$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa File: 8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa (raw, json) Hash identifier: SvXrGYyZW29Yr4AaCjSxxDaXFECfKvLHDWkBfw8Y5Fs= Subject key identifier: 32:66:DD:AC:CC:7F:5F:6E:DA:0A:DA:48:A9:63:E7:53:66:03:85:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A46B01FDA7D0357D68500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:b0:1f:da:7d:03:57:d6:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=6e640242-3cc6-4c4c-b3ef-680bd5b39ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:76:4d:fd:e9:e2:3c:f7:62:fd:77:06:76:d3: b6:92:68:af:33:42:46:48:49:dc:ba:d4:5d:6d:08: df:7e:90:6c:d4:32:1d:11:6f:a6:ec:00:2c:7a:d2: 2e:6f:fb:8d:f9:fc:b2:07:b9:91:b8:26:f3:5e:33: 5c:fe:62:3a:8f:28:26:b8:c3:44:8a:f8:74:dd:ac: 00:63:96:4a:92:ca:ea:63:49:77:6b:02:1b:86:a5: 60:76:ca:d4:6e:6e:b5:20:73:67:41:36:c4:08:a6: 22:43:c5:24:c4:03:82:fd:47:b0:74:1b:85:dc:1b: 8f:4e:c5:5a:f7:22:cc:a7:b3:ac:c6:2f:df:6f:e8: 28:f0:b1:c8:9e:a2:ae:4f:5d:2f:a5:05:07:c5:42: 8f:f9:52:ba:a7:be:34:7b:79:d0:ba:33:3f:3c:26: 24:91:d4:c6:de:86:2b:56:63:07:e1:c5:3f:16:61: 93:fe:b4:a4:74:24:54:94:64:03:22:39:80:9d:3c: 02:05:4c:a2:99:4b:de:99:c1:76:50:0f:d6:5f:02: 5f:eb:dc:62:f0:a7:55:34:cd:4a:b5:98:da:6d:5b: cc:d0:fd:d3:0e:7a:08:61:8d:63:c6:e7:53:dd:56: 6b:fc:18:5f:7b:3a:0b:7c:dc:8e:2c:29:e6:78:2c: 8e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:66:DD:AC:CC:7F:5F:6E:DA:0A:DA:48:A9:63:E7:53:66:03:85:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:f00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5e:98:1a:6c:26:c1:72:be:d1:59:57:37:37:dd:c3:a9:15: ac:4d:60:04:ab:82:65:13:8c:04:d0:3c:09:f1:d3:f2:20:fd: 50:dd:fd:f7:40:95:f5:47:4c:21:54:44:ec:ce:49:58:ff:c8: 92:13:d0:ab:30:2e:d0:c7:6d:09:30:fb:16:d6:81:6d:42:55: 21:50:eb:0f:5a:d0:30:54:36:f6:0e:27:f8:f8:5b:a8:55:58: 10:bb:76:d0:07:95:20:99:5b:c7:86:6a:f6:04:c1:34:30:07: d8:36:22:6a:09:89:e8:25:b9:6a:b7:92:ed:9b:76:45:aa:5f: ee:45:a1:ca:ef:a3:a1:11:f2:ac:78:88:9a:29:51:0f:5a:32: 86:0f:58:55:b4:65:b1:6c:1f:ec:97:45:b1:98:42:20:15:11: fb:ef:90:1e:60:24:25:52:4b:81:48:90:7c:3f:c7:8c:e9:0b: f4:89:d0:33:d7:8d:fd:e5:c9:c2:8a:01:a7:31:8a:7e:99:20: 3c:f4:31:d7:e6:a3:1e:6b:9e:64:b3:40:1d:d2:7f:c6:0e:dc: 3f:68:08:84:92:3b:bf:a2:99:18:da:fb:a4:dd:ee:c0:8b:12: 31:3c:3e:08:21:c2:bf:49:94:48:a9:6e:b1:b4:f4:80:f1:ba: c3:f2:db:cf -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkawH9p9A1fWhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NmU2NDAyNDItM2NjNi00YzRjLWIzZWYtNjgwYmQ1YjM5ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXZN/eniPPdi/XcGdtO2kmivM0JGSEncutRd bQjffpBs1DIdEW+m7AAsetIub/uN+fyyB7mRuCbzXjNc/mI6jygmuMNEivh03awA Y5ZKksrqY0l3awIbhqVgdsrUbm61IHNnQTbECKYiQ8UkxAOC/UewdBuF3BuPTsVa 9yLMp7Osxi/fb+go8LHInqKuT10vpQUHxUKP+VK6p740e3nQujM/PCYkkdTG3oYr VmMH4cU/FmGT/rSkdCRUlGQDIjmAnTwCBUyimUvemcF2UA/WXwJf69xi8KdVNM1K tZjabVvM0P3TDnoIYY1jxudT3VZr/BhfezoLfNyOLCnmeCyOvwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDJm3azMf19u2graSKlj51NmA4X9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJhYzA3NTItYjQ5NS0z YmQxLWJhYTAtNmM2NWI2Y2Q4NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAA8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkF6YGmwmwXK+0VlXNzfdw6kVrE1gBKuCZROMBNA8CfHT8iD9UN39 90CV9UdMIVRE7M5JWP/IkhPQqzAu0MdtCTD7FtaBbUJVIVDrD1rQMFQ29g4n+Phb qFVYELt20AeVIJlbx4Zq9gTBNDAH2DYiagmJ6CW5areS7Zt2Rapf7kWhyu+joRHy rHiImilRD1oyhg9YVbRlsWwf7JdFsZhCIBUR+++QHmAkJVJLgUiQfD/HjOkL9InQ M9eN/eXJwooBpzGKfpkgPPQx1+ajHmueZLNAHdJ/xg7cP2gIhJI7v6KZGNr7pN3u wIsSMTw+CCHCv0mUSKlusbT0gPG6w/Lbzw== -----END CERTIFICATE-----Generated at Sun May 11 04:34:48 2025 by rpki-client