$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a64161b8-d518-3362-a517-e8a1b3c85e63.roa File: a64161b8-d518-3362-a517-e8a1b3c85e63.roa (raw, json) Hash identifier: BVQJ2Gn0tPs1ZLiVElRv2P3Bzovh6GtdEB8i/SWXV6M= Subject key identifier: C8:A6:29:52:8B:C9:FF:1D:A4:2A:CE:8E:02:AD:62:2B:54:9B:54:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1CE4AA488FDE9A9DD280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a64161b8-d518-3362-a517-e8a1b3c85e63.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1c:e4:aa:48:8f:de:9a:9d:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ae52a243-ce1d-47ab-a48f-9add815c9270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:61:14:f8:a9:07:ce:18:76:71:2f:90:2d: 34:38:6c:9b:c2:24:07:e7:4d:76:ae:24:b9:a0:c5: 25:e5:05:61:05:a0:a5:8e:45:d0:51:08:08:5c:26: 5b:e3:40:fa:74:5f:32:88:b3:17:5d:ea:9d:e1:4c: 43:de:ab:33:60:d1:89:c3:1e:22:90:e0:f5:08:3b: a6:29:4a:0a:75:61:da:b3:a6:77:5b:5a:b0:38:30: 69:0f:4b:65:20:ea:d8:0e:a9:f7:0d:4b:14:05:6c: 06:07:ed:7c:19:5c:ab:fa:17:65:63:02:98:8d:cc: ca:74:71:14:f5:d6:dd:6e:7d:4c:d9:8c:9c:d9:2f: e3:c9:6d:59:37:0f:9e:a9:a6:a9:ee:a5:f9:56:28: 0a:86:41:c7:7a:dd:4a:c6:80:86:85:4f:72:f1:d0: 7f:bd:0d:b3:21:57:36:fa:e5:08:7f:0c:22:fd:9a: 1d:69:a3:d0:d5:ff:18:ff:58:a0:a3:d8:c8:85:d0: 8a:e8:01:9d:26:16:62:5c:9e:c1:c6:ed:27:c1:9e: a9:36:04:cb:ac:49:50:d7:b6:e1:23:60:9d:73:9d: a2:0b:15:3c:dc:b1:65:0d:0a:56:92:68:8c:e2:0f: c1:8a:69:ae:a0:19:bf:62:85:e5:96:42:63:7c:4e: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A6:29:52:8B:C9:FF:1D:A4:2A:CE:8E:02:AD:62:2B:54:9B:54:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a64161b8-d518-3362-a517-e8a1b3c85e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:93:96:4a:5d:7f:cd:42:0c:2e:86:5a:60:00:b9:b6:1c:b7: e3:2a:e8:ce:12:ef:d7:30:e3:65:10:4d:79:64:a2:eb:ba:0e: f8:55:e9:de:c1:62:6b:31:fe:fe:cf:f1:bf:6d:0b:57:31:d5: 72:ef:f5:72:d6:31:8c:46:a8:68:79:c3:a1:ce:1b:c0:9c:e9: b0:10:2c:5b:72:da:07:ca:8b:1b:16:ee:e7:95:e1:a5:89:74: 4f:ba:db:0a:af:92:73:47:7d:4e:8e:09:e8:fd:a9:e1:5f:ef: a1:97:3a:76:41:76:36:fe:c7:62:11:53:74:34:11:9c:95:1a: d3:a2:c6:70:5e:66:87:7d:e1:d5:3f:b3:65:d7:67:e7:f1:65: 37:12:fe:4c:96:4c:ae:f8:05:ca:f7:fc:fd:e8:62:a4:7f:27: a4:22:46:ab:32:d7:d4:eb:48:08:81:b0:d5:92:70:d2:92:38: c7:dc:c4:91:9e:12:0e:59:9b:b6:38:26:76:8c:b4:7d:e5:e5: 12:ad:e1:35:ec:0e:3f:67:72:55:c1:21:7d:45:91:bc:69:9e: 57:ff:55:81:63:f3:a8:37:15:3a:44:19:fb:f3:9f:e8:25:de: 23:5c:c3:72:53:ed:df:00:a8:cd:9c:6e:66:0e:98:e2:15:b3: ee:dd:1a:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxShzkqkiP3pqd0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YWU1MmEyNDMtY2UxZC00N2FiLWE0OGYtOWFkZDgxNWM5MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXZhFPipB84YdnEvkC00OGybwiQH5012riS5 oMUl5QVhBaCljkXQUQgIXCZb40D6dF8yiLMXXeqd4UxD3qszYNGJwx4ikOD1CDum KUoKdWHas6Z3W1qwODBpD0tlIOrYDqn3DUsUBWwGB+18GVyr+hdlYwKYjczKdHEU 9dbdbn1M2Yyc2S/jyW1ZNw+eqaap7qX5VigKhkHHet1KxoCGhU9y8dB/vQ2zIVc2 +uUIfwwi/ZodaaPQ1f8Y/1igo9jIhdCK6AGdJhZiXJ7Bxu0nwZ6pNgTLrElQ17bh I2Cdc52iCxU83LFlDQpWkmiM4g/BimmuoBm/YoXllkJjfE50UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMimKVKLyf8dpCrOjgKtYitUm1T1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY0MTYxYjgtZDUxOC0z MzYyLWE1MTctZThhMWIzYzg1ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIKTlkpdf81CDC6GWmAAubYct+Mq6M4S79cw42UQTXlkouu6DvhV 6d7BYmsx/v7P8b9tC1cx1XLv9XLWMYxGqGh5w6HOG8Cc6bAQLFty2gfKixsW7ueV 4aWJdE+62wqvknNHfU6OCej9qeFf76GXOnZBdjb+x2IRU3Q0EZyVGtOixnBeZod9 4dU/s2XXZ+fxZTcS/kyWTK74Bcr3/P3oYqR/J6QiRqsy19TrSAiBsNWScNKSOMfc xJGeEg5Zm7Y4JnaMtH3l5RKt4TXsDj9nclXBIX1Fkbxpnlf/VYFj86g3FTpEGfvz n+gl3iNcw3JT7d8AqM2cbmYOmOIVs+7dGhc= -----END CERTIFICATE-----Generated at Sun May 11 09:11:11 2025 by rpki-client