GbuFLE0zdx7sBSAbCxPIZdZ3pEOjX7 JqYUXNx65uNuwiKSl4IuW7CEOIAnFUoVWyjCi+NAwCrdcVLYnPzK1d+iMWsB1OlX NxFX4dZPDP5Zy9fplF5sEIauTtN/Y/Kidw6/4h1N7v1pTU4vvzEka87dA3evB+cH H5oOReCZdrYc8q/+5iOoqizTuLcjY3A8XWc6fsKjeCHIGhX9JQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD68i32GKhJwt73MKVZUi5nCzyioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODg1ODhkZDYtOTM2Zi0z NzgzLWFlNDItZmQ0ZmFhODM5ZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfspL60iDjWA5WJbnnYCWcKnc6a0fWW/8DQJFUAYn27qh2YnBsOWL IfIa867N8t+gleKSaaRPmjB6CnHKxvgbNiLJzGk2akXufvGTW4GaJdeLzwk/cVit SUblfzlCiPzsJblb2jnnPN4Wr+Ir5UtlUn88ve242qazYZIyZX0moz6/PmDo7Yqq rNG2FmgPWxaDDOKCojXb5ckdAa4AsYEtwbJXDCCNf+WfLYSKiB981JD0atjaC+Bd tOUhPHiFSVRGxLTh/EbBUR4Kxl4/n4TWNaVsz3cTUcIGDH1c9UsORSLsVEALCuDt tViKLEQe/oMyMExMmiycvKwj/5GdQ1KQ5Q== -----END CERTIFICATE-----Generated at Sun May 11 09:40:41 2025 by rpki-client