$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa File: e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa (raw, json) Hash identifier: XZ9aU0RIhdHClAjB32FjFBGuOxlghnSrBJF+d3pg+7A= Subject key identifier: 8A:D9:A6:26:C3:0C:FF:1C:32:C0:2D:69:D0:20:4B:C2:8E:29:D0:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1CB5017DDFB196E01780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1c:b5:01:7d:df:b1:96:e0:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5f087708-7f10-489f-9679-137e555d6953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:d7:4a:43:f2:f6:f1:73:15:35:5a:7f:3a: f5:ee:6e:60:54:ea:02:2c:33:e2:29:42:bb:e6:34: 4c:d1:e9:77:e8:d1:e5:45:7a:c7:1d:e3:17:d1:0c: ab:4f:54:03:7b:4b:ff:44:12:af:34:8f:1d:ae:fb: 1d:09:73:28:d6:23:59:9f:a7:7f:1b:a5:37:6a:45: 7a:d2:3b:66:c6:1f:06:23:95:5f:e0:6a:c0:8e:37: d5:c5:a3:e2:46:fd:2a:af:ec:95:52:22:cc:25:6e: 0f:20:8e:ec:e1:32:76:89:6f:1a:7c:0f:b8:25:b4: f1:62:bf:ae:4d:41:49:c7:c7:ef:42:e1:f7:08:fa: eb:70:ad:e1:96:5d:e2:7e:66:66:8e:aa:af:4f:23: b4:ed:02:cd:c7:41:82:7b:64:0b:94:7a:4e:39:e3: 29:59:07:46:0a:aa:16:c7:c5:f0:c8:01:02:af:98: 34:6d:2b:43:c8:f8:ad:6d:76:6f:e8:e8:2d:15:ca: 4b:bc:c9:ab:0d:ff:13:62:96:bb:cc:c7:28:37:00: 31:be:d6:0d:16:3f:ec:48:ed:99:0a:2d:0a:ec:64: 4f:2d:3b:e3:63:c1:9e:04:2f:0e:ef:61:68:87:51: 26:e0:d2:a3:73:cb:3b:1a:87:b0:43:05:8d:4d:c2: ab:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D9:A6:26:C3:0C:FF:1C:32:C0:2D:69:D0:20:4B:C2:8E:29:D0:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e30ce4fb-ed2b-3462-8a47-1f9e27f7e270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:db:22:06:20:3c:45:30:ef:c3:c4:8e:57:a2:25:24:dd:5e: 99:e1:5d:79:55:d2:8f:2e:1f:98:8a:27:b7:47:e6:7a:17:bf: f9:e2:ce:ed:76:89:a4:ed:1f:6b:73:a7:1e:50:ce:4d:6a:ff: 37:3a:d7:8e:92:c9:cc:54:72:e8:42:2a:d9:33:63:75:2a:95: b2:e3:40:a6:e2:35:cb:64:b6:f9:5f:28:d7:b6:73:42:5e:38: c2:e0:57:ea:6e:4c:e9:bd:46:ae:6c:22:3a:d5:d1:f7:2c:d8: 4b:3d:8e:a8:8c:61:7f:e1:c5:84:7b:3a:c9:53:24:6c:5c:70: 79:5e:f2:79:19:d8:1e:9c:93:a7:9b:bd:a8:ef:16:4c:ce:55: 8b:0a:58:75:de:4d:2d:0c:41:fa:9c:01:9d:d9:55:f2:af:5a: bb:1d:89:16:14:8c:b9:70:6e:09:4b:8e:93:b8:59:3e:d2:f7: 87:32:3d:3f:86:8e:07:af:73:fd:18:f2:73:2e:c4:b7:e2:c3: c3:7a:19:da:f3:1a:06:ff:2a:c5:75:50:eb:18:85:33:4a:8c: f9:34:cc:84:40:c0:31:b3:c6:e7:01:9f:93:31:17:b9:f0:fe: 0b:ad:6e:3d:3f:da:ff:6f:ba:94:bf:9a:e3:fc:8e:4f:ff:2f: e9:87:64:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxShy1AX3fsZbgF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NWYwODc3MDgtN2YxMC00ODlmLTk2NzktMTM3ZTU1NWQ2OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26fXSkPy9vFzFTVafzr17m5gVOoCLDPiKUK7 5jRM0el36NHlRXrHHeMX0QyrT1QDe0v/RBKvNI8drvsdCXMo1iNZn6d/G6U3akV6 0jtmxh8GI5Vf4GrAjjfVxaPiRv0qr+yVUiLMJW4PII7s4TJ2iW8afA+4JbTxYr+u TUFJx8fvQuH3CPrrcK3hll3ifmZmjqqvTyO07QLNx0GCe2QLlHpOOeMpWQdGCqoW x8XwyAECr5g0bStDyPitbXZv6OgtFcpLvMmrDf8TYpa7zMcoNwAxvtYNFj/sSO2Z Ci0K7GRPLTvjY8GeBC8O72Foh1Em4NKjc8s7GoewQwWNTcKrfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIrZpibDDP8cMsAtadAgS8KOKdBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTMwY2U0ZmItZWQyYi0z NDYyLThhNDctMWY5ZTI3ZjdlMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvbIgYgPEUw78PEjleiJSTdXpnhXXlV0o8uH5iKJ7dH5noXv/ni zu12iaTtH2tzpx5Qzk1q/zc6146SycxUcuhCKtkzY3UqlbLjQKbiNctktvlfKNe2 c0JeOMLgV+puTOm9Rq5sIjrV0fcs2Es9jqiMYX/hxYR7OslTJGxccHle8nkZ2B6c k6ebvajvFkzOVYsKWHXeTS0MQfqcAZ3ZVfKvWrsdiRYUjLlwbglLjpO4WT7S94cy PT+Gjgevc/0Y8nMuxLfiw8N6GdrzGgb/KsV1UOsYhTNKjPk0zIRAwDGzxucBn5Mx F7nw/gutbj0/2v9vupS/muP8jk//L+mHZEs= -----END CERTIFICATE-----Generated at Tue May 6 18:18:47 2025 by rpki-client