$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa File: af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa (raw, json) Hash identifier: rGmx/SBZ+kyOOYgRsk/ZjUv2/uXXrIyYXHSs0jeEkRg= Subject key identifier: 99:1C:EF:67:81:D4:6A:25:BC:3E:0B:09:14:DF:41:E7:96:22:81:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A47E0C5FE9B1F114C1020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2607:f400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:e0:c5:fe:9b:1f:11:4c:10:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7a00d592-0a28-4a2f-b207-8c7bd8130cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:9b:68:51:00:a1:9a:2d:f0:cd:13:c7:a2: a2:6c:4b:1d:f7:a6:1b:4d:ea:68:84:89:a6:7d:bf: 54:54:5f:51:a8:7d:f9:98:8a:ea:d2:22:e4:fb:6e: 20:16:69:57:35:4e:20:ef:93:1c:9a:b3:1d:da:ef: 6e:ed:9a:cb:1a:ff:2f:da:fa:c7:3f:7f:6a:a5:ed: 5e:b4:fd:8e:0d:6e:73:e0:18:7a:e9:01:d2:37:26: 95:b4:64:3c:dd:ee:76:6f:da:a5:0b:9e:1c:1d:61: 51:10:fc:b4:ce:b0:f2:b2:56:44:aa:28:f6:9e:01: ee:05:88:ab:be:07:68:d5:e6:1a:e8:1d:d4:26:c2: 2f:cf:d9:d2:66:33:25:68:1b:0b:db:d7:85:b6:dd: 60:fa:d3:a6:cc:82:f5:f0:9d:24:01:fd:58:5e:95: 9d:1a:5e:76:f0:0c:98:c3:b8:23:2f:56:ad:c6:77: d2:79:32:4f:0f:fb:a2:43:66:b0:be:f6:0a:72:20: fb:7b:34:5f:06:a9:c9:76:ca:f5:37:47:95:4b:ed: 94:d9:48:ab:74:83:f7:dc:41:ea:a3:de:d5:5f:47: 20:0f:8c:86:74:0a:fc:7b:7a:29:ac:9b:a5:d6:9b: 30:76:c2:cb:b2:62:1a:ca:5b:bf:88:78:4c:52:03: b4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1C:EF:67:81:D4:6A:25:BC:3E:0B:09:14:DF:41:E7:96:22:81:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:df:64:b9:86:a1:d6:11:b5:22:ce:15:f6:23:a3:f6:c3:41: be:ad:ec:27:9e:7b:84:58:35:3e:68:7d:02:25:ea:37:79:86: eb:1d:83:ec:38:c0:b6:e4:e2:e8:e0:13:59:9c:94:23:1f:10: e5:ab:ac:b6:90:d2:a4:57:01:3a:43:de:75:81:c9:30:84:38: 68:a1:88:d6:10:08:c5:17:93:70:d1:0e:71:9a:06:a4:80:34: 64:03:46:39:43:03:fc:0b:3a:38:dc:7b:33:3a:77:42:bc:b6: 4f:93:68:fd:2d:d1:9d:0c:5f:f5:0e:5c:42:5b:55:8b:a1:e1: a8:19:33:45:c7:f5:64:0f:b7:d0:a5:11:b4:b3:db:89:04:c4: 91:3c:6d:68:bf:ac:e2:bf:35:1f:a9:d1:1c:f4:49:15:bc:49: 67:a6:12:46:ed:14:d3:dc:34:85:a2:19:94:1b:f3:bb:20:4c: 81:1c:26:29:ca:18:49:0c:c0:ca:de:96:2a:8a:b2:46:ba:ce: 86:48:4a:78:6a:f8:b8:db:a2:57:06:64:9a:e7:e8:a0:eb:0c: f1:6d:f2:f7:af:a3:02:f4:ee:3b:fb:a2:39:f2:dc:d8:e9:98: 98:cf:fc:58:0b:48:d3:00:b9:1e:50:b0:80:25:fe:a3:29:91: ce:ce:7d:6c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSkfgxf6bHxFMECAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2EwMGQ1OTItMGEyOC00YTJmLWIyMDctOGM3YmQ4MTMwY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmSbaFEAoZot8M0Tx6KibEsd96YbTepohImm fb9UVF9RqH35mIrq0iLk+24gFmlXNU4g75McmrMd2u9u7ZrLGv8v2vrHP39qpe1e tP2ODW5z4Bh66QHSNyaVtGQ83e52b9qlC54cHWFREPy0zrDyslZEqij2ngHuBYir vgdo1eYa6B3UJsIvz9nSZjMlaBsL29eFtt1g+tOmzIL18J0kAf1YXpWdGl528AyY w7gjL1atxnfSeTJPD/uiQ2awvvYKciD7ezRfBqnJdsr1N0eVS+2U2UirdIP33EHq o97VX0cgD4yGdAr8e3oprJul1pswdsLLsmIaylu/iHhMUgO0OwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJkc72eB1GolvD4LCRTfQeeWIoFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWY2ZWI2YWItMDIwNS0z N2I0LWI3MjgtY2U5MGVmNDRhZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAA32S5hqHWEbUizhX2I6P2w0G+rewnnnuEWDU+aH0CJeo3eYbrHYPs OMC25OLo4BNZnJQjHxDlq6y2kNKkVwE6Q951gckwhDhooYjWEAjFF5Nw0Q5xmgak gDRkA0Y5QwP8Czo43HszOndCvLZPk2j9LdGdDF/1DlxCW1WLoeGoGTNFx/VkD7fQ pRG0s9uJBMSRPG1ov6zivzUfqdEc9EkVvElnphJG7RTT3DSFohmUG/O7IEyBHCYp yhhJDMDK3pYqirJGus6GSEp4avi426JXBmSa5+ig6wzxbfL3r6MC9O47+6I58tzY 6ZiYz/xYC0jTALkeULCAJf6jKZHOzn1s -----END CERTIFICATE-----Generated at Sun May 11 03:47:25 2025 by rpki-client