$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa File: c9d29c32-a313-3797-8f77-559ae3991224.roa (raw, json) Hash identifier: kUfTzpifvO9T88zA3IkOL1dTY4piqLpRvpiqTYQAeGY= Subject key identifier: B0:DA:67:F3:C5:67:67:C0:EB:F5:93:79:11:D8:1F:E8:D7:A1:C4:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1D6B2762BA32F0E64B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:6b:27:62:ba:32:f0:e6:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f28b7bca-a6af-4ed2-987a-43f1e85c3cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:ce:1f:99:bf:b5:66:76:00:a0:a0:3d:01: f1:72:b3:e4:d3:bb:e5:60:c2:4d:9d:51:4f:3c:8c: 69:67:db:c1:ae:6a:1b:64:1b:9b:ac:92:90:c7:08: 40:62:a3:57:a1:e1:9f:7b:54:a4:a8:29:bc:a1:bf: 27:00:da:85:73:11:13:e8:f1:bc:5e:1f:8b:f0:65: f0:6c:b9:09:30:d4:0a:05:0b:b2:b4:a1:b2:d6:e0: 12:41:93:e8:47:7e:51:30:3d:46:af:11:93:f3:47: f3:df:b5:68:56:f6:68:55:b8:77:84:bc:96:b0:f4: 28:8b:e7:e2:3b:8b:fe:3e:73:34:b3:03:a4:3d:34: bd:d2:29:f9:34:54:ca:aa:00:fb:4b:c3:2b:45:69: b3:a4:45:7a:aa:9f:a0:e8:82:1b:7e:0d:10:05:90: 28:e8:56:e4:ee:4f:cb:53:8b:ec:aa:41:8d:bf:c3: cc:e3:74:2f:12:18:bb:58:68:af:d1:ee:9f:eb:02: de:22:fd:ab:cf:2b:16:b9:50:59:dd:b4:cc:09:aa: 4f:5a:d9:85:f9:82:8f:6a:d7:76:cb:ae:9d:04:e8: fc:80:ac:09:42:8f:c5:d0:15:11:fb:d5:c2:f4:0e: a5:e4:97:77:c1:59:1a:51:74:5c:3a:ac:44:9a:cc: 31:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DA:67:F3:C5:67:67:C0:EB:F5:93:79:11:D8:1F:E8:D7:A1:C4:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9d29c32-a313-3797-8f77-559ae3991224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:36:f3:75:82:34:26:b2:9a:f7:50:de:28:80:d9:e1:8c:96: 60:e7:96:c3:0c:a9:22:9e:d3:aa:ac:26:5f:44:5f:d2:ce:a1: 4f:65:37:b3:33:f7:b8:66:2e:a2:e7:41:c2:54:50:ad:39:82: fd:2c:35:0c:a7:3f:28:7f:5d:37:b4:b2:36:1c:19:73:a6:a9: b7:dd:73:e5:0f:00:83:72:c0:b4:01:dd:5c:ab:9d:b4:af:15: 9d:aa:e3:41:f4:40:71:21:c4:8d:af:77:f6:42:91:0a:46:5c: 6a:b7:99:a0:3f:e8:b2:50:e2:ef:0b:92:8c:8a:5e:76:37:3b: b1:5f:56:39:a6:c1:99:6c:a6:9f:7b:00:7d:ee:a1:6f:b2:1f: d2:78:96:74:62:f1:b6:30:02:87:27:f0:11:2f:4c:7d:a5:c3: ad:8f:16:b5:07:d4:6c:db:5b:ac:24:b5:20:d1:74:e3:55:5f: 19:df:e1:1b:78:3e:24:9f:88:9c:b3:c0:78:f4:c6:68:d6:6c: a2:69:d7:ea:09:17:cd:8a:16:3e:a6:c3:5f:89:69:47:69:22: 64:13:d5:12:f2:db:dd:c4:91:f8:aa:44:b6:a1:22:ef:68:b5: 78:d5:c3:49:47:f2:43:ca:61:b2:07:57:8b:19:fa:f5:8b:20: f8:86:8c:7b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh1rJ2K6MvDmSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjI4YjdiY2EtYTZhZi00ZWQyLTk4N2EtNDNmMWU4NWMzY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKPOH5m/tWZ2AKCgPQHxcrPk07vlYMJNnVFP PIxpZ9vBrmobZBubrJKQxwhAYqNXoeGfe1SkqCm8ob8nANqFcxET6PG8Xh+L8GXw bLkJMNQKBQuytKGy1uASQZPoR35RMD1GrxGT80fz37VoVvZoVbh3hLyWsPQoi+fi O4v+PnM0swOkPTS90in5NFTKqgD7S8MrRWmzpEV6qp+g6IIbfg0QBZAo6Fbk7k/L U4vsqkGNv8PM43QvEhi7WGiv0e6f6wLeIv2rzysWuVBZ3bTMCapPWtmF+YKPatd2 y66dBOj8gKwJQo/F0BUR+9XC9A6l5Jd3wVkaUXRcOqxEmswxBQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLDaZ/PFZ2fA6/WTeRHYH+jXocSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzlkMjljMzItYTMxMy0z Nzk3LThmNzctNTU5YWUzOTkxMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMDbzdYI0JrKa91DeKIDZ4YyWYOeWwwypIp7TqqwmX0Rf0s6hT2U3 szP3uGYuoudBwlRQrTmC/Sw1DKc/KH9dN7SyNhwZc6apt91z5Q8Ag3LAtAHdXKud tK8VnarjQfRAcSHEja939kKRCkZcareZoD/oslDi7wuSjIpedjc7sV9WOabBmWym n3sAfe6hb7If0niWdGLxtjAChyfwES9MfaXDrY8WtQfUbNtbrCS1INF041VfGd/h G3g+JJ+InLPAePTGaNZsomnX6gkXzYoWPqbDX4lpR2kiZBPVEvLb3cSR+KpEtqEi 72i1eNXDSUfyQ8phsgdXixn69Ysg+IaMew== -----END CERTIFICATE-----Generated at Mon May 12 01:40:28 2025 by rpki-client