$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa File: c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa (raw, json) Hash identifier: CXxnvD6R5mGFCaK1zY82p+toLSLAm1OMcjyRAYVcT6o= Subject key identifier: E0:1F:D8:DC:32:25:CA:9A:65:EA:89:8B:6B:B4:E7:E7:06:8B:81:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1E91807415FD540D8500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1e:91:80:74:15:fd:54:0d:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=da4d0051-e358-4183-90f8-2be6ff57a787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:75:25:9b:26:62:ac:90:16:ce:c4:1f:96: 17:29:fc:e4:66:b2:9e:4d:d9:2b:ff:0c:b5:0e:c9: 70:dd:8a:9f:9f:f2:df:ef:06:1a:5b:8b:5f:74:a5: 22:a7:a3:5f:40:07:e7:18:8b:d7:f9:34:43:37:c9: f3:84:7c:96:17:4f:5f:f7:3f:36:c5:74:80:74:35: 7d:d4:1f:15:02:96:7d:aa:61:02:19:53:fc:93:de: f2:8c:2b:e1:b7:58:49:7c:82:62:37:26:be:03:ec: ae:e0:9e:fb:12:22:6b:60:81:5b:39:39:1d:b2:33: ed:18:4a:71:be:c0:81:42:41:37:fa:2a:4e:3a:7e: 0d:8a:f7:eb:d9:c6:03:48:87:48:dd:06:8c:5d:c6: df:6f:99:dc:2c:5c:f0:6f:03:08:19:69:bd:30:16: fa:6d:ae:13:b5:ef:7b:8d:34:89:51:ee:e3:b2:02: e2:14:28:96:98:61:07:f7:11:67:27:4d:2b:44:bb: 26:f5:f1:0a:0b:f2:3d:88:eb:5a:bc:08:c4:15:5d: 9b:d9:46:c0:de:ae:b5:49:64:0d:c1:c3:13:29:d9: 44:6b:dc:03:7c:1c:d8:ea:36:82:bd:e4:a2:4b:58: a3:d4:cd:d9:ac:4f:36:84:e4:ff:66:5d:27:73:38: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1F:D8:DC:32:25:CA:9A:65:EA:89:8B:6B:B4:E7:E7:06:8B:81:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d9:af:9f:12:5f:de:f2:f1:f9:b6:38:9d:0b:d8:af:ac:71: 67:25:ce:93:9c:8b:22:9b:e9:2a:f3:59:18:52:dd:06:49:05: a8:75:b3:b0:44:e2:4e:0e:c0:45:7a:8e:6c:a6:b0:9c:91:d5: 52:ba:4f:28:56:e4:03:e6:7d:ba:5c:64:70:ae:b4:3c:3d:a9: 3b:c6:32:49:6a:ee:1a:51:d0:4f:0e:20:fe:6a:56:a6:19:fc: eb:cd:f5:6d:f3:82:b8:40:95:06:cd:0e:d4:1b:cf:c0:7e:27: 54:8c:a2:0a:5a:f5:2f:3e:cd:7a:f8:55:7b:37:a7:12:7d:a6: 76:27:0b:91:2f:68:62:5d:56:24:7e:b5:62:fc:ed:ff:c5:5b: ee:54:9c:05:dc:df:a9:b8:35:0c:ce:a2:61:2f:d9:43:61:77: 91:b6:52:01:2c:9c:b8:79:ba:82:f0:3f:4f:ec:da:4f:32:b2: 3f:e0:fd:0a:18:fc:c8:7e:dd:1a:0b:97:5e:34:34:fd:94:d4: ca:f7:23:62:56:87:70:83:3b:94:2d:eb:75:e3:f9:59:0c:af: 27:69:c4:44:57:d9:05:ed:30:8d:7e:9b:a7:81:01:15:9b:f8: a6:69:40:af:1c:80:20:84:ca:6b:be:b8:e0:be:4b:88:88:9c: 93:1e:b3:5b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh6RgHQV/VQNhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGE0ZDAwNTEtZTM1OC00MTgzLTkwZjgtMmJlNmZmNTdhNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLN1JZsmYqyQFs7EH5YXKfzkZrKeTdkr/wy1 Dslw3Yqfn/Lf7wYaW4tfdKUip6NfQAfnGIvX+TRDN8nzhHyWF09f9z82xXSAdDV9 1B8VApZ9qmECGVP8k97yjCvht1hJfIJiNya+A+yu4J77EiJrYIFbOTkdsjPtGEpx vsCBQkE3+ipOOn4Nivfr2cYDSIdI3QaMXcbfb5ncLFzwbwMIGWm9MBb6ba4Tte97 jTSJUe7jsgLiFCiWmGEH9xFnJ00rRLsm9fEKC/I9iOtavAjEFV2b2UbA3q61SWQN wcMTKdlEa9wDfBzY6jaCveSiS1ij1M3ZrE82hOT/Zl0nczi2NQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOAf2NwyJcqaZeqJi2u05+cGi4H1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzRkZjExNDQtYzQwZi0z NDM4LWExY2ItYjJmNDE0YTVmZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAC0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARdmvnxJf3vLx+bY4nQvYr6xxZyXOk5yLIpvpKvNZGFLdBkkFqHWz sETiTg7ARXqObKawnJHVUrpPKFbkA+Z9ulxkcK60PD2pO8YySWruGlHQTw4g/mpW phn86831bfOCuECVBs0O1BvPwH4nVIyiClr1Lz7NevhVezenEn2mdicLkS9oYl1W JH61Yvzt/8Vb7lScBdzfqbg1DM6iYS/ZQ2F3kbZSASycuHm6gvA/T+zaTzKyP+D9 Chj8yH7dGguXXjQ0/ZTUyvcjYlaHcIM7lC3rdeP5WQyvJ2nERFfZBe0wjX6bp4EB FZv4pmlArxyAIITKa7644L5LiIickx6zWw== -----END CERTIFICATE-----Generated at Wed May 7 19:20:51 2025 by rpki-client