$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa File: dfae6790-4364-3d1e-9409-6da10de1af43.roa (raw, json) Hash identifier: FI2YLquZPrv5d87md+OhUfp4+3/+lRFhNAil2+kRqaA= Subject key identifier: EF:22:D3:17:3B:7B:28:55:8C:EA:D5:A9:98:45:E6:99:94:1D:E0:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1E1BDB39ED91D4A0CFC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:1c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1e:1b:db:39:ed:91:d4:a0:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a935ef87-9d9f-42de-9984-5d3398c6842e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:e8:7f:b0:00:7a:b8:9e:31:2b:31:77:da: 80:c4:7a:fd:5b:70:4d:97:a7:94:a3:af:20:45:cd: 3c:c8:b4:20:df:01:ea:4c:7f:5f:b8:a1:52:60:c0: ec:9b:a9:b3:a5:18:f4:fa:34:4e:91:f9:e9:8a:15: 68:d1:3a:e9:52:d6:c0:40:d0:b3:41:8b:e3:94:72: 20:00:3f:1a:8b:61:b7:7d:7b:2d:f6:ec:2d:c0:aa: 39:10:31:83:d0:8a:35:d6:7f:16:8b:77:f6:79:59: 86:70:4b:89:6f:37:78:fa:9f:98:3a:7d:b2:af:aa: 75:6c:e8:08:0f:b3:1c:50:5b:ca:6d:cc:cd:81:76: 7c:4a:37:f0:41:65:73:d6:2e:c5:46:36:9e:da:49: b5:ec:23:40:d8:a6:5e:b2:8d:78:f4:13:dc:dc:b3: 85:52:6d:3a:f0:36:f5:8f:21:9d:93:43:bf:3c:60: a3:67:4f:58:55:94:5d:60:d1:7d:e7:c1:56:37:37: 42:6c:d1:e5:d0:6c:5b:b1:ed:59:06:7a:8c:10:89: 33:ed:75:78:e6:4a:49:e0:c1:e7:e4:e0:96:1f:df: fc:c6:b2:7a:12:86:e5:98:c1:fd:e5:49:73:8d:aa: 4f:7a:f1:29:1e:9c:53:23:9e:94:3c:2a:11:15:bd: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:22:D3:17:3B:7B:28:55:8C:EA:D5:A9:98:45:E6:99:94:1D:E0:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fb:94:49:78:1e:72:a5:9f:e7:ce:6d:41:c0:c9:af:94:61: 58:1a:f2:b2:c1:82:e6:f0:c7:b0:a0:5d:2b:a2:31:83:0f:7a: e6:7a:43:df:ce:a0:6b:00:58:8a:9c:c6:40:76:1f:60:89:d2: 19:bc:99:03:59:22:24:f9:db:17:7a:33:17:ab:9d:4b:69:24: 20:e5:64:d8:df:9e:8e:65:42:c0:e3:a1:b4:b0:b5:fb:4d:85: c8:e4:5e:c8:2e:24:f2:28:3b:c1:bb:42:06:83:1f:ad:00:71: 83:25:2c:26:14:c2:f5:b9:e5:4b:87:7c:a3:86:6a:97:55:cb: 5c:fd:9b:87:50:73:0f:a6:b5:ca:1d:72:af:c3:8e:80:5f:90: eb:3b:70:68:53:72:1f:56:5b:f4:d2:78:c6:bd:11:16:bf:02: bb:16:63:ec:6c:a3:02:37:f3:26:3e:e7:c1:2c:71:80:3b:98: 41:94:e4:b1:c8:86:27:f0:fe:da:b6:04:8a:bb:08:f5:7a:42: b4:e5:76:69:5e:d2:91:cb:2c:e9:01:80:bc:5c:a3:7f:36:30: 64:ac:df:cc:d4:d3:78:ea:7e:17:0b:f6:78:5e:a2:cf:d3:6d: 54:fd:5c:43:54:73:27:c5:6d:53:19:77:c4:f3:50:f1:4b:bc: bf:a3:2d:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh4b2zntkdSgz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTkzNWVmODctOWQ5Zi00MmRlLTk5ODQtNWQzMzk4YzY4NDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Pof7AAerieMSsxd9qAxHr9W3BNl6eUo68g Rc08yLQg3wHqTH9fuKFSYMDsm6mzpRj0+jROkfnpihVo0TrpUtbAQNCzQYvjlHIg AD8ai2G3fXst9uwtwKo5EDGD0Io11n8Wi3f2eVmGcEuJbzd4+p+YOn2yr6p1bOgI D7McUFvKbczNgXZ8SjfwQWVz1i7FRjae2km17CNA2KZeso149BPc3LOFUm068Db1 jyGdk0O/PGCjZ09YVZRdYNF958FWNzdCbNHl0Gxbse1ZBnqMEIkz7XV45kpJ4MHn 5OCWH9/8xrJ6EoblmMH95UlzjapPevEpHpxTI56UPCoRFb22NQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFO8i0xc7eyhVjOrVqZhF5pmUHeCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZhZTY3OTAtNDM2NC0z ZDFlLTk0MDktNmRhMTBkZTFhZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGvuUSXgecqWf585tQcDJr5RhWBryssGC5vDHsKBdK6Ixgw965npD 386gawBYipzGQHYfYInSGbyZA1kiJPnbF3ozF6udS2kkIOVk2N+ejmVCwOOhtLC1 +02FyOReyC4k8ig7wbtCBoMfrQBxgyUsJhTC9bnlS4d8o4Zql1XLXP2bh1BzD6a1 yh1yr8OOgF+Q6ztwaFNyH1Zb9NJ4xr0RFr8CuxZj7GyjAjfzJj7nwSxxgDuYQZTk sciGJ/D+2rYEirsI9XpCtOV2aV7Skcss6QGAvFyjfzYwZKzfzNTTeOp+Fwv2eF6i z9NtVP1cQ1RzJ8VtUxl3xPNQ8Uu8v6Mt9A== -----END CERTIFICATE-----Generated at Sat May 10 13:22:25 2025 by rpki-client