$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa File: a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa (raw, json) Hash identifier: Wec1CUWEIAQeev1vzFILhyC1cHN6EP7zpFHBwvvASKA= Subject key identifier: 15:78:29:5A:10:00:8F:DE:99:D1:9D:51:49:04:C7:90:DA:8F:28:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A45F630CC5237CBC3A500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:45:f6:30:cc:52:37:cb:c3:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e2d10f40-9c35-4fb5-b607-efa6587ddb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:a9:59:57:8d:ab:2e:2d:18:9e:57:8f:6e: f0:73:35:04:ec:11:e8:4c:5a:54:1a:d9:a0:8e:16: 3d:d0:00:bf:94:9d:5b:72:4b:6f:69:0a:f2:60:64: ca:c8:6e:41:12:d2:20:c7:30:ec:dc:f4:dd:53:25: 2d:fc:a0:20:7b:0b:28:ee:f6:7e:9f:6e:86:08:3b: 50:af:1c:d7:be:7a:3f:1c:04:8e:81:e4:52:bc:43: c6:f9:f3:be:5a:53:b3:6f:52:ea:51:94:08:67:f6: 29:1a:54:50:49:ef:c4:72:d7:77:e8:9a:3d:9a:4e: 1b:44:4c:3f:86:1e:29:c2:cc:b0:fd:01:58:d2:d0: 83:e5:92:0a:d0:ee:90:7e:0d:83:69:fa:19:7c:aa: bd:fa:c3:32:1a:fe:98:f0:c4:db:81:3a:72:cf:48: 0f:8e:06:f3:6c:fb:82:05:a2:8f:4e:60:83:d2:e3: 87:58:c5:32:06:01:e1:00:e2:14:27:b0:ff:28:53: ad:c8:89:15:d0:2b:7e:2a:ac:ee:48:b3:e2:b5:43: d0:f7:c7:36:e6:49:bf:e9:2b:81:24:61:c7:fd:f9: 88:47:6a:94:d3:95:e8:3b:bb:7c:13:e9:9d:1a:e5: 5c:9a:12:78:76:24:26:bc:f1:56:4e:49:a9:9a:0b: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:78:29:5A:10:00:8F:DE:99:D1:9D:51:49:04:C7:90:DA:8F:28:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3c79f28-fa8a-3267-a6f0-d1099d604c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:4d:2f:cf:fd:18:01:63:34:5e:0d:5f:1e:d1:df:23:b9:c1: e0:52:82:3f:c9:7d:76:77:86:ec:a9:41:0f:94:20:f4:58:ee: 4a:b6:a9:6e:a3:ee:5d:d3:1c:47:b0:6c:46:7b:f9:be:3c:1f: eb:f8:71:36:90:dc:f7:27:da:50:a2:ab:56:8e:04:ff:bc:57: 6b:9a:15:22:59:f4:92:6a:bf:fb:a0:fc:97:76:29:50:25:5a: 9d:7a:c7:cf:9a:4a:ec:cd:6b:43:de:58:1e:77:00:3a:75:2a: 8f:25:ce:4e:f4:d7:9f:39:0c:db:17:84:a4:eb:97:f9:d9:44: eb:ce:7d:89:99:29:7c:3b:85:72:9b:9f:5e:bc:e8:08:2e:70: 30:ab:a7:fe:f7:1a:67:2a:cd:d3:e3:d1:42:35:55:ca:0d:06: cd:4d:e4:95:e0:d3:d4:8c:32:4b:92:80:32:de:65:6b:cc:a3: c9:73:24:31:4d:23:85:1f:32:a2:c5:c9:3f:a2:63:74:44:61: 40:fa:dc:76:77:10:89:e7:c6:36:e8:47:22:6b:f4:62:53:b8: 8a:56:7d:1b:79:83:3c:49:bc:c3:69:b7:6a:5b:67:6d:32:fd: ae:3c:0b:59:56:05:0e:67:b5:bb:bf:1d:49:32:68:4c:24:e9: 7c:dc:9c:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkX2MMxSN8vDpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTJkMTBmNDAtOWMzNS00ZmI1LWI2MDctZWZhNjU4N2RkYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEGpWVeNqy4tGJ5Xj27wczUE7BHoTFpUGtmg jhY90AC/lJ1bcktvaQryYGTKyG5BEtIgxzDs3PTdUyUt/KAgewso7vZ+n26GCDtQ rxzXvno/HASOgeRSvEPG+fO+WlOzb1LqUZQIZ/YpGlRQSe/Ectd36Jo9mk4bREw/ hh4pwsyw/QFY0tCD5ZIK0O6Qfg2DafoZfKq9+sMyGv6Y8MTbgTpyz0gPjgbzbPuC BaKPTmCD0uOHWMUyBgHhAOIUJ7D/KFOtyIkV0Ct+KqzuSLPitUPQ98c25km/6SuB JGHH/fmIR2qU05XoO7t8E+mdGuVcmhJ4diQmvPFWTkmpmgs0WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBV4KVoQAI/emdGdUUkEx5DajygWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNjNzlmMjgtZmE4YS0z MjY3LWE2ZjAtZDEwOTlkNjA0YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNNL8/9GAFjNF4NXx7R3yO5weBSgj/JfXZ3huypQQ+UIPRY7kq2 qW6j7l3THEewbEZ7+b48H+v4cTaQ3Pcn2lCiq1aOBP+8V2uaFSJZ9JJqv/ug/Jd2 KVAlWp16x8+aSuzNa0PeWB53ADp1Ko8lzk701585DNsXhKTrl/nZROvOfYmZKXw7 hXKbn1686AgucDCrp/73GmcqzdPj0UI1VcoNBs1N5JXg09SMMkuSgDLeZWvMo8lz JDFNI4UfMqLFyT+iY3REYUD63HZ3EInnxjboRyJr9GJTuIpWfRt5gzxJvMNpt2pb Z20y/a48C1lWBQ5ntbu/HUkyaEwk6XzcnLE= -----END CERTIFICATE-----Generated at Wed May 7 21:42:33 2025 by rpki-client