$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa File: e81ede32-402d-39a2-ac55-2465ea2716a5.roa (raw, json) Hash identifier: faHr4f5TuAFuBZL3RUDv0mWj8Kje2DoAOS3DQPaNs64= Subject key identifier: 79:26:9B:76:45:64:A5:EA:7B:17:2C:12:00:F8:64:2B:69:DB:6D:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A465ECDA30DD0A4108800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:5e:cd:a3:0d:d0:a4:10:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d8e008ec-ab23-412f-a135-52d5d4ad05e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:43:b4:d0:c1:90:87:08:c4:81:0d:25:8d:05: 5a:63:cd:0d:53:7e:aa:fc:b2:03:2d:7f:65:95:7d: 69:bb:aa:82:a9:c6:b8:22:ee:6e:be:a1:40:bc:ff: 75:41:28:5d:b7:59:ec:80:c7:00:8c:85:ca:08:32: 3b:fe:e2:50:7e:25:a8:51:67:9b:5a:cc:d6:b3:13: e5:fd:8a:63:2a:e2:38:05:c9:ce:43:8d:63:c0:e7: e6:db:e3:82:d7:1b:12:4c:07:51:f8:bb:8b:9c:39: 6c:7a:5d:f8:38:e2:6a:66:a2:3d:4b:0c:25:9c:ef: 55:ed:43:33:2c:d9:c7:c9:7f:44:a1:b0:bc:63:e5: 4f:ca:c7:9d:77:0f:5d:4a:49:87:41:db:74:6d:a4: 3a:bb:3f:e5:91:d8:22:cb:40:73:f1:9f:33:76:73: bd:74:d8:8a:42:e8:55:bb:e3:d3:8e:a6:91:5e:4e: 07:8b:be:c7:fa:9f:5c:a7:c8:f1:08:98:ff:94:1c: a5:a8:e6:14:35:27:26:2f:3c:c3:c7:f8:22:2b:1c: 47:45:8f:56:8b:f6:f3:a6:83:af:2c:08:14:2d:3e: a1:af:f2:0f:f8:f3:64:43:93:b5:30:a1:cf:68:ea: 77:3e:47:14:a5:14:b1:76:1a:74:50:5e:4e:77:fc: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:9B:76:45:64:A5:EA:7B:17:2C:12:00:F8:64:2B:69:DB:6D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:0c:7b:bc:b6:2e:66:5f:9b:54:ff:8e:60:56:94:89:b0:8d: 64:99:dd:7f:f5:09:4d:21:f1:c5:22:36:e8:f5:8f:5a:47:7c: 80:c1:a0:bc:4b:0f:d3:ec:b4:9a:d2:14:fb:c7:85:1a:84:3b: 95:45:2a:20:4b:2f:6c:1e:b0:b0:2f:dd:98:9b:9b:e3:07:cc: be:ba:c6:6c:2f:e8:77:3f:ba:c1:ad:b6:8b:1a:5e:2d:15:84: b2:d2:d3:7b:34:c6:63:4a:02:18:f1:81:7d:1c:25:99:f0:a4: a2:5f:45:63:0a:46:8d:07:20:aa:24:ce:70:16:b4:07:15:03: 04:95:9b:c1:c7:71:21:fe:5b:5a:3f:29:63:bb:51:9c:27:df: d2:0b:56:da:ec:55:ae:77:53:40:47:b3:94:27:40:3a:11:85: 07:ca:38:46:46:41:f4:87:3e:58:a6:a1:9f:55:56:d7:af:aa: de:18:dd:2a:f6:4e:56:a4:d0:7e:6b:d7:75:44:dd:48:7b:b6: b9:f9:df:1c:31:45:45:ff:96:ff:8b:84:d1:ae:11:d2:e6:ec: bc:f5:1f:e9:b5:17:11:74:f0:90:30:c8:b7:65:45:97:b7:26: bc:27:a0:22:6c:bc:a1:3e:f5:01:b7:3c:48:47:97:0f:b8:d2: ec:e1:d4:9b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkZezaMN0KQQiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDhlMDA4ZWMtYWIyMy00MTJmLWExMzUtNTJkNWQ0YWQwNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0O00MGQhwjEgQ0ljQVaY80NU36q/LIDLX9l lX1pu6qCqca4Iu5uvqFAvP91QShdt1nsgMcAjIXKCDI7/uJQfiWoUWebWszWsxPl /YpjKuI4BcnOQ41jwOfm2+OC1xsSTAdR+LuLnDlsel34OOJqZqI9SwwlnO9V7UMz LNnHyX9EobC8Y+VPyseddw9dSkmHQdt0baQ6uz/lkdgiy0Bz8Z8zdnO9dNiKQuhV u+PTjqaRXk4Hi77H+p9cp8jxCJj/lBylqOYUNScmLzzDx/giKxxHRY9Wi/bzpoOv LAgULT6hr/IP+PNkQ5O1MKHPaOp3PkcUpRSxdhp0UF5Od/ycHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHkmm3ZFZKXqexcsEgD4ZCtp223wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgxZWRlMzItNDAyZC0z OWEyLWFjNTUtMjQ2NWVhMjcxNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMgx7vLYuZl+bVP+OYFaUibCNZJndf/UJTSHxxSI26PWPWkd8gMGg vEsP0+y0mtIU+8eFGoQ7lUUqIEsvbB6wsC/dmJub4wfMvrrGbC/odz+6wa22ixpe LRWEstLTezTGY0oCGPGBfRwlmfCkol9FYwpGjQcgqiTOcBa0BxUDBJWbwcdxIf5b Wj8pY7tRnCff0gtW2uxVrndTQEezlCdAOhGFB8o4RkZB9Ic+WKahn1VW16+q3hjd KvZOVqTQfmvXdUTdSHu2ufnfHDFFRf+W/4uE0a4R0ubsvPUf6bUXEXTwkDDIt2VF l7cmvCegImy8oT71Abc8SEeXD7jS7OHUmw== -----END CERTIFICATE-----Generated at Sun May 11 02:08:09 2025 by rpki-client