$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa File: 9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa (raw, json) Hash identifier: HsuqDhstaPmsSNo5E//+2+BUZy2TmaJKFt80nSN2TBo= Subject key identifier: 7A:A5:FE:7A:82:35:6D:D8:48:26:4F:5E:83:69:8C:70:D2:5E:D4:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1D41E9E50738C29D5300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:41:e9:e5:07:38:c2:9d:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=36f71371-f126-4ef4-8f8f-5d5a8ad90ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:f6:b8:88:30:62:5b:77:29:f3:e4:7c:f6: 68:19:4e:d7:58:ed:5d:d1:f1:91:ad:1d:d5:aa:2f: cb:8e:a3:20:11:a6:3a:3c:ad:69:b8:95:85:27:e7: ee:ac:c9:f7:8c:23:ef:a0:78:65:72:2a:0d:3d:07: ec:c6:34:de:05:25:88:2c:4a:75:42:0d:c5:4b:27: 23:2a:48:ba:d0:96:65:5b:57:76:42:ae:71:5f:b9: 53:05:d4:be:37:64:bb:45:14:f1:f6:8f:13:b5:fa: 3f:38:3d:e3:2a:23:a1:5d:9d:41:07:97:11:0c:5a: 5e:0d:d5:25:59:cb:c7:61:e0:b1:b0:b9:92:a0:3d: bf:e5:97:7d:0c:a6:15:ef:a4:ec:54:89:ea:fe:f6: 57:f9:bb:0a:4e:09:ae:56:e5:35:7f:07:43:e7:b0: 74:18:b9:57:d5:81:7c:d6:22:8f:a2:31:90:cf:45: a3:04:1d:4a:74:f9:5f:95:b7:63:f6:c8:2e:cb:66: 60:c7:b6:95:fd:95:ca:65:d6:a0:f1:0c:4e:4f:6d: 97:76:7a:d3:fd:ce:af:1b:c6:36:e1:90:3c:37:b7: c6:10:33:c9:98:38:f7:d8:33:fd:d3:f7:b4:4e:39: 3e:2d:8b:93:c5:99:47:a4:53:b6:42:82:28:b5:af: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A5:FE:7A:82:35:6D:D8:48:26:4F:5E:83:69:8C:70:D2:5E:D4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:65:ce:8d:c4:63:49:74:d7:4c:4c:76:10:0b:56:08:9e:8c: a3:4d:c7:a4:ea:52:83:8c:d5:ea:68:93:89:5f:06:04:20:6f: 9b:cb:c5:83:2b:2f:5a:eb:52:ff:c0:1e:63:cf:49:a6:08:33: cf:3e:6b:ea:45:63:45:2f:93:79:2d:7c:ed:fc:7b:f4:f5:b6: f2:d6:fb:e9:8b:69:0b:3b:b7:4b:c0:16:0e:9f:98:6e:26:89: a7:7a:53:7b:6e:9d:09:b2:80:f4:99:65:51:aa:6e:33:79:31: d9:68:f6:93:77:70:d8:e2:0b:d1:5d:91:a9:59:ec:90:69:39: a2:68:9c:eb:e5:50:77:4b:25:93:f9:2c:1d:eb:5f:f2:73:f9: f7:74:d6:16:23:bc:1c:21:24:13:8b:8b:a5:61:20:07:be:e5: cf:2e:84:67:86:49:8a:6c:ae:e2:6c:06:a8:54:e4:8d:20:56: 40:0b:76:7d:4d:64:00:0f:d5:97:ce:af:36:c4:e9:64:e6:1a: dd:79:74:83:38:d1:c2:04:cf:a4:48:48:4d:65:d4:95:85:da: 07:27:57:6b:50:2b:ba:45:ec:a1:7c:8d:d5:47:f2:d1:09:48: a2:ba:23:df:3f:48:e2:52:03:49:4a:c7:b1:8c:9d:37:c1:5d: a5:dc:6b:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSh1B6eUHOMKdUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzZmNzEzNzEtZjEyNi00ZWY0LThmOGYtNWQ1YThhZDkwYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWf2uIgwYlt3KfPkfPZoGU7XWO1d0fGRrR3V qi/LjqMgEaY6PK1puJWFJ+furMn3jCPvoHhlcioNPQfsxjTeBSWILEp1Qg3FSycj Kki60JZlW1d2Qq5xX7lTBdS+N2S7RRTx9o8Ttfo/OD3jKiOhXZ1BB5cRDFpeDdUl WcvHYeCxsLmSoD2/5Zd9DKYV76TsVInq/vZX+bsKTgmuVuU1fwdD57B0GLlX1YF8 1iKPojGQz0WjBB1KdPlflbdj9sguy2Zgx7aV/ZXKZdag8QxOT22XdnrT/c6vG8Y2 4ZA8N7fGEDPJmDj32DP90/e0Tjk+LYuTxZlHpFO2QoIota9LewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHql/nqCNW3YSCZPXoNpjHDSXtQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTAyMTE3NWQtZTk5ZC0z M2I2LTgwYmYtMWIyMmFjNGQyZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNlzo3EY0l010xMdhALVgiejKNNx6TqUoOM1epok4lfBgQgb5vL xYMrL1rrUv/AHmPPSaYIM88+a+pFY0Uvk3ktfO38e/T1tvLW++mLaQs7t0vAFg6f mG4miad6U3tunQmygPSZZVGqbjN5Mdlo9pN3cNjiC9FdkalZ7JBpOaJonOvlUHdL JZP5LB3rX/Jz+fd01hYjvBwhJBOLi6VhIAe+5c8uhGeGSYpsruJsBqhU5I0gVkAL dn1NZAAP1ZfOrzbE6WTmGt15dIM40cIEz6RISE1l1JWF2gcnV2tQK7pF7KF8jdVH 8tEJSKK6I98/SOJSA0lKx7GMnTfBXaXca6A= -----END CERTIFICATE-----Generated at Sun May 11 00:41:25 2025 by rpki-client