$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6ede3ac-70fe-34e4-bb42-1899e6333c40.roa File: b6ede3ac-70fe-34e4-bb42-1899e6333c40.roa (raw, json) Hash identifier: i1UtfEkT2Av3UiXbRqbc2JOtkAIFrdinHHu1kk2H78o= Subject key identifier: 1E:16:9C:24:57:1D:CE:96:BB:7D:12:24:9C:9F:D7:DF:47:A6:32:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1D91A0D6B5406E528F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6ede3ac-70fe-34e4-bb42-1899e6333c40.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:91:a0:d6:b5:40:6e:52:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2d8a16f7-bbbc-497e-baac-87f84dff8020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c6:4c:52:44:5d:3b:a2:24:b8:b3:26:24:bb: c5:c7:65:e6:da:a6:58:6a:63:3a:bd:f4:ad:5f:3e: dd:4e:ee:a6:45:85:1c:3c:26:48:6b:98:ff:13:10: 87:7a:19:49:58:41:82:5c:b0:8e:2f:af:e1:9d:6c: d4:f4:78:7e:b3:6d:40:6f:8c:c3:f0:05:f5:75:cc: d2:f6:a1:e2:29:2a:10:4c:69:3d:ff:fc:6f:84:9f: 54:98:c1:a5:bd:df:74:63:3f:f0:ce:2d:26:40:7a: 92:77:37:34:29:a9:9d:34:1e:e9:e8:08:47:bc:c2: 7c:58:14:96:3b:d2:41:54:62:ed:f1:e7:c5:3c:d4: be:1f:e0:84:99:45:49:d3:8c:17:3c:bb:28:d2:e3: 25:5b:43:37:ce:07:28:90:47:b1:7f:a9:10:ff:02: a8:be:b5:ca:db:a4:54:f2:86:fb:27:d9:27:73:b0: 14:4d:53:fd:48:e6:0f:f0:3a:31:ae:6b:98:c1:1b: 79:ac:69:e3:27:43:fb:7b:a3:c6:9b:ae:a1:a4:1c: fb:fc:9c:cd:9c:b9:7f:1c:ea:1c:55:e6:16:7f:05: 83:c0:ed:78:84:f7:cd:95:54:90:cb:d7:e6:a4:e2: 81:db:cd:64:e7:61:9b:a4:ef:df:4a:2f:a5:c0:78: 31:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:16:9C:24:57:1D:CE:96:BB:7D:12:24:9C:9F:D7:DF:47:A6:32:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6ede3ac-70fe-34e4-bb42-1899e6333c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3f:8f:23:7c:d2:be:d8:82:52:9f:bb:7a:84:65:7d:35:cd: 5c:78:35:5e:33:4e:bd:73:e5:c2:55:bc:cc:c1:71:7c:3d:6d: aa:ed:17:9c:3f:ae:3c:c4:cf:b0:6f:56:9f:cf:68:27:01:71: 92:f9:d9:a2:d4:81:dd:ab:a4:84:1f:c5:bb:05:41:50:76:6c: 26:30:01:cd:87:5c:3b:e8:69:c1:c7:73:37:25:52:54:3d:e1: f5:50:4e:12:7a:17:1e:38:bb:0f:33:aa:96:0b:65:eb:c5:b1: a4:7f:33:66:15:94:c0:69:08:20:25:76:52:39:51:79:0d:f8: c9:a6:85:eb:0c:19:4b:22:13:47:e6:9d:19:19:3c:a7:4d:8b: 2a:f7:d0:88:dc:28:4d:13:31:2d:0e:aa:74:67:95:b4:a2:80: 97:6c:15:c0:28:4e:62:c1:8f:d3:8c:b4:f1:22:93:62:c2:47: 12:50:d3:2f:0b:1a:79:e4:fc:73:15:86:f1:9f:00:7c:0f:80: cc:87:8c:36:42:9e:41:66:46:9b:3e:5c:f5:10:6b:94:08:15: d6:4e:ca:37:78:da:0a:e1:94:22:3f:35:89:f3:ee:8a:47:5c: b9:2b:1f:bd:80:42:31:17:1f:8f:7b:a1:b5:a4:d4:c2:0e:04: 52:bc:2c:df -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh2RoNa1QG5Sj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmQ4YTE2ZjctYmJiYy00OTdlLWJhYWMtODdmODRkZmY4MDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8ZMUkRdO6IkuLMmJLvFx2Xm2qZYamM6vfSt Xz7dTu6mRYUcPCZIa5j/ExCHehlJWEGCXLCOL6/hnWzU9Hh+s21Ab4zD8AX1dczS 9qHiKSoQTGk9//xvhJ9UmMGlvd90Yz/wzi0mQHqSdzc0KamdNB7p6AhHvMJ8WBSW O9JBVGLt8efFPNS+H+CEmUVJ04wXPLso0uMlW0M3zgcokEexf6kQ/wKovrXK26RU 8ob7J9knc7AUTVP9SOYP8DoxrmuYwRt5rGnjJ0P7e6PGm66hpBz7/JzNnLl/HOoc VeYWfwWDwO14hPfNlVSQy9fmpOKB281k52GbpO/fSi+lwHgxAQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB4WnCRXHc6Wu30SJJyf199HpjI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjZlZGUzYWMtNzBmZS0z NGU0LWJiNDItMTg5OWU2MzMzYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdz+PI3zSvtiCUp+7eoRlfTXNXHg1XjNOvXPlwlW8zMFxfD1tqu0X nD+uPMTPsG9Wn89oJwFxkvnZotSB3aukhB/FuwVBUHZsJjABzYdcO+hpwcdzNyVS VD3h9VBOEnoXHji7DzOqlgtl68WxpH8zZhWUwGkIICV2UjlReQ34yaaF6wwZSyIT R+adGRk8p02LKvfQiNwoTRMxLQ6qdGeVtKKAl2wVwChOYsGP04y08SKTYsJHElDT LwsaeeT8cxWG8Z8AfA+AzIeMNkKeQWZGmz5c9RBrlAgV1k7KN3jaCuGUIj81ifPu ikdcuSsfvYBCMRcfj3uhtaTUwg4EUrws3w== -----END CERTIFICATE-----Generated at Sat May 10 22:28:07 2025 by rpki-client