$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da8cd73a-ee7f-3309-8392-13f3c6d2b8dd.roa File: da8cd73a-ee7f-3309-8392-13f3c6d2b8dd.roa (raw, json) Hash identifier: D+79GRqrPnNDv5a4GLa2eE1eZ5C7gfEZytqHN7EFwGg= Subject key identifier: 74:34:E9:9D:1A:A1:B9:52:E1:72:33:CF:E6:34:3B:05:8A:0F:11:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4561AE877370E8A52800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da8cd73a-ee7f-3309-8392-13f3c6d2b8dd.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:45:61:ae:87:73:70:e8:a5:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=12cc4a4b-9c17-4ff8-baa8-b2ebae4e178d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:29:35:a3:72:b2:53:eb:99:73:aa:4b:a6: b3:1f:98:d1:a1:db:6e:5d:6e:fd:c7:be:46:e5:bb: 10:48:53:d3:3b:e6:62:31:e9:38:ee:0f:17:db:88: 10:17:64:07:49:96:a3:87:03:93:f6:62:6e:e4:e1: e8:70:96:4c:b9:95:c8:9c:f6:14:b5:44:cc:b3:c7: c6:a9:2a:20:c5:d3:c7:ba:2b:c8:fe:95:89:92:6d: 36:21:6b:0a:ea:d0:7f:bb:4c:dd:52:4f:f2:b9:a4: 33:d4:ad:06:bf:a4:f0:7b:b7:f4:08:a1:39:c6:29: 87:9c:51:57:3f:df:a5:6f:6d:c2:21:47:f6:c0:88: fb:e5:bc:c7:42:cc:07:6c:b1:6b:30:14:a9:33:43: bf:29:fc:7b:16:22:ba:90:79:e7:73:ee:65:de:d3: 34:a2:00:8b:fc:b2:7e:07:33:10:5e:9b:e3:0a:b5: 36:e6:bb:c5:67:a2:ef:ed:f8:e4:ba:cd:44:16:85: d9:df:22:da:c2:80:ac:88:91:84:78:41:1f:a7:f1: ae:f1:9b:af:87:7f:9a:4d:02:34:85:8f:0e:ca:f5: 23:08:82:42:6b:77:85:26:cf:aa:dd:47:2c:58:49: 14:0b:cf:63:2e:43:d0:5d:cd:53:68:50:c5:cd:f7: 35:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:34:E9:9D:1A:A1:B9:52:E1:72:33:CF:E6:34:3B:05:8A:0F:11:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da8cd73a-ee7f-3309-8392-13f3c6d2b8dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ab:ce:d7:ce:58:91:4e:f4:c7:96:f4:80:2d:8b:75:9f:9c: 7a:2a:50:0c:69:5b:02:7a:d9:14:e6:1c:85:e6:67:a2:4a:96: e4:d1:11:36:c7:33:e3:91:a6:69:d6:59:6a:21:bf:e5:66:3b: 6c:b7:e1:a8:cc:2c:3a:44:98:c2:c3:bf:f4:d5:ff:65:ee:52: fc:11:e4:c0:3e:e4:9a:88:e6:e4:e0:ac:5d:2a:63:1e:84:b0: 00:ee:3d:a5:f9:e0:e4:4c:4c:9c:df:24:47:6f:be:6e:e2:60: 68:b4:63:94:e7:e5:ad:e2:ea:5a:d7:7a:dd:71:6f:48:0d:41: 3d:17:bb:9a:03:46:8c:42:af:cf:32:54:4e:27:e6:3f:d8:2e: 51:ae:a6:ba:e4:11:a9:18:c7:aa:f7:66:b5:e6:3b:dd:b3:c2: ac:a4:fc:99:b5:b1:79:fc:61:41:cb:3c:45:9e:14:35:0e:1d: 91:c7:e9:9e:8a:34:e1:06:7a:8f:7b:c3:58:4c:d1:67:b8:c6: 0f:57:12:27:d0:95:f7:71:82:65:fd:4f:a5:64:8c:93:cd:49: 4d:b0:6f:9a:ca:00:b5:17:90:59:4c:5f:dc:b7:37:07:2d:9f: 17:b1:7a:8f:c1:7b:8d:b1:8c:7a:04:25:c0:be:db:25:1a:fc: 35:4d:f8:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSkVhrodzcOilKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTJjYzRhNGItOWMxNy00ZmY4LWJhYTgtYjJlYmFlNGUxNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueEpNaNyslPrmXOqS6azH5jRodtuXW79x75G 5bsQSFPTO+ZiMek47g8X24gQF2QHSZajhwOT9mJu5OHocJZMuZXInPYUtUTMs8fG qSogxdPHuivI/pWJkm02IWsK6tB/u0zdUk/yuaQz1K0Gv6Twe7f0CKE5ximHnFFX P9+lb23CIUf2wIj75bzHQswHbLFrMBSpM0O/Kfx7FiK6kHnnc+5l3tM0ogCL/LJ+ BzMQXpvjCrU25rvFZ6Lv7fjkus1EFoXZ3yLawoCsiJGEeEEfp/Gu8Zuvh3+aTQI0 hY8OyvUjCIJCa3eFJs+q3UcsWEkUC89jLkPQXc1TaFDFzfc12QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHQ06Z0aoblS4XIzz+Y0OwWKDxEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGE4Y2Q3M2EtZWU3Zi0z MzA5LTgzOTItMTNmM2M2ZDJiOGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCrztfOWJFO9MeW9IAti3WfnHoqUAxpWwJ62RTmHIXmZ6JKluTR ETbHM+ORpmnWWWohv+VmO2y34ajMLDpEmMLDv/TV/2XuUvwR5MA+5JqI5uTgrF0q Yx6EsADuPaX54ORMTJzfJEdvvm7iYGi0Y5Tn5a3i6lrXet1xb0gNQT0Xu5oDRoxC r88yVE4n5j/YLlGuprrkEakYx6r3ZrXmO92zwqyk/Jm1sXn8YUHLPEWeFDUOHZHH 6Z6KNOEGeo97w1hM0We4xg9XEifQlfdxgmX9T6VkjJPNSU2wb5rKALUXkFlMX9y3 Nwctnxexeo/Be42xjHoEJcC+2yUa/DVN+KE= -----END CERTIFICATE-----Generated at Sun May 11 02:11:19 2025 by rpki-client