$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa File: a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa (raw, json) Hash identifier: nlSqOpTHz4t5NBpFfbyvHHhZf9oaBJeV2BBQsPTLRnA= Subject key identifier: 49:F2:28:36:90:D8:B3:DD:1A:FB:8F:97:BF:A6:4B:92:C5:90:56:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A471F48CA1903AA81B400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:1f:48:ca:19:03:aa:81:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e6e7b5c8-d10b-4c30-b705-00d68f237b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:1d:1e:0c:fa:12:1a:37:7c:27:79:54:80: ca:44:ad:77:f1:b0:35:6a:87:57:b6:69:d6:dd:05: e5:fe:18:28:ef:d2:1f:3c:33:be:66:cc:21:7d:69: f3:10:0c:f6:1d:48:a7:1a:91:7f:62:e5:27:4f:41: 2d:f5:0b:9f:bf:1e:26:58:ee:68:5a:49:90:aa:4b: d5:94:11:d0:3e:52:1a:93:fa:f9:1e:0a:12:86:cc: 18:1a:50:2c:81:3a:6b:23:0f:a0:33:19:be:4b:66: 3b:a1:8e:bc:57:5f:d0:53:05:a2:bc:54:53:7e:22: 2e:ee:0a:d9:cd:86:f6:30:b0:af:d0:c7:f2:b4:b5: 16:30:d1:33:57:ee:50:1a:7c:58:de:9c:1e:8f:a8: 46:f3:09:ff:f6:5a:34:17:6c:7e:fa:63:14:51:73: c9:92:cd:dc:f9:d4:66:f2:5e:d9:6c:31:1e:a0:6c: 86:f0:72:a1:fa:b5:4e:ca:02:58:b0:1a:f2:d5:f7: 58:f7:e4:e7:16:3a:79:c2:9c:a3:50:8e:2e:64:61: 6e:e3:0b:cc:13:89:3b:a1:e3:b2:ad:01:09:58:65: fd:e7:f4:40:c0:db:a4:09:0a:77:aa:97:4b:7b:99: 63:f2:09:5e:e7:a6:e9:c1:6c:b5:21:75:dd:6d:de: 56:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F2:28:36:90:D8:B3:DD:1A:FB:8F:97:BF:A6:4B:92:C5:90:56:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3a70dc4-28c6-31de-b1c5-4eb4a868d450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ee:fb:14:f8:14:b4:d7:f7:db:70:ed:fb:96:dc:40:1c:cd: 42:56:89:a2:4a:bd:c2:e2:04:a0:fc:d1:5e:5f:c7:52:14:a4: 8f:bc:3c:bf:51:f0:1b:2d:27:69:1c:42:21:6b:0d:89:25:c8: d7:94:06:83:f5:bf:8e:8b:cd:d8:76:b5:49:58:0b:58:e1:94: 5d:57:03:3c:73:ad:db:09:1c:d1:8b:cf:3b:0c:11:0f:63:c8: ee:e2:b0:29:95:35:8c:b0:4d:2d:4e:96:53:05:e1:15:cd:82: a4:14:e3:dd:64:7a:1b:43:70:72:bd:9f:29:16:68:60:76:74: 6e:a4:71:76:72:08:eb:88:d9:36:69:3c:5f:71:32:10:c6:8d: 55:90:6e:7b:99:94:d7:cf:c5:88:5f:aa:a5:40:3b:b7:67:4e: 07:5b:e6:6e:0a:3a:31:c7:dd:22:d0:d5:c0:14:25:87:d0:ec: 25:fa:25:cf:ce:86:f2:cf:ac:41:45:9c:d3:99:cc:7b:3c:34: b1:b9:e9:e0:3c:8d:2c:8c:61:1c:7b:46:85:26:ea:fb:dd:57: 5c:53:a2:c7:b0:ab:90:cc:d6:bb:84:89:72:f5:d7:4c:d6:93: f2:b7:e3:6f:25:f8:dd:f8:a4:48:1e:ca:35:4e:05:5d:25:a5: 2d:54:0a:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkcfSMoZA6qBtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTZlN2I1YzgtZDEwYi00YzMwLWI3MDUtMDBkNjhmMjM3YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FcdHgz6Eho3fCd5VIDKRK138bA1aodXtmnW 3QXl/hgo79IfPDO+ZswhfWnzEAz2HUinGpF/YuUnT0Et9Qufvx4mWO5oWkmQqkvV lBHQPlIak/r5HgoShswYGlAsgTprIw+gMxm+S2Y7oY68V1/QUwWivFRTfiIu7grZ zYb2MLCv0MfytLUWMNEzV+5QGnxY3pwej6hG8wn/9lo0F2x++mMUUXPJks3c+dRm 8l7ZbDEeoGyG8HKh+rVOygJYsBry1fdY9+TnFjp5wpyjUI4uZGFu4wvME4k7oeOy rQEJWGX95/RAwNukCQp3qpdLe5lj8gle56bpwWy1IXXdbd5WhwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEnyKDaQ2LPdGvuPl7+mS5LFkFbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNhNzBkYzQtMjhjNi0z MWRlLWIxYzUtNGViNGE4NjhkNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAie77FPgUtNf323Dt+5bcQBzNQlaJokq9wuIEoPzRXl/HUhSkj7w8 v1HwGy0naRxCIWsNiSXI15QGg/W/jovN2Ha1SVgLWOGUXVcDPHOt2wkc0YvPOwwR D2PI7uKwKZU1jLBNLU6WUwXhFc2CpBTj3WR6G0Nwcr2fKRZoYHZ0bqRxdnII64jZ Nmk8X3EyEMaNVZBue5mU18/FiF+qpUA7t2dOB1vmbgo6McfdItDVwBQlh9DsJfol z86G8s+sQUWc05nMezw0sbnp4DyNLIxhHHtGhSbq+91XXFOix7CrkMzWu4SJcvXX TNaT8rfjbyX43fikSB7KNU4FXSWlLVQK9A== -----END CERTIFICATE-----Generated at Sat May 10 08:00:08 2025 by rpki-client