$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa File: cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa (raw, json) Hash identifier: DjxfDG0ipTGYubRGoEPno5DdX40LYx/Fr/OGHlhYnG8= Subject key identifier: E7:42:AE:0F:67:68:12:1A:A0:7B:8D:D7:27:BC:38:1C:03:AA:BA:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A45856CF654F1DA4035C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:45:85:6c:f6:54:f1:da:40:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=59542406-b658-4816-9d25-132ce11ebfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:12:43:45:6d:51:d7:42:9d:23:55:0f:50:28: 51:e1:e6:48:f2:d8:9b:cb:94:08:26:79:1e:26:e8: fc:2d:8b:6f:fd:bd:69:df:84:92:b5:dd:ee:41:de: d2:f3:05:8d:c0:9a:54:eb:02:6b:c6:c7:d2:d9:73: 11:0b:8b:5c:80:1e:fe:79:c9:bb:40:ab:b1:6a:f0: 3a:56:df:52:69:ea:79:2b:80:b2:60:a2:e6:c7:bc: df:07:d0:e9:be:52:ab:51:27:fa:f5:8d:32:ac:6a: 2c:c1:b3:39:bd:bc:b7:a9:3e:c0:3c:c2:0f:15:dc: bf:34:f1:3d:01:eb:1b:b9:23:eb:40:9d:14:df:53: d4:07:45:fb:f3:b8:28:ce:4b:a1:1c:ee:7c:62:a7: 7c:ad:0b:8e:66:81:a2:f2:66:80:1b:99:fa:76:9f: 21:d7:cf:79:86:40:7c:34:e2:ec:1a:43:5f:c8:b0: b9:9a:b8:e2:d4:48:6f:4b:0f:aa:4a:d2:e8:b7:6a: c7:39:70:d2:33:2f:ce:d0:0e:e9:ff:86:af:86:f9: b9:72:f1:68:ca:a2:fd:85:e1:a4:de:0f:a9:2c:35: d4:1e:5e:e2:17:61:e8:3e:7f:12:ec:bf:ab:88:dc: b6:6d:3f:0f:35:d4:31:86:37:52:ae:d9:eb:2b:6a: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:42:AE:0F:67:68:12:1A:A0:7B:8D:D7:27:BC:38:1C:03:AA:BA:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf3bc11d-5f9f-38fa-8569-37c96ab76fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:13::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ab:94:29:58:f0:e3:a1:d1:b7:71:3b:0f:55:6f:a7:4d:52: 08:4a:3a:75:39:59:3c:7a:84:39:45:18:a4:1a:6f:28:e6:1d: 53:06:06:da:49:5d:af:63:0d:5c:b3:de:ed:bb:df:9a:3f:10: 10:cf:31:f0:02:e1:6b:2b:21:a6:5c:8e:78:6c:69:be:1f:60: 6d:81:87:af:39:2f:6e:73:c2:a0:8e:82:11:a4:95:d2:85:7f: 03:52:e5:8a:63:af:d1:82:d5:ab:34:ae:69:d7:6d:cd:58:56: 0a:0e:6b:ff:e6:2c:cb:32:83:73:ac:15:e4:4d:0c:da:bd:8d: 95:5f:af:7c:bd:ba:61:c2:60:f4:cb:43:36:b0:e2:7b:4d:df: 1c:79:a1:76:8f:25:96:84:b7:f0:2e:6f:7e:e7:ed:24:58:fd: d6:9f:96:48:3e:f5:4b:3e:8c:e7:a4:cb:72:b2:33:17:95:ea: ba:e0:1a:fa:d2:ea:4b:9b:27:c5:8c:4d:b4:4d:12:31:33:23: 45:e1:7e:2b:8d:c5:06:67:29:9e:58:0e:ee:6e:b6:c4:99:9e: 1b:10:37:bf:bc:17:af:35:0e:87:03:a6:44:f8:81:6a:eb:3b: bd:6d:58:56:0d:a1:16:e7:b4:08:03:ab:87:59:4a:f0:10:ca: c7:25:79:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkWFbPZU8dpANcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTk1NDI0MDYtYjY1OC00ODE2LTlkMjUtMTMyY2UxMWViZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRJDRW1R10KdI1UPUChR4eZI8tiby5QIJnke Juj8LYtv/b1p34SStd3uQd7S8wWNwJpU6wJrxsfS2XMRC4tcgB7+ecm7QKuxavA6 Vt9Saep5K4CyYKLmx7zfB9DpvlKrUSf69Y0yrGoswbM5vby3qT7APMIPFdy/NPE9 AesbuSPrQJ0U31PUB0X787gozkuhHO58Yqd8rQuOZoGi8maAG5n6dp8h1895hkB8 NOLsGkNfyLC5mrji1EhvSw+qStLot2rHOXDSMy/O0A7p/4avhvm5cvFoyqL9heGk 3g+pLDXUHl7iF2HoPn8S7L+riNy2bT8PNdQxhjdSrtnrK2oi0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOdCrg9naBIaoHuN1ye8OBwDqrrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2YzYmMxMWQtNWY5Zi0z OGZhLTg1NjktMzdjOTZhYjc2ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICrlClY8OOh0bdxOw9Vb6dNUghKOnU5WTx6hDlFGKQabyjmHVMG BtpJXa9jDVyz3u2735o/EBDPMfAC4WsrIaZcjnhsab4fYG2Bh685L25zwqCOghGk ldKFfwNS5Ypjr9GC1as0rmnXbc1YVgoOa//mLMsyg3OsFeRNDNq9jZVfr3y9umHC YPTLQzaw4ntN3xx5oXaPJZaEt/Aub37n7SRY/daflkg+9Us+jOeky3KyMxeV6rrg GvrS6kubJ8WMTbRNEjEzI0XhfiuNxQZnKZ5YDu5utsSZnhsQN7+8F681DocDpkT4 gWrrO71tWFYNoRbntAgDq4dZSvAQysclebo= -----END CERTIFICATE-----Generated at Fri May 9 05:10:33 2025 by rpki-client