$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa File: bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa (raw, json) Hash identifier: 48jDDJ9GNxbIKnuph7cYFyFloEu4/ys3/0T5axj8xYU= Subject key identifier: E5:E6:8C:04:33:DF:25:0A:54:1B:22:2C:0E:45:81:68:A1:97:77:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4652E91808C460D1DD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:52:e9:18:08:c4:60:d1:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=70a3cfb3-4add-4bf7-a45e-543d4bb06836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8b:02:df:50:a0:d4:aa:21:97:28:79:09:9a: d7:ab:46:60:a1:8c:bf:6b:5c:6d:f4:ad:43:b5:75: d4:74:25:d9:07:c7:70:8f:8b:91:93:b8:ba:52:cd: 81:e3:a6:88:06:4e:bd:d2:19:17:3f:ee:94:e4:81: 85:c8:a4:fa:4b:f8:2e:5e:f1:d2:bb:d2:84:c4:66: af:34:f6:e6:62:c1:38:36:d1:50:3b:99:af:da:48: 2e:db:18:1c:42:70:c2:32:6b:be:c6:77:af:e1:7d: 42:2e:5a:5e:e2:96:c3:b9:83:05:37:37:58:25:f9: b0:db:b3:93:c8:a9:45:4d:7f:df:07:15:7d:75:0f: a5:80:d8:b5:2c:a4:70:0c:66:d8:a9:b9:bb:45:a0: e9:78:41:26:df:6a:ff:88:1d:cc:63:fa:60:ca:58: 8f:16:cd:76:4c:e0:69:23:f8:f9:3e:90:42:f8:0d: 04:5b:fd:57:6b:ea:f5:9d:d8:70:f0:6c:eb:ba:55: ee:d8:36:0f:66:55:2e:d0:8d:b4:83:93:31:11:0b: 06:7b:d6:dc:ed:62:1f:94:14:84:b4:00:cb:ed:79: 03:f6:2f:c6:2d:03:7b:01:70:55:41:57:e5:6a:93: 22:95:a8:37:4c:71:d1:85:7a:61:bb:94:27:ca:b3: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E6:8C:04:33:DF:25:0A:54:1B:22:2C:0E:45:81:68:A1:97:77:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:39::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a8:96:ec:5c:92:67:97:30:c8:f9:c0:7a:a3:1e:a7:f6:ba: d7:61:46:c0:70:03:42:48:25:f4:66:62:a3:1a:34:44:3a:90: 31:13:da:ed:b4:e2:04:1b:f9:d5:b5:a1:62:19:a0:a0:2a:31: 2b:4f:89:d3:88:94:b1:30:69:79:d0:ea:48:5e:3d:0d:55:84: 91:90:bc:dd:a8:30:ac:7f:1a:da:dc:c0:66:22:06:44:03:70: cb:d8:e2:6c:77:02:80:4b:4d:b5:b9:5f:95:d1:e4:22:02:d1: ff:8f:1f:5f:1c:7c:10:9a:e4:e0:c2:71:92:42:d9:25:5e:a1: d9:86:ab:86:2a:b8:18:d1:54:4b:0e:00:00:8c:6d:16:d1:3e: 70:66:b0:60:62:ba:48:53:ae:71:86:4b:39:f7:54:80:43:76: e9:19:bf:a5:80:f5:68:76:61:e5:8a:7f:5f:b1:7e:a6:c2:a6: a4:bb:4c:d5:e3:4d:53:4c:2f:f5:12:7d:5d:64:61:32:82:b3: 7f:07:80:d3:5d:73:ea:1d:b1:2c:93:fe:13:b8:65:91:99:e0: 60:8d:38:3e:d5:45:42:7f:7d:59:64:1d:c9:3b:c3:4f:0b:88: 7e:bb:11:51:29:a4:37:17:18:1b:0a:54:b9:1d:39:bf:86:9c: fb:89:d6:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkZS6RgIxGDR3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NzBhM2NmYjMtNGFkZC00YmY3LWE0NWUtNTQzZDRiYjA2ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7osC31Cg1Kohlyh5CZrXq0ZgoYy/a1xt9K1D tXXUdCXZB8dwj4uRk7i6Us2B46aIBk690hkXP+6U5IGFyKT6S/guXvHSu9KExGav NPbmYsE4NtFQO5mv2kgu2xgcQnDCMmu+xnev4X1CLlpe4pbDuYMFNzdYJfmw27OT yKlFTX/fBxV9dQ+lgNi1LKRwDGbYqbm7RaDpeEEm32r/iB3MY/pgyliPFs12TOBp I/j5PpBC+A0EW/1Xa+r1ndhw8GzrulXu2DYPZlUu0I20g5MxEQsGe9bc7WIflBSE tADL7XkD9i/GLQN7AXBVQVflapMilag3THHRhXphu5QnyrPEuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOXmjAQz3yUKVBsiLA5FgWihl3foMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmM1YTJmNGItYTZmYS0z NzJhLWI3YjEtZTk4YjY1ZTUxMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIColuxckmeXMMj5wHqjHqf2utdhRsBwA0JIJfRmYqMaNEQ6kDET 2u204gQb+dW1oWIZoKAqMStPidOIlLEwaXnQ6khePQ1VhJGQvN2oMKx/GtrcwGYi BkQDcMvY4mx3AoBLTbW5X5XR5CIC0f+PH18cfBCa5ODCcZJC2SVeodmGq4YquBjR VEsOAACMbRbRPnBmsGBiukhTrnGGSzn3VIBDdukZv6WA9Wh2YeWKf1+xfqbCpqS7 TNXjTVNML/USfV1kYTKCs38HgNNdc+odsSyT/hO4ZZGZ4GCNOD7VRUJ/fVlkHck7 w08LiH67EVEppDcXGBsKVLkdOb+GnPuJ1uQ= -----END CERTIFICATE-----Generated at Wed May 7 06:24:10 2025 by rpki-client