$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa File: 8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa (raw, json) Hash identifier: TI4yXIgtYZmQbsg6SCZ9hkpSPbWOq8p7COMx6aM84AY= Subject key identifier: C7:02:87:7E:26:20:AE:18:07:C1:3B:C6:A6:7B:CA:93:DB:E3:FD:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584905B6B93022E680C7EBC2F800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 7029 IP address blocks: 2604:cb00:3b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b9:30:22:e6:80:c7:eb:c2:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=bb770784-9e4b-4b0d-83c4-625d48bbe607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:95:f5:98:ef:9f:2f:7e:66:66:fe:9f:6e:35: 42:f1:bb:cc:4d:a0:bc:5b:69:72:a8:e8:83:f4:1c: f5:48:0d:6b:71:60:53:0b:b9:f0:48:ff:ab:d6:c5: 4a:86:6a:c4:c0:9b:37:fa:34:ff:31:fc:31:b7:78: 0d:ef:35:ef:3f:22:14:e0:2b:c2:f3:cc:d2:bf:ae: b4:2c:34:0f:89:b4:a4:b0:9b:e7:29:2a:b1:9c:e8: c1:a8:e1:fd:8f:6c:83:3a:5f:77:79:1f:c6:f2:d4: 23:a4:47:8c:7c:42:48:33:ae:7a:ca:cc:e7:84:49: 6c:fe:d2:d4:61:73:e6:68:d6:02:0c:14:12:2d:85: 5e:e1:64:8d:f1:2e:31:47:20:c2:fa:53:ce:db:f3: 93:43:05:3a:eb:a5:cd:78:45:14:46:34:81:f5:8e: 31:a6:75:32:12:ea:38:57:3e:96:da:37:96:75:30: 41:06:46:ae:6c:e0:a5:33:08:58:34:95:21:ce:78: 7f:f7:f4:6d:4c:57:30:d2:78:c4:c0:82:f8:c7:67: 74:62:fe:0f:be:86:ad:c4:c2:69:43:dc:27:28:86: 54:7d:ed:52:17:d2:fa:86:66:5a:78:10:e2:a4:a8: 93:55:7c:46:88:ba:5a:77:48:83:c2:23:15:03:54: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:02:87:7E:26:20:AE:18:07:C1:3B:C6:A6:7B:CA:93:DB:E3:FD:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f6e2d30-eab4-3cdd-9de9-abf8c836565e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b1:71:7d:ba:b9:cb:f3:2a:e6:c1:d2:db:f7:83:c3:fe:76: 67:66:25:64:30:b6:82:80:80:5b:96:38:dc:d8:cb:5b:38:f7: e1:87:65:4c:b0:e8:fa:02:af:9e:bf:4e:16:2e:39:e4:bf:20: 8f:a3:8e:af:c5:35:41:1d:a7:36:15:42:46:10:a4:29:9a:73: 94:7d:57:c5:a5:4d:85:96:9c:97:54:34:43:9a:af:7e:6a:dd: b4:0f:0f:45:ae:28:e3:22:92:77:d1:6c:f8:f3:68:95:72:7d: 53:23:3c:5c:37:bd:c0:17:a2:58:fb:b7:19:98:59:a5:7b:9e: 4f:79:96:5c:7a:5c:f1:00:44:20:b3:d0:d4:90:95:a3:d3:b0: 81:74:0f:86:73:23:fe:ae:c0:85:1f:c8:a5:dc:6e:bd:4d:7f: 24:f1:c1:c1:0a:f4:17:94:b6:70:95:11:9a:a6:6b:d1:4b:66: 7a:f4:6c:91:62:3a:2c:94:07:d1:50:b3:ba:4b:5e:2a:e8:f1: 73:b8:e2:94:6d:c4:c3:ae:0f:60:56:eb:3a:9a:a7:e8:69:43: 4e:d9:21:5e:bd:a2:ce:63:b6:34:17:24:0d:53:a6:8f:34:f0: 06:ee:e2:2d:50:e2:0f:aa:bc:b5:bf:a7:17:7a:2e:8a:79:03: 85:24:ab:42 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkFtrkwIuaAx+vC+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk YmI3NzA3ODQtOWU0Yi00YjBkLTgzYzQtNjI1ZDQ4YmJlNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpX1mO+fL35mZv6fbjVC8bvMTaC8W2lyqOiD 9Bz1SA1rcWBTC7nwSP+r1sVKhmrEwJs3+jT/Mfwxt3gN7zXvPyIU4CvC88zSv660 LDQPibSksJvnKSqxnOjBqOH9j2yDOl93eR/G8tQjpEeMfEJIM656ysznhEls/tLU YXPmaNYCDBQSLYVe4WSN8S4xRyDC+lPO2/OTQwU666XNeEUURjSB9Y4xpnUyEuo4 Vz6W2jeWdTBBBkaubOClMwhYNJUhznh/9/RtTFcw0njEwIL4x2d0Yv4PvoatxMJp Q9wnKIZUfe1SF9L6hmZaeBDipKiTVXxGiLpad0iDwiMVA1QiQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMcCh34mIK4YB8E7xqZ7ypPb4/0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGY2ZTJkMzAtZWFiNC0z Y2RkLTlkZTktYWJmOGM4MzY1NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbbFxfbq5y/Mq5sHS2/eDw/52Z2YlZDC2goCAW5Y43NjLWzj34Ydl TLDo+gKvnr9OFi455L8gj6OOr8U1QR2nNhVCRhCkKZpzlH1XxaVNhZacl1Q0Q5qv fmrdtA8PRa4o4yKSd9Fs+PNolXJ9UyM8XDe9wBeiWPu3GZhZpXueT3mWXHpc8QBE ILPQ1JCVo9OwgXQPhnMj/q7AhR/IpdxuvU1/JPHBwQr0F5S2cJURmqZr0UtmevRs kWI6LJQH0VCzukteKujxc7jilG3Ew64PYFbrOpqn6GlDTtkhXr2izmO2NBckDVOm jzTwBu7iLVDiD6q8tb+nF3ouinkDhSSrQg== -----END CERTIFICATE-----Generated at Thu May 8 06:53:32 2025 by rpki-client