$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/add55bdb-6ba7-3da3-ac0a-b35270aad630.roa File: add55bdb-6ba7-3da3-ac0a-b35270aad630.roa (raw, json) Hash identifier: hmns8hqHQCkdzjSveIGUB/k3Z04hZ/Zk/j/k1UuEGzU= Subject key identifier: 59:B3:06:2C:E8:55:E6:DF:E8:38:11:FF:14:BE:9E:4A:79:0C:CF:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A20E428D1692172EF2740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/add55bdb-6ba7-3da3-ac0a-b35270aad630.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2607:fd68::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:20:e4:28:d1:69:21:72:ef:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4f21d1fb-3207-413e-bf75-557edcd1864f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:27:ac:b0:8c:49:75:7e:92:9b:fa:8d:e5: cb:1e:4e:e7:a5:16:22:9e:e7:00:08:7a:31:1b:2e: dc:95:76:a8:dc:08:48:44:86:39:cb:4c:70:8f:58: 12:ee:4d:52:06:30:07:3e:b3:95:1b:d1:5a:95:c3: f3:7b:72:3a:99:8e:d8:87:7e:28:65:01:27:63:13: f8:40:1a:0c:1f:e2:9d:e0:8a:6b:0f:e3:1c:77:fe: ab:b1:7e:cc:ca:1b:f1:d2:19:a8:a5:4c:08:5f:7f: f3:bc:8b:07:5e:93:d9:42:a8:60:e8:98:a5:3b:9e: bf:3b:ea:4c:7e:0d:b0:0b:cc:87:3e:b6:89:2a:08: d2:91:2c:f6:cb:8b:ab:72:fb:0c:03:57:b4:b4:74: 61:0b:25:74:99:49:56:0a:8b:64:41:69:35:b7:d9: 94:91:aa:8d:c2:ba:a2:1f:e1:37:42:e3:51:46:b2: fd:3a:b3:93:f7:7d:02:d0:8c:c0:15:7b:88:34:a2: b1:22:8c:31:d3:df:ed:73:7d:dd:10:cf:f3:64:77: 6b:83:5e:26:54:ee:6b:26:20:89:e9:0b:76:8f:3f: b1:f5:86:4d:c0:df:89:a1:80:31:0d:f7:1d:4c:5c: 17:62:31:16:77:d4:9f:4f:0d:40:dd:85:14:2b:f3: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B3:06:2C:E8:55:E6:DF:E8:38:11:FF:14:BE:9E:4A:79:0C:CF:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/add55bdb-6ba7-3da3-ac0a-b35270aad630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fd68::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1a:e5:bd:1d:ee:82:89:15:87:19:ac:7d:47:fe:85:69:1d: b3:c5:47:81:09:46:b0:a1:58:1f:49:6d:36:b4:c7:1f:e5:8f: 29:09:b3:4f:37:e9:d3:4d:e8:3b:18:b5:f6:23:5a:75:af:5e: 49:16:75:d7:d2:95:2f:2b:94:00:95:1d:b8:2c:1c:2b:f8:0b: 0d:ef:5e:f8:a9:f8:12:aa:3b:c5:3f:ac:32:47:b3:02:e2:5b: 54:d3:cc:c3:cd:3f:4f:33:c8:59:8d:1d:5d:d8:26:f9:1b:1e: 2f:8e:be:ad:a9:a7:ae:ec:b3:4d:73:52:13:dd:eb:08:fc:71: 91:78:79:17:36:f0:19:a7:61:c9:5e:2a:cc:21:c5:e7:53:24: b1:8f:61:0b:d0:b9:c3:50:35:ad:80:18:ec:e7:e7:e0:62:53: 18:85:04:e7:72:e9:cf:54:06:88:60:ff:df:1d:66:8a:5d:7e: c0:a0:5a:e0:bd:9e:d0:b8:ce:aa:df:f0:49:5f:66:62:ee:b1: 46:3d:dc:f1:40:a9:61:1e:1c:96:02:23:53:d9:be:99:7f:20: f0:43:3e:d4:95:79:0a:89:42:8e:fc:7f:4a:e4:64:f4:ae:73: 8c:f3:ec:55:79:7e:c7:cf:05:b5:a3:1b:81:73:f8:54:ef:e9: 19:63:3a:78 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSiDkKNFpIXLvJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGYyMWQxZmItMzIwNy00MTNlLWJmNzUtNTU3ZWRjZDE4NjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MonrLCMSXV+kpv6jeXLHk7npRYinucACHox Gy7clXao3AhIRIY5y0xwj1gS7k1SBjAHPrOVG9FalcPze3I6mY7Yh34oZQEnYxP4 QBoMH+Kd4IprD+Mcd/6rsX7Myhvx0hmopUwIX3/zvIsHXpPZQqhg6JilO56/O+pM fg2wC8yHPraJKgjSkSz2y4urcvsMA1e0tHRhCyV0mUlWCotkQWk1t9mUkaqNwrqi H+E3QuNRRrL9OrOT930C0IzAFXuINKKxIowx09/tc33dEM/zZHdrg14mVO5rJiCJ 6Qt2jz+x9YZNwN+JoYAxDfcdTFwXYjEWd9SfTw1A3YUUK/Nh6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFmzBizoVebf6DgR/xS+nkp5DM98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWRkNTViZGItNmJhNy0z ZGEzLWFjMGEtYjM1MjcwYWFkNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9aDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvGuW9He6CiRWHGax9R/6FaR2zxUeBCUawoVgfSW02tMcf5Y8pCbNP N+nTTeg7GLX2I1p1r15JFnXX0pUvK5QAlR24LBwr+AsN7174qfgSqjvFP6wyR7MC 4ltU08zDzT9PM8hZjR1d2Cb5Gx4vjr6tqaeu7LNNc1IT3esI/HGReHkXNvAZp2HJ XirMIcXnUySxj2EL0LnDUDWtgBjs5+fgYlMYhQTncunPVAaIYP/fHWaKXX7AoFrg vZ7QuM6q3/BJX2Zi7rFGPdzxQKlhHhyWAiNT2b6ZfyDwQz7UlXkKiUKO/H9K5GT0 rnOM8+xVeX7HzwW1oxuBc/hU7+kZYzp4 -----END CERTIFICATE-----Generated at Wed May 7 08:30:02 2025 by rpki-client