$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa File: 9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa (raw, json) Hash identifier: meCfTsAnmk0FfaDalt0VUdp/cqPIMoOaVv+IKY9SpxA= Subject key identifier: FE:CC:E6:10:20:C4:4D:60:8B:2D:92:73:F3:8F:E1:D9:EA:41:8F:9E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1DB21FD6A6766A18EC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:1100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:b2:1f:d6:a6:76:6a:18:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=13f83d09-27e8-4779-94d4-39cdad49948c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:42:4f:da:4b:2b:17:a9:95:ef:db:90:93: 45:0b:02:43:6a:38:61:9b:99:0d:e6:7b:8f:ad:02: 1d:f5:7d:9f:ae:a5:bb:a3:b1:2a:71:85:76:07:d6: c7:1a:44:a4:f8:d1:29:10:7d:0a:95:e0:68:4d:2c: 37:a1:14:94:86:16:ba:2d:82:95:88:16:78:34:e9: 6d:97:13:96:2c:5a:05:e2:66:95:03:fb:e3:fc:39: 0e:98:1e:73:b6:68:44:c0:e8:56:f5:32:50:98:34: 0a:90:ab:c6:11:4e:b0:ab:a7:42:1f:ac:41:12:8e: 53:a3:f8:48:98:5a:d1:6b:92:07:88:20:64:3e:db: de:b8:6f:21:9b:2d:76:8c:7a:96:02:d4:76:7f:d3: 49:3b:f0:6d:d3:f6:3b:96:45:af:55:7d:4b:9a:ac: 11:22:46:f1:d2:6f:40:31:ef:f2:41:72:02:9b:80: d7:e2:6f:7a:c4:fc:01:75:cd:88:11:4d:63:b3:9f: cc:84:99:e8:60:5c:ff:8c:2a:e4:8c:85:9e:9f:b0: d6:dc:d3:dc:30:87:ff:c7:09:ca:2a:02:37:08:82: 29:78:ec:77:79:20:c4:d3:fd:3a:0f:43:69:aa:07: 40:03:e4:7a:55:f2:61:e4:91:7f:78:4e:42:69:51: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CC:E6:10:20:C4:4D:60:8B:2D:92:73:F3:8F:E1:D9:EA:41:8F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9662a76f-871b-3ddf-b6f0-04f78b6f0d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:91:94:88:9d:54:48:55:df:89:1f:56:4f:5b:33:e2:71:7d: 73:5b:06:f4:92:09:35:cd:7b:a4:e8:36:91:4b:71:3c:d6:8b: 3c:08:c7:2c:5c:3e:91:8b:a6:8e:c4:8a:fb:db:82:0c:35:0d: 93:c5:ac:d1:49:64:7f:10:74:8b:91:40:12:b1:30:c6:84:9d: d6:59:4d:c7:6a:cc:0f:21:f2:ef:2b:5e:0a:97:56:9c:0e:b7: 48:59:82:c3:6f:ca:12:4d:df:32:a7:25:00:8a:37:d2:2a:7d: f7:a4:4f:32:0e:ba:f2:35:4f:db:b5:6e:cf:f9:f1:37:3b:05: 16:5d:08:d2:9c:60:2b:46:04:24:43:94:cc:3b:1d:fb:4b:14: 14:e9:b3:ff:44:a1:bc:dd:e1:72:0a:38:c0:1c:7b:19:e1:b6: 1c:eb:7e:54:c5:1c:13:2d:46:fa:cc:f9:fd:0e:54:ff:e1:6c: d5:7e:57:f4:b4:76:6e:68:a8:bf:6f:74:34:51:13:5b:d7:59: ad:91:f7:75:5c:ce:44:55:03:8c:4d:43:b2:24:bf:f7:f5:40: 0a:b7:ee:46:5e:bb:53:6a:44:df:f0:1f:31:a1:60:a4:68:4a: cc:d4:9d:5e:1c:eb:f4:d6:0d:60:5f:25:19:70:19:dc:48:cc: cc:43:5c:ce -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh2yH9amdmoY7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTNmODNkMDktMjdlOC00Nzc5LTk0ZDQtMzljZGFkNDk5NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3FCT9pLKxeple/bkJNFCwJDajhhm5kN5nuP rQId9X2frqW7o7EqcYV2B9bHGkSk+NEpEH0KleBoTSw3oRSUhha6LYKViBZ4NOlt lxOWLFoF4maVA/vj/DkOmB5ztmhEwOhW9TJQmDQKkKvGEU6wq6dCH6xBEo5To/hI mFrRa5IHiCBkPtveuG8hmy12jHqWAtR2f9NJO/Bt0/Y7lkWvVX1LmqwRIkbx0m9A Me/yQXICm4DX4m96xPwBdc2IEU1js5/MhJnoYFz/jCrkjIWen7DW3NPcMIf/xwnK KgI3CIIpeOx3eSDE0/06D0NpqgdAA+R6VfJh5JF/eE5CaVEAMwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP7M5hAgxE1giy2Sc/OP4dnqQY+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTY2MmE3NmYtODcxYi0z ZGRmLWI2ZjAtMDRmNzhiNmYwZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQ5GUiJ1USFXfiR9WT1sz4nF9c1sG9JIJNc17pOg2kUtxPNaLPAjH LFw+kYumjsSK+9uCDDUNk8Ws0UlkfxB0i5FAErEwxoSd1llNx2rMDyHy7yteCpdW nA63SFmCw2/KEk3fMqclAIo30ip996RPMg668jVP27Vuz/nxNzsFFl0I0pxgK0YE JEOUzDsd+0sUFOmz/0ShvN3hcgo4wBx7GeG2HOt+VMUcEy1G+sz5/Q5U/+Fs1X5X 9LR2bmiov290NFETW9dZrZH3dVzORFUDjE1DsiS/9/VACrfuRl67U2pE3/AfMaFg pGhKzNSdXhzr9NYNYF8lGXAZ3EjMzENczg== -----END CERTIFICATE-----Generated at Thu May 8 00:26:21 2025 by rpki-client