$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98e1335a-f4ba-3aa9-9d4b-f7783e7af78c.roa File: 98e1335a-f4ba-3aa9-9d4b-f7783e7af78c.roa (raw, json) Hash identifier: 5TwjpegakqDX67jFIptwe/yFPmUDGz1XUuz1HmuF+8c= Subject key identifier: DD:AA:86:07:B2:E6:5D:12:AE:7F:A2:2B:BF:78:32:C1:98:F7:23:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A46BC12F27C984F582700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98e1335a-f4ba-3aa9-9d4b-f7783e7af78c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:bc:12:f2:7c:98:4f:58:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=18607ad4-5e44-4bd2-999d-aed3accd18db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:c0:08:2a:a7:67:19:7e:15:9e:26:79:04: 8d:7d:18:27:b3:e6:c3:b9:44:b9:9d:c3:d5:33:13: 59:a8:24:d5:02:8f:e8:fe:b3:da:9a:ed:ec:b1:5a: 65:d2:5c:7b:10:33:67:56:59:e1:c8:01:d1:34:de: af:08:0b:37:a7:d3:34:74:e1:19:86:8e:7a:ce:23: c3:eb:d3:58:63:c0:74:66:de:33:de:fa:e0:b6:29: 64:7e:5a:b8:f7:75:6e:f9:c2:c5:2c:11:38:cb:be: 8f:2c:26:92:a6:75:3c:62:be:19:01:2a:26:7b:25: e0:66:5b:5d:69:46:e6:9a:15:cd:e1:b1:8e:00:6d: 4d:65:61:0c:24:5c:26:79:1e:3b:f6:2a:b2:74:65: 4d:1e:5d:6b:ef:c3:4e:70:5c:68:97:8e:8a:dd:6f: 93:f9:77:4f:c8:f9:90:7e:8a:cd:4e:90:93:26:17: 63:e7:0a:ea:af:a2:f1:6f:ef:70:12:21:57:19:8d: 5e:36:e0:28:12:72:49:5e:22:1e:3a:2a:17:db:5d: 6d:9e:e8:33:ed:f1:a8:68:33:03:72:c4:e0:fb:47: 0c:bc:fb:b5:a5:f7:43:42:e3:0f:4f:f2:3b:2b:cf: c4:80:dd:69:6c:9a:70:bd:14:bf:f0:f4:45:1d:26: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AA:86:07:B2:E6:5D:12:AE:7F:A2:2B:BF:78:32:C1:98:F7:23:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98e1335a-f4ba-3aa9-9d4b-f7783e7af78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:40:19:80:9f:1e:ef:44:72:6a:ed:c7:68:bc:e3:85:d1:db: 49:f8:59:17:ea:b9:16:47:49:24:28:3a:da:6a:22:db:18:f3: 8f:eb:27:ce:06:a8:5c:6c:74:80:45:48:66:07:d1:c4:ca:24: 9c:15:31:ec:18:6b:5b:2e:32:07:4c:67:e3:72:0e:d1:3d:3c: b7:37:f7:50:10:3a:01:58:25:df:5b:60:47:a6:a1:82:6d:95: 55:d1:66:a2:09:8d:a3:b2:b6:2f:15:33:f8:42:d7:d4:76:84: 37:9d:e1:90:7b:af:62:50:fe:de:24:c9:c1:c9:43:05:eb:43: 07:c4:58:d9:85:5b:ff:b4:91:09:02:94:86:5a:3f:ba:49:61: db:98:ac:9d:24:3d:c0:85:bd:fd:90:d8:5c:c8:30:0a:b9:a3: 09:33:82:db:36:e0:dd:4a:69:56:2f:37:c5:bb:2d:42:34:6f: 7a:5c:28:a5:d3:b8:86:5e:b7:90:25:44:de:2a:a8:7d:af:32: 8c:5b:dc:51:44:ab:69:59:50:67:5f:67:db:11:f5:5b:49:6a: 8b:3a:2c:a3:28:82:28:8a:d0:de:61:e2:69:2f:b6:ff:e5:6a: a0:16:f0:7f:dc:d4:9f:70:97:7a:c3:9f:04:08:c7:e4:d2:cd: 2c:f1:23:b8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSka8EvJ8mE9YJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTg2MDdhZDQtNWU0NC00YmQyLTk5OWQtYWVkM2FjY2QxOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbbACCqnZxl+FZ4meQSNfRgns+bDuUS5ncPV MxNZqCTVAo/o/rPamu3ssVpl0lx7EDNnVlnhyAHRNN6vCAs3p9M0dOEZho56ziPD 69NYY8B0Zt4z3vrgtilkflq493Vu+cLFLBE4y76PLCaSpnU8Yr4ZASomeyXgZltd aUbmmhXN4bGOAG1NZWEMJFwmeR479iqydGVNHl1r78NOcFxol46K3W+T+XdPyPmQ forNTpCTJhdj5wrqr6Lxb+9wEiFXGY1eNuAoEnJJXiIeOioX211tnugz7fGoaDMD csTg+0cMvPu1pfdDQuMPT/I7K8/EgN1pbJpwvRS/8PRFHSbLZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN2qhgey5l0Srn+iK794MsGY9yMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOThlMTMzNWEtZjRiYS0z YWE5LTlkNGItZjc3ODNlN2FmNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAg0AZgJ8e70Ryau3HaLzjhdHbSfhZF+q5FkdJJCg62moi2xjzj+sn zgaoXGx0gEVIZgfRxMoknBUx7BhrWy4yB0xn43IO0T08tzf3UBA6AVgl31tgR6ah gm2VVdFmogmNo7K2LxUz+ELX1HaEN53hkHuvYlD+3iTJwclDBetDB8RY2YVb/7SR CQKUhlo/uklh25isnSQ9wIW9/ZDYXMgwCrmjCTOC2zbg3UppVi83xbstQjRvelwo pdO4hl63kCVE3iqofa8yjFvcUUSraVlQZ19n2xH1W0lqizosoyiCKIrQ3mHiaS+2 /+VqoBbwf9zUn3CXesOfBAjH5NLNLPEjuA== -----END CERTIFICATE-----Generated at Fri May 9 12:08:42 2025 by rpki-client