$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa File: c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa (raw, json) Hash identifier: 2Zu5PQGitzbun1EBt2bbCEmNg4WJL2jAvxnp8O3PMnE= Subject key identifier: 41:C4:1D:B6:F7:14:F6:AA:E7:DC:21:65:39:AC:F0:D9:30:DD:75:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A20BFDDBB89984094B180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2607:f560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:20:bf:dd:bb:89:98:40:94:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=0235463a-8b72-43c2-9fdc-b14081a4dd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:92:e0:08:a4:3d:26:3e:53:3f:65:01:d4:f2: 2f:fb:79:3d:51:a1:bf:d2:28:32:54:4a:15:2b:8b: 67:12:a9:61:1a:3c:9c:80:22:af:1b:95:21:9b:16: cd:f3:42:2c:a9:d9:df:32:33:70:c8:59:96:1f:6e: 53:46:40:37:f9:91:59:a0:fa:50:bb:d2:b8:34:ad: f9:76:fc:60:d5:b9:77:0d:e1:fc:bb:31:f6:41:47: ff:d0:44:01:58:c5:7a:43:26:9d:c2:50:6b:3a:9f: df:64:8b:80:64:99:e2:c7:1c:af:b6:bd:ee:d4:48: 67:f8:d0:1e:6f:04:aa:50:21:a3:6d:fe:45:19:45: 0f:89:8a:af:e0:a4:8b:8b:34:f2:a5:d1:a4:26:d1: d5:0a:d4:c2:af:ff:cc:64:22:4a:fe:3e:5f:1a:c9: d0:ad:c7:94:d4:e0:30:7a:43:83:7f:4b:52:b4:25: 8c:cb:41:7a:d8:7d:91:97:63:ea:86:c9:d0:37:c8: 7c:83:29:0d:3a:c4:df:ea:83:29:cd:a0:8d:91:13: e3:05:b4:34:42:4b:b0:7d:82:19:79:98:55:47:ba: 63:5e:38:b7:7b:c7:46:f8:c1:f0:76:4f:58:a4:63: 76:c5:f1:b5:2b:6d:ee:16:5a:bb:ef:7a:2f:ca:49: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C4:1D:B6:F7:14:F6:AA:E7:DC:21:65:39:AC:F0:D9:30:DD:75:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7ff4683-d56a-398b-bf7f-a0617f7d9585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f560::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c7:84:28:6a:9d:80:d6:57:41:ac:45:1c:88:0e:42:4d:24: 53:e0:ea:44:af:73:40:13:e3:da:cf:1e:61:d9:e9:d3:b3:61: 4a:33:89:52:9c:3a:8b:c3:2c:af:cf:9f:f5:0d:20:7c:5c:22: a4:d2:31:36:ce:47:00:31:8e:6e:a8:47:a7:38:db:55:b9:be: a8:de:57:5e:21:d7:d2:1f:0c:68:ee:be:7a:ad:60:74:e3:c5: b3:c7:af:e3:24:3e:ad:9f:41:60:12:4e:16:62:b5:89:0b:75: 28:45:29:b5:ce:d2:d2:23:f0:85:ae:59:23:30:76:de:9f:08: 8f:57:03:6e:06:1b:4d:51:af:55:9f:0f:9f:d5:60:2b:bf:ea: 4d:64:8b:f2:7e:aa:ed:94:3d:4f:f6:0b:7a:c3:9e:d4:f9:c6: 87:37:eb:0b:1a:50:8f:f1:1f:81:0a:e0:3c:a1:e8:a9:e1:9d: f0:01:c0:87:59:4b:01:d7:9d:d4:41:d0:5e:e2:47:99:95:be: 6e:6e:a7:5b:39:e5:c8:42:11:51:3d:4a:2d:38:df:e8:88:9a: 7b:f4:4e:86:9d:a9:09:c9:4f:39:be:31:15:b6:9f:0c:24:ec: 89:18:45:0e:9e:52:99:39:cd:fd:59:05:23:cc:d1:3b:6a:9e: 95:37:28:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSiC/3buJmECUsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDIzNTQ2M2EtOGI3Mi00M2MyLTlmZGMtYjE0MDgxYTRkZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJLgCKQ9Jj5TP2UB1PIv+3k9UaG/0igyVEoV K4tnEqlhGjycgCKvG5UhmxbN80IsqdnfMjNwyFmWH25TRkA3+ZFZoPpQu9K4NK35 dvxg1bl3DeH8uzH2QUf/0EQBWMV6QyadwlBrOp/fZIuAZJnixxyvtr3u1Ehn+NAe bwSqUCGjbf5FGUUPiYqv4KSLizTypdGkJtHVCtTCr//MZCJK/j5fGsnQrceU1OAw ekODf0tStCWMy0F62H2Rl2PqhsnQN8h8gykNOsTf6oMpzaCNkRPjBbQ0QkuwfYIZ eZhVR7pjXji3e8dG+MHwdk9YpGN2xfG1K23uFlq773ovyknzbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEHEHbb3FPaq59whZTms8Nkw3XV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdmZjQ2ODMtZDU2YS0z OThiLWJmN2YtYTA2MTdmN2Q5NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1YDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrx4Qoap2A1ldBrEUciA5CTSRT4OpEr3NAE+Pazx5h2enTs2FKM4lS nDqLwyyvz5/1DSB8XCKk0jE2zkcAMY5uqEenONtVub6o3ldeIdfSHwxo7r56rWB0 48Wzx6/jJD6tn0FgEk4WYrWJC3UoRSm1ztLSI/CFrlkjMHbenwiPVwNuBhtNUa9V nw+f1WArv+pNZIvyfqrtlD1P9gt6w57U+caHN+sLGlCP8R+BCuA8oeip4Z3wAcCH WUsB153UQdBe4keZlb5ubqdbOeXIQhFRPUotON/oiJp79E6GnakJyU85vjEVtp8M JOyJGEUOnlKZOc39WQUjzNE7ap6VNyhE -----END CERTIFICATE-----Generated at Wed May 7 13:44:27 2025 by rpki-client