$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa File: 9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa (raw, json) Hash identifier: 1wgnZ2+GJPt0zCyVtXFfKgmb3iAky6f7PKn/63j1/cE= Subject key identifier: 46:5E:3B:88:2B:25:6D:6E:1E:7C:3C:31:45:C3:EB:DF:86:36:63:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1B71E1C9AFD0B666B100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1b:71:e1:c9:af:d0:b6:66:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8577c871-16d5-4f81-8009-380972e4d21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:ff:ad:d6:e6:ab:9c:76:94:a5:a3:91:82: 96:91:fb:b7:66:d4:a6:a5:26:43:c9:54:ca:79:b9: b3:30:6e:6f:c8:79:75:ec:93:a8:f6:bc:00:ce:b7: a5:aa:1e:fb:e4:16:70:f5:68:65:08:f4:dc:17:bd: 4f:6d:52:67:0a:88:3b:ca:5b:80:c7:31:7b:ee:70: 43:50:78:28:12:f0:c7:ee:00:d8:2d:a6:fb:c2:15: c5:97:cc:df:0f:ff:7d:57:79:a3:bc:27:29:f5:e2: 0d:f3:61:62:c3:4f:66:b6:43:57:cc:c0:3c:c0:af: 7f:07:c6:c1:4a:b3:df:31:8a:39:c5:f8:4d:00:d3: fb:3b:88:13:c0:66:d9:43:8a:fb:f8:31:98:cb:5f: f4:16:c6:f1:e6:44:f2:f5:52:90:76:a8:97:56:65: 9d:f5:f8:bd:eb:fa:b3:9d:d8:37:54:6d:ea:75:c7: cf:5a:86:c8:d0:d0:70:db:17:ca:85:91:af:6e:0d: 20:05:9d:c9:e4:be:c3:dd:e9:e2:48:8c:6e:8f:00: da:3a:8c:06:95:45:a4:0a:0b:68:3d:f3:16:9c:6d: f6:48:12:ef:09:36:14:a8:5f:e4:76:9e:70:50:d1: 61:22:a9:ba:04:0d:45:68:0b:a2:d3:4a:eb:35:db: 33:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:3B:88:2B:25:6D:6E:1E:7C:3C:31:45:C3:EB:DF:86:36:63:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:66:59:00:84:2f:c5:86:04:58:8f:ed:20:29:fc:d5:ea:06: ff:5d:4f:4a:a1:6b:15:7b:84:5f:4b:60:47:78:be:56:ea:47: 3c:f9:cd:f2:3f:f8:93:4b:85:d7:0f:29:b5:dc:ee:1a:7b:99: 8a:1a:a6:94:b7:18:d6:ab:c0:4c:3e:b7:51:90:c1:7b:45:cc: 9c:aa:1d:7c:c4:fe:8d:ba:5c:02:44:ec:23:44:a3:38:eb:71: 65:e9:14:49:1b:f2:9a:31:00:73:0d:21:0a:67:a5:9a:ff:64: ec:00:e6:5d:24:dd:40:b9:69:88:ad:f4:26:a0:e4:65:c7:c9: c2:86:30:d4:ef:8c:2a:8a:04:b9:6c:31:f1:db:21:8f:f2:7e: 01:bf:9d:5a:9e:3f:05:cc:90:9c:f3:9a:d1:d7:21:44:f5:21: b2:e4:56:d5:cc:17:77:d7:70:6f:17:40:dc:4d:e8:75:88:4e: 7d:ff:cf:16:f8:0e:03:f1:89:5c:77:50:fe:f4:97:4f:cc:30: 7a:24:31:96:1a:5d:5e:c2:85:65:d1:ac:48:b8:07:5a:92:bb: 82:50:a0:4d:bb:cb:6a:3d:57:76:44:dd:69:69:b8:cc:d8:45: c5:f4:ae:af:4d:cb:58:b1:5b:95:d0:3b:8f:14:13:25:eb:d4: d6:40:a2:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxShtx4cmv0LZmsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODU3N2M4NzEtMTZkNS00ZjgxLTgwMDktMzgwOTcyZTRkMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBn/rdbmq5x2lKWjkYKWkfu3ZtSmpSZDyVTK ebmzMG5vyHl17JOo9rwAzrelqh775BZw9WhlCPTcF71PbVJnCog7yluAxzF77nBD UHgoEvDH7gDYLab7whXFl8zfD/99V3mjvCcp9eIN82Fiw09mtkNXzMA8wK9/B8bB SrPfMYo5xfhNANP7O4gTwGbZQ4r7+DGYy1/0Fsbx5kTy9VKQdqiXVmWd9fi96/qz ndg3VG3qdcfPWobI0NBw2xfKhZGvbg0gBZ3J5L7D3eniSIxujwDaOowGlUWkCgto PfMWnG32SBLvCTYUqF/kdp5wUNFhIqm6BA1FaAui00rrNdszJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEZeO4grJW1uHnw8MUXD69+GNmNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZiNWE3MDEtMWM0My0z ZjdhLTlkMGQtZDc4ZjcxZWQwYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAdmWQCEL8WGBFiP7SAp/NXqBv9dT0qhaxV7hF9LYEd4vlbqRzz5 zfI/+JNLhdcPKbXc7hp7mYoappS3GNarwEw+t1GQwXtFzJyqHXzE/o26XAJE7CNE ozjrcWXpFEkb8poxAHMNIQpnpZr/ZOwA5l0k3UC5aYit9Cag5GXHycKGMNTvjCqK BLlsMfHbIY/yfgG/nVqePwXMkJzzmtHXIUT1IbLkVtXMF3fXcG8XQNxN6HWITn3/ zxb4DgPxiVx3UP70l0/MMHokMZYaXV7ChWXRrEi4B1qSu4JQoE27y2o9V3ZE3Wlp uMzYRcX0rq9Ny1ixW5XQO48UEyXr1NZAos4= -----END CERTIFICATE-----Generated at Fri May 9 02:20:42 2025 by rpki-client