$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa File: e872bf65-3c44-37d5-974f-d352d3753c1e.roa (raw, json) Hash identifier: VO3H3nxdF51HuzkgR7QbrJuYAyYSQJgn5HLJ3eUVntY= Subject key identifier: 3F:7B:D8:86:67:CA:C6:4A:69:A0:FE:F2:F6:15:28:71:8C:60:BF:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1E8481266573106F0780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1e:84:81:26:65:73:10:6f:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=87f4d591-eec2-4813-aafd-f83027eac353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b4:33:e9:a1:7f:d4:d2:1a:5c:e1:57:44:0f: 71:9d:73:57:6b:b8:26:14:d4:8c:f7:69:39:3a:df: e9:b9:31:3e:8d:e3:da:21:52:64:d2:97:8e:91:45: da:60:c7:43:17:1f:e1:dc:92:cf:cd:c7:e1:cd:be: 28:fc:c5:03:48:fc:5e:4f:17:81:3e:57:b5:6f:c1: e6:78:65:5b:01:ed:5f:a0:87:05:db:3d:71:74:5f: bd:cd:ef:22:ec:5d:af:cc:37:cf:36:9c:41:fa:df: a2:bd:a5:c4:af:bd:3f:5c:37:00:cd:1b:fe:b3:8c: 1d:7a:d7:d0:7f:b8:42:9a:f8:79:6e:ca:03:8a:7b: 48:11:94:08:5a:35:8b:42:bf:b0:dc:f0:8b:3b:cf: 03:62:7f:c3:37:1c:1e:5a:89:57:18:c6:87:71:88: ae:1b:9e:70:48:a2:ef:18:39:c8:02:7e:88:bc:28: 9a:36:a8:70:d5:90:11:c3:35:8e:54:b1:7c:09:95: 26:e0:1a:99:34:ef:45:cb:c2:92:e1:c6:10:f3:9f: e0:1a:37:dd:99:48:23:07:12:4b:2a:06:08:80:53: 93:9d:49:33:a3:3f:96:a2:77:10:6e:ea:b5:8e:44: 68:0f:1c:df:75:23:83:cf:90:ba:87:8d:de:b6:f0: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7B:D8:86:67:CA:C6:4A:69:A0:FE:F2:F6:15:28:71:8C:60:BF:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d2:67:a8:79:ee:b5:67:2d:e4:47:91:15:1c:3d:92:22:81: 85:9b:5d:e9:9b:f5:78:96:a0:e3:b0:5f:e9:4c:a2:40:03:64: d1:49:31:c9:f8:5a:f4:72:f7:f1:57:93:56:8a:c1:2a:05:68: c5:12:a9:f0:0a:41:7a:46:60:98:41:53:14:39:c3:84:26:20: 4e:f5:e7:9a:f6:73:4a:ea:d0:5b:99:c6:27:11:43:5e:8f:97: 56:0d:9d:8f:ea:8b:19:06:81:e8:d6:09:9b:98:cd:e0:ac:44: 4a:cc:76:05:0a:3b:5d:23:f8:dc:52:3d:a5:a7:5f:c8:71:a6: 00:ab:29:ff:92:02:4f:15:b8:f6:e2:1f:d7:f6:64:8f:53:6d: 74:e3:30:a8:6a:38:41:86:99:91:c9:d9:39:8e:d7:33:a2:79: 51:e6:8d:86:c6:8c:bc:4a:eb:4f:80:a0:59:e1:c6:ce:78:72: 96:d4:5a:71:3b:11:ba:d3:b3:e5:2d:86:05:70:b8:4e:60:44: 20:da:cb:30:37:93:33:d2:fa:09:8c:d4:23:0b:dd:6a:93:20: d8:6e:3a:4c:98:82:10:fe:f7:6f:30:90:57:9a:52:fd:20:07: c6:28:4e:4f:b4:91:1b:ec:55:43:77:cf:46:aa:bc:e6:24:f2: d2:94:60:3d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh6EgSZlcxBvB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODdmNGQ1OTEtZWVjMi00ODEzLWFhZmQtZjgzMDI3ZWFjMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobQz6aF/1NIaXOFXRA9xnXNXa7gmFNSM92k5 Ot/puTE+jePaIVJk0peOkUXaYMdDFx/h3JLPzcfhzb4o/MUDSPxeTxeBPle1b8Hm eGVbAe1foIcF2z1xdF+9ze8i7F2vzDfPNpxB+t+ivaXEr70/XDcAzRv+s4wdetfQ f7hCmvh5bsoDintIEZQIWjWLQr+w3PCLO88DYn/DNxweWolXGMaHcYiuG55wSKLv GDnIAn6IvCiaNqhw1ZARwzWOVLF8CZUm4BqZNO9Fy8KS4cYQ85/gGjfdmUgjBxJL KgYIgFOTnUkzoz+WoncQbuq1jkRoDxzfdSODz5C6h43etvBXZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD972IZnysZKaaD+8vYVKHGMYL+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTg3MmJmNjUtM2M0NC0z N2Q1LTk3NGYtZDM1MmQzNzUzYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZtJnqHnutWct5EeRFRw9kiKBhZtd6Zv1eJag47Bf6UyiQANk0Ukx yfha9HL38VeTVorBKgVoxRKp8ApBekZgmEFTFDnDhCYgTvXnmvZzSurQW5nGJxFD Xo+XVg2dj+qLGQaB6NYJm5jN4KxESsx2BQo7XSP43FI9padfyHGmAKsp/5ICTxW4 9uIf1/Zkj1NtdOMwqGo4QYaZkcnZOY7XM6J5UeaNhsaMvErrT4CgWeHGznhyltRa cTsRutOz5S2GBXC4TmBEINrLMDeTM9L6CYzUIwvdapMg2G46TJiCEP73bzCQV5pS /SAHxihOT7SRG+xVQ3fPRqq85iTy0pRgPQ== -----END CERTIFICATE-----Generated at Fri May 9 18:50:52 2025 by rpki-client