$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b01542c1-973b-3122-b3c0-0c4c4717f569.roa File: b01542c1-973b-3122-b3c0-0c4c4717f569.roa (raw, json) Hash identifier: +LYuC4jdN+fZIoj5aX9ocpcxzzRb/0LMoSc/K61riho= Subject key identifier: A5:AD:90:38:AA:98:80:CC:39:87:13:8B:63:40:D6:F0:61:05:E9:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A46EA23D84D1A2A232A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b01542c1-973b-3122-b3c0-0c4c4717f569.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:1e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:ea:23:d8:4d:1a:2a:23:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d5efdf47-9ddf-4170-ab34-fc5a5e4b6748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3a:fd:20:cf:5f:de:95:92:58:0b:5b:bb:7f: 40:81:77:94:01:b1:aa:bf:fc:eb:fa:f3:2f:9a:2f: 3b:70:0b:42:80:95:c3:eb:34:4a:88:16:01:c9:69: e5:49:cb:ff:22:2a:77:67:06:08:60:f7:03:3f:fe: 26:d7:4f:87:94:93:51:79:c2:6f:1d:5b:c6:73:b8: a8:10:b3:6a:2c:e5:d2:97:22:48:9f:47:d3:3d:49: 1c:35:45:e0:dc:96:de:15:11:0e:9a:42:fb:5d:17: f7:fb:74:eb:a2:cf:65:fc:05:68:bb:8d:be:cf:05: 72:d9:b6:10:49:27:f8:c3:a8:e5:38:04:9d:4b:3f: b7:47:c3:8d:fe:42:5c:9c:54:a0:61:8f:a6:58:e0: a6:70:c1:80:b2:67:21:dd:14:af:e9:66:41:58:9c: 7f:a3:7c:b0:03:dd:cd:ab:02:b8:51:18:26:7f:fd: c6:9d:5e:79:13:2c:64:ab:1d:92:61:e0:43:0c:46: 10:ff:fb:af:d8:51:71:98:bf:2d:5f:f1:f9:bf:9e: 13:5c:14:43:a3:f9:d0:79:12:b9:7a:a0:5a:4e:c8: 93:e4:34:ff:c9:98:5d:22:d5:c3:58:8a:4b:79:eb: c1:78:3c:a3:bf:5d:00:88:b7:4a:43:c8:12:13:b4: 3c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AD:90:38:AA:98:80:CC:39:87:13:8B:63:40:D6:F0:61:05:E9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b01542c1-973b-3122-b3c0-0c4c4717f569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:20:53:a3:33:11:fa:b1:76:f5:7a:fa:4c:00:8f:88:d0:cf: 56:c6:43:d7:8d:f1:89:bc:1d:c0:86:b5:36:99:60:57:cf:f4: 47:d3:ee:ee:16:b1:24:7a:d6:a0:01:94:25:c9:21:46:c9:31: 57:9f:c0:85:ab:22:f5:2c:ed:9e:b7:a2:31:de:ae:41:ae:c0: fb:83:ae:43:cd:d9:02:5b:08:fe:7d:ae:c0:ed:7e:65:a4:9b: 3d:b4:d1:09:07:77:27:b0:1f:4e:2c:f3:bd:51:55:64:ca:b7: 72:7f:c6:69:07:e8:67:fd:ea:b4:fe:1d:a1:e3:8a:e3:29:85: 46:b2:8c:ee:fc:c0:23:08:ee:ab:62:21:1c:47:18:8b:c5:a1: 9e:25:c3:b2:28:bc:3e:e9:3f:c0:5a:b7:54:df:07:76:9b:0c: 0f:e5:02:fb:c2:cc:b1:90:b0:54:f8:3d:de:27:a4:69:18:73: 73:e6:ac:96:22:e1:97:aa:fd:72:3b:d8:3d:30:4a:bb:69:c6: 8b:cf:52:1b:34:a7:89:e2:4f:ca:41:c6:f4:4e:2b:c8:9b:85: d3:5d:9b:fe:e5:8f:3d:b7:07:ca:0e:3c:2e:99:36:20:a5:bb: dd:53:01:73:d5:5a:1e:67:9d:51:02:e6:ea:80:7a:0e:ea:aa: e5:0f:b7:dc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkbqI9hNGiojKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDVlZmRmNDctOWRkZi00MTcwLWFiMzQtZmM1YTVlNGI2NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTr9IM9f3pWSWAtbu39AgXeUAbGqv/zr+vMv mi87cAtCgJXD6zRKiBYByWnlScv/Iip3ZwYIYPcDP/4m10+HlJNRecJvHVvGc7io ELNqLOXSlyJIn0fTPUkcNUXg3JbeFREOmkL7XRf3+3Tros9l/AVou42+zwVy2bYQ SSf4w6jlOASdSz+3R8ON/kJcnFSgYY+mWOCmcMGAsmch3RSv6WZBWJx/o3ywA93N qwK4URgmf/3GnV55Eyxkqx2SYeBDDEYQ//uv2FFxmL8tX/H5v54TXBRDo/nQeRK5 eqBaTsiT5DT/yZhdItXDWIpLeevBeDyjv10AiLdKQ8gSE7Q8xQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKWtkDiqmIDMOYcTi2NA1vBhBekFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjAxNTQyYzEtOTczYi0z MTIyLWIzYzAtMGM0YzQ3MTdmNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAB4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfiBTozMR+rF29Xr6TACPiNDPVsZD143xibwdwIa1NplgV8/0R9Pu 7haxJHrWoAGUJckhRskxV5/Ahasi9SztnreiMd6uQa7A+4OuQ83ZAlsI/n2uwO1+ ZaSbPbTRCQd3J7AfTizzvVFVZMq3cn/GaQfoZ/3qtP4doeOK4ymFRrKM7vzAIwju q2IhHEcYi8WhniXDsii8Puk/wFq3VN8HdpsMD+UC+8LMsZCwVPg93iekaRhzc+as liLhl6r9cjvYPTBKu2nGi89SGzSnieJPykHG9E4ryJuF012b/uWPPbcHyg48Lpk2 IKW73VMBc9VaHmedUQLm6oB6Duqq5Q+33A== -----END CERTIFICATE-----Generated at Sat May 10 02:47:07 2025 by rpki-client