$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa File: e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa (raw, json) Hash identifier: qTPQvjbZn7FGurQwX+kLVKlVFzCzxftKFha/om1Bk3s= Subject key identifier: 64:5A:80:39:81:10:60:BC:36:F9:4A:A2:15:21:DA:35:2F:18:B2:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1CA7F954370682EB2F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1c:a7:f9:54:37:06:82:eb:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=829a9df4-c43d-46fc-8b88-439e52a22c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:b5:5f:fe:54:4a:42:5d:e3:2f:e7:6a:77: d4:8f:80:2a:12:fe:a5:e1:b9:fd:5d:a9:22:ba:ce: 30:be:7a:1c:dc:9b:06:49:0b:cb:ad:2b:27:69:c9: 3e:aa:2d:10:83:fc:b5:90:b3:3a:66:25:30:ce:45: 2c:8e:cd:3c:f3:4b:f4:2f:70:6a:a3:ad:7b:db:19: be:22:cc:50:40:25:b1:a8:0e:c8:de:6b:a9:bf:53: a6:9e:a8:14:45:fc:2d:99:63:f7:5d:e1:0e:98:fb: ba:84:63:11:64:3d:5a:44:e0:02:0f:fd:a6:55:da: f7:8a:fe:db:ff:45:fd:c5:42:52:d2:f2:12:f6:7f: 52:46:cb:b8:66:2c:57:90:f7:5c:dd:1e:f0:3d:aa: 5f:f5:86:fb:39:bb:e8:c0:82:ed:55:a3:49:46:a0: 57:16:e7:d9:79:60:de:9b:51:79:1b:df:b8:c9:8b: 50:81:a5:d1:b0:d1:4c:72:a2:29:16:f9:aa:f0:ce: 57:d3:5b:da:72:18:f9:9b:7d:f4:9a:8e:7d:af:a1: b8:c4:78:57:91:81:ec:61:35:1d:12:0e:25:af:49: c3:11:d1:a2:93:e9:36:df:9f:a1:04:13:60:93:4c: 15:a9:1c:c8:65:36:55:fc:c3:94:c2:0e:ec:70:e4: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5A:80:39:81:10:60:BC:36:F9:4A:A2:15:21:DA:35:2F:18:B2:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:88:9f:89:16:ad:bb:7d:f6:eb:e4:7a:26:6d:c9:ad:ec:85: 70:2a:78:2f:98:4e:ce:1a:38:b8:96:fc:c1:91:4d:19:cc:48: 5a:30:f0:f1:0b:4e:41:71:d7:a2:17:d8:0a:4b:12:c7:12:1c: 95:03:93:6b:b6:b6:e0:f0:04:35:2e:cb:1b:02:89:70:4f:ab: 99:34:be:2d:a2:b9:4f:67:ac:c6:a9:58:fa:34:d0:d6:dc:34: 5b:a0:83:5d:66:79:e9:07:40:43:58:e7:34:59:3a:3a:9b:f4: 48:5e:04:d1:b2:da:d5:82:5e:05:b1:6f:c9:c1:95:93:fa:0c: c1:eb:02:0c:18:46:89:4c:3d:b6:e0:66:f7:38:30:13:1a:c5: e0:e3:0f:a6:f3:aa:6a:2d:be:24:64:3d:93:02:53:58:1e:d3: 1a:87:dc:23:05:63:d2:8f:8d:a5:ba:5a:4a:11:23:f9:e8:b6: e8:fc:99:fe:22:aa:3e:af:be:c1:db:29:4e:4c:52:60:b0:21: a3:a3:52:2a:63:c8:1b:07:90:3d:97:54:55:43:55:f1:ca:10: a5:b1:71:08:73:c1:e6:44:c4:9f:4b:0f:6c:ff:31:3b:a3:74: 5b:da:a7:56:01:df:de:6e:ca:5f:a3:1f:c0:4b:6c:01:e2:40: ea:60:fa:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxShyn+VQ3BoLrLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODI5YTlkZjQtYzQzZC00NmZjLThiODgtNDM5ZTUyYTIyYzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH21X/5USkJd4y/nanfUj4AqEv6l4bn9Xaki us4wvnoc3JsGSQvLrSsnack+qi0Qg/y1kLM6ZiUwzkUsjs0880v0L3Bqo6172xm+ IsxQQCWxqA7I3mupv1OmnqgURfwtmWP3XeEOmPu6hGMRZD1aROACD/2mVdr3iv7b /0X9xUJS0vIS9n9SRsu4ZixXkPdc3R7wPapf9Yb7ObvowILtVaNJRqBXFufZeWDe m1F5G9+4yYtQgaXRsNFMcqIpFvmq8M5X01vachj5m330mo59r6G4xHhXkYHsYTUd Eg4lr0nDEdGik+k235+hBBNgk0wVqRzIZTZV/MOUwg7scORTKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGRagDmBEGC8NvlKohUh2jUvGLJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTcyZDU3YjUtZTlmMS0z NGZiLThhYzctZjRkMDYyOWQ3YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEeIn4kWrbt99uvkeiZtya3shXAqeC+YTs4aOLiW/MGRTRnMSFow 8PELTkFx16IX2ApLEscSHJUDk2u2tuDwBDUuyxsCiXBPq5k0vi2iuU9nrMapWPo0 0NbcNFugg11meekHQENY5zRZOjqb9EheBNGy2tWCXgWxb8nBlZP6DMHrAgwYRolM PbbgZvc4MBMaxeDjD6bzqmotviRkPZMCU1ge0xqH3CMFY9KPjaW6WkoRI/notuj8 mf4iqj6vvsHbKU5MUmCwIaOjUipjyBsHkD2XVFVDVfHKEKWxcQhzweZExJ9LD2z/ MTujdFvap1YB395uyl+jH8BLbAHiQOpg+ks= -----END CERTIFICATE-----Generated at Thu May 8 18:56:43 2025 by rpki-client