$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ae8a42-d737-3b12-b187-a0ce9c0c4403.roa File: 90ae8a42-d737-3b12-b187-a0ce9c0c4403.roa (raw, json) Hash identifier: AetxlGvfsF3nNd5VJ3RCKN7K5gtXhRkjR0Lw2TzIwv4= Subject key identifier: E8:2D:CB:19:D1:DA:33:4F:B0:EB:8D:19:A6:41:4C:11:0F:A6:3B:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A477D075E4119608EBD70 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ae8a42-d737-3b12-b187-a0ce9c0c4403.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:7d:07:5e:41:19:60:8e:bd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=3605ea17-c293-41a1-91aa-da4023db888c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:fd:7d:0f:23:38:47:6f:8f:4f:28:6f:51: d8:92:bc:eb:49:1c:28:50:5f:f0:9a:3f:46:71:ae: 31:48:3a:52:0c:60:ea:05:4e:f3:9f:0b:89:43:61: 57:ab:01:46:0c:20:8c:b2:41:f8:8e:3b:5f:01:f0: b9:7c:63:8f:3c:fe:7f:d2:6c:48:77:46:d3:f4:51: 29:ce:e8:02:cb:ce:2e:3a:a5:0e:d4:64:c3:97:09: 18:28:b9:6a:f6:e1:b5:8b:c6:33:e8:98:ba:f8:5c: 0a:a6:6d:ba:f1:e5:39:5b:a9:48:5c:c5:12:94:11: d2:1f:2e:4f:7b:06:b0:9a:da:57:e5:ad:35:94:59: a3:19:ad:fe:8c:29:e4:a3:d6:3e:05:c3:83:aa:c6: c1:5f:87:c7:9b:89:ce:10:c7:50:73:86:cd:65:29: 1f:d2:41:e1:20:97:fe:c3:a1:2f:dc:9f:6f:92:3c: 33:40:77:db:87:0a:e0:f8:23:8f:a3:68:1d:c2:5e: f5:2a:c0:db:3c:36:d3:b3:7c:66:3a:24:d2:b0:c6: e4:ce:6f:22:9c:cc:a3:32:a9:07:2a:e2:81:73:b0: 35:97:bd:15:17:ca:97:73:af:e7:c5:8c:aa:2e:1c: e6:3f:57:24:87:b7:30:34:ed:71:b6:8d:e9:00:10: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2D:CB:19:D1:DA:33:4F:B0:EB:8D:19:A6:41:4C:11:0F:A6:3B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ae8a42-d737-3b12-b187-a0ce9c0c4403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:85:33:4a:65:ac:9b:d4:73:55:6e:3c:71:2d:77:64:71:6e: 9d:b8:95:d5:02:cb:a9:6b:f6:24:f1:a3:cb:de:24:33:47:dd: 5a:14:2f:32:63:24:de:0c:99:74:87:94:e8:c8:65:26:78:b2: e4:92:b4:40:58:3c:f1:eb:4c:ca:26:b8:ec:1e:c9:eb:39:47: e3:f8:dd:81:2f:64:5d:d9:57:90:98:2b:2e:0f:1b:a5:42:0c: 46:8d:94:d9:fe:1f:f9:1e:2f:70:d7:0f:91:3d:b9:ce:36:bf: 79:10:d6:3e:25:a9:45:7f:ca:ca:14:bd:07:db:43:39:9c:db: 90:d1:fb:30:57:66:f0:68:e1:28:1c:77:1c:bd:c9:ab:93:ce: b0:06:b7:57:5b:2d:65:20:94:38:89:13:43:76:54:9f:77:f5: b9:47:9a:cf:df:2a:97:9f:ed:ee:60:26:8e:e5:0a:93:66:d9: d6:30:94:8a:2c:42:8b:65:d4:1c:3b:06:94:00:85:27:a5:06: da:4a:b8:70:ba:10:e1:e6:6f:2d:2c:24:92:c9:8c:74:50:88: db:bb:6a:ee:32:5c:ac:cd:29:82:69:c1:45:1f:f9:63:b0:49: a5:60:69:48:d1:61:93:b7:20:7e:eb:9f:00:be:b4:df:71:48: 6b:a3:16:02 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkd9B15BGWCOvXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzYwNWVhMTctYzI5My00MWExLTkxYWEtZGE0MDIzZGI4ODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYf9fQ8jOEdvj08ob1HYkrzrSRwoUF/wmj9G ca4xSDpSDGDqBU7znwuJQ2FXqwFGDCCMskH4jjtfAfC5fGOPPP5/0mxId0bT9FEp zugCy84uOqUO1GTDlwkYKLlq9uG1i8Yz6Ji6+FwKpm268eU5W6lIXMUSlBHSHy5P ewawmtpX5a01lFmjGa3+jCnko9Y+BcODqsbBX4fHm4nOEMdQc4bNZSkf0kHhIJf+ w6Ev3J9vkjwzQHfbhwrg+COPo2gdwl71KsDbPDbTs3xmOiTSsMbkzm8inMyjMqkH KuKBc7A1l70VF8qXc6/nxYyqLhzmP1ckh7cwNO1xto3pABCBFwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOgtyxnR2jNPsOuNGaZBTBEPpju4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTBhZThhNDItZDczNy0z YjEyLWIxODctYTBjZTljMGM0NDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjYUzSmWsm9RzVW48cS13ZHFunbiV1QLLqWv2JPGjy94kM0fdWhQv MmMk3gyZdIeU6MhlJniy5JK0QFg88etMyia47B7J6zlH4/jdgS9kXdlXkJgrLg8b pUIMRo2U2f4f+R4vcNcPkT25zja/eRDWPiWpRX/KyhS9B9tDOZzbkNH7MFdm8Gjh KBx3HL3Jq5POsAa3V1stZSCUOIkTQ3ZUn3f1uUeaz98ql5/t7mAmjuUKk2bZ1jCU iixCi2XUHDsGlACFJ6UG2kq4cLoQ4eZvLSwkksmMdFCI27tq7jJcrM0pgmnBRR/5 Y7BJpWBpSNFhk7cgfuufAL6033FIa6MWAg== -----END CERTIFICATE-----Generated at Sat May 10 19:17:27 2025 by rpki-client