$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa File: b3253730-2bce-3ed6-b8ef-448c69deee6b.roa (raw, json) Hash identifier: Mdq0iK7v6/IJziqo/4FLO0QQhWs3ml4Sj+thotkkztI= Subject key identifier: FB:D9:A3:ED:7B:DE:01:FD:2A:6E:17:1E:86:AF:61:81:B8:0F:3F:33 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A454AE8055DABA46F8500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:45:4a:e8:05:5d:ab:a4:6f:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4391281f-215f-4b69-a4b4-c91e404faafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:82:5e:a5:5e:d8:36:79:dd:1f:ef:d9:24: 48:94:92:f1:92:30:c4:e9:3d:39:07:51:50:7b:18: a8:ef:79:22:ec:88:ee:37:90:b6:06:54:66:fa:80: b7:cf:01:d7:ca:f6:35:94:41:d4:95:ab:f7:96:58: b0:bb:54:ba:cc:2f:81:a3:7b:c4:33:6c:c9:e3:b8: d0:28:52:a4:79:ad:cc:7d:5a:5e:0b:78:41:c7:3c: 6e:3e:c4:2f:e5:9b:ae:29:19:66:38:c9:ca:d6:7b: a2:c8:02:2c:c2:25:63:07:0b:14:d0:e0:fe:df:90: bb:f0:fe:3a:c6:5a:e2:c3:d6:a4:e6:49:8f:5c:61: ea:91:ba:00:5e:08:14:36:b1:b4:fb:ce:ca:79:69: 5d:17:66:b8:f3:90:97:75:ca:71:7e:19:e8:12:06: 84:3e:3d:3e:20:2b:86:1f:7b:c6:99:1e:85:cc:88: 5b:fc:34:85:34:97:7f:a3:bb:0f:5c:bc:21:fa:c1: 02:89:26:42:fb:96:9e:1b:da:f0:0f:2d:06:d5:8f: 0b:0a:01:ef:76:00:90:3a:38:60:f3:a7:9f:a9:f5: c5:fe:1b:11:67:b9:ce:f7:c0:81:b6:be:a4:36:9f: 1f:f0:e4:6c:27:4e:d1:30:8e:64:b5:ef:bd:17:97: 2a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D9:A3:ED:7B:DE:01:FD:2A:6E:17:1E:86:AF:61:81:B8:0F:3F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3253730-2bce-3ed6-b8ef-448c69deee6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:34:3c:83:78:bb:10:6f:a9:9f:f2:95:4d:7e:91:ad:01:74: 63:9b:5a:5e:cb:b1:21:92:4f:f6:ea:66:dd:97:51:da:0b:ca: 5c:1f:24:d1:bd:1b:74:84:2b:3e:d4:d8:0b:eb:c9:6b:96:14: cb:95:b1:3c:61:0c:a4:18:59:55:78:84:76:1f:53:8b:94:15: b7:45:4f:d7:45:cc:3e:ac:d1:12:78:1e:14:58:8f:61:14:86: 6e:bf:e4:1e:f7:5d:41:e5:a2:2f:c7:6b:70:f0:b9:54:fa:3e: 96:62:24:7a:c6:fb:14:b4:29:df:d0:a3:05:d9:25:f6:96:a1: 17:42:ab:c3:3f:16:af:df:18:4c:3f:48:66:0b:c9:c7:05:fd: 49:8e:9e:6c:0f:82:f7:c1:81:29:69:30:f5:9e:dd:ef:39:a9: f5:36:2f:44:a4:ad:b9:29:05:a9:12:32:7a:14:bf:8c:71:d0: d4:53:9e:33:91:f4:03:e6:61:35:b8:0e:fa:72:db:6b:d6:00: f2:86:b2:15:f5:d1:4e:8e:5a:9e:ec:94:e2:89:c6:82:8a:59: 3c:32:2f:ae:26:78:49:fe:e5:34:4e:cd:71:f0:54:29:de:53: 1c:4a:c2:58:92:2e:75:16:ed:fc:b8:13:09:f8:ac:8a:44:f3: e5:92:52:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkVK6AVdq6RvhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDM5MTI4MWYtMjE1Zi00YjY5LWE0YjQtYzkxZTQwNGZhYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTSCXqVe2DZ53R/v2SRIlJLxkjDE6T05B1FQ exio73ki7IjuN5C2BlRm+oC3zwHXyvY1lEHUlav3lliwu1S6zC+Bo3vEM2zJ47jQ KFKkea3MfVpeC3hBxzxuPsQv5ZuuKRlmOMnK1nuiyAIswiVjBwsU0OD+35C78P46 xlriw9ak5kmPXGHqkboAXggUNrG0+87KeWldF2a485CXdcpxfhnoEgaEPj0+ICuG H3vGmR6FzIhb/DSFNJd/o7sPXLwh+sECiSZC+5aeG9rwDy0G1Y8LCgHvdgCQOjhg 86efqfXF/hsRZ7nO98CBtr6kNp8f8ORsJ07RMI5kte+9F5cq2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPvZo+173gH9Km4XHoavYYG4Dz8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjMyNTM3MzAtMmJjZS0z ZWQ2LWI4ZWYtNDQ4YzY5ZGVlZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADs0PIN4uxBvqZ/ylU1+ka0BdGObWl7LsSGST/bqZt2XUdoLylwf JNG9G3SEKz7U2AvryWuWFMuVsTxhDKQYWVV4hHYfU4uUFbdFT9dFzD6s0RJ4HhRY j2EUhm6/5B73XUHloi/Ha3DwuVT6PpZiJHrG+xS0Kd/QowXZJfaWoRdCq8M/Fq/f GEw/SGYLyccF/UmOnmwPgvfBgSlpMPWe3e85qfU2L0SkrbkpBakSMnoUv4xx0NRT njOR9APmYTW4Dvpy22vWAPKGshX10U6OWp7slOKJxoKKWTwyL64meEn+5TROzXHw VCneUxxKwliSLnUW7fy4Ewn4rIpE8+WSUlw= -----END CERTIFICATE-----Generated at Sat May 10 19:38:19 2025 by rpki-client