$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec3eca9b-03d7-300f-822a-3b44e00a104b.roa File: ec3eca9b-03d7-300f-822a-3b44e00a104b.roa (raw, json) Hash identifier: DLGhlzkYNzdYqRplc+SNPiudrGoostp/BWi/eofqyF0= Subject key identifier: 27:2A:79:7B:43:9E:63:66:75:4D:F5:31:1C:05:41:CB:31:83:DF:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1DE5176AFB76D4CD3A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec3eca9b-03d7-300f-822a-3b44e00a104b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:1700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:e5:17:6a:fb:76:d4:cd:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d8c8b22c-754e-4d0f-afa7-b8dc9f098982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d1:0f:4b:02:73:12:5c:86:17:2a:97:90:a1: 75:ab:cc:c9:80:0c:95:7c:3c:95:44:8a:79:d4:ce: e5:f1:4d:73:a0:c5:83:4c:87:89:df:52:a7:f8:d1: 2a:25:af:13:21:0a:62:44:19:bc:e9:a3:0b:15:53: 8d:17:c1:7e:1d:cf:4b:dc:78:fb:65:80:69:fc:4d: 49:13:5e:eb:a1:e8:05:24:2c:da:b7:86:12:95:c8: 3f:6d:27:aa:2a:08:58:f7:57:1f:c3:f5:67:18:eb: 32:9f:e3:91:31:c4:4e:6b:4f:87:cb:de:20:c7:38: 6c:42:a9:f2:c7:6a:98:19:b9:92:1e:0c:35:bf:66: 29:a8:7c:50:0c:85:bf:93:7d:29:2e:2e:b3:24:cd: 16:fc:64:7e:06:18:bf:94:f5:13:ca:60:ca:91:62: c4:31:34:c8:b3:9c:d7:82:27:5a:26:dc:05:63:4e: 68:88:4d:1f:4a:89:e9:79:6c:32:1e:33:e2:41:2d: 24:b5:a3:75:f2:5f:0e:7c:38:a7:24:de:ef:0b:2b: 82:5b:92:be:67:aa:4c:6a:01:96:ea:83:f1:7a:47: d0:63:b4:97:c6:b7:a4:c9:d1:0f:67:62:42:c4:4f: cc:fc:89:3a:0c:6e:b0:0c:0f:4a:51:91:04:c0:bb: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2A:79:7B:43:9E:63:66:75:4D:F5:31:1C:05:41:CB:31:83:DF:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec3eca9b-03d7-300f-822a-3b44e00a104b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:22:7c:ed:15:1c:81:8e:e1:e8:0c:0e:7b:fe:eb:14:79:c5: 39:be:0b:0f:20:31:ea:a5:f6:bb:0d:c2:c1:64:4a:27:4c:21: 3e:67:84:8d:8d:19:46:1a:8e:e3:33:9d:79:55:e5:dc:05:ed: ee:63:dc:ae:71:d2:03:60:0e:5e:00:38:16:39:dc:ca:79:cf: 7b:89:0e:39:52:98:f9:62:9e:b5:ec:8e:e1:7e:a5:f1:24:a4: eb:ae:f0:67:fa:4b:7a:06:e9:a2:61:92:92:68:5b:42:19:87: b5:02:d5:ab:7a:b7:d2:f2:19:d6:e7:9b:a1:2a:02:b0:e7:54: f8:d6:ff:20:c7:6e:8a:d8:7a:09:b9:43:e4:35:34:a8:0c:45: 2a:51:a3:2e:00:47:13:71:bd:7a:cf:8a:55:4d:46:9d:f7:ca: e2:30:7b:ff:4e:23:6e:05:dc:e3:a3:40:f4:3b:1c:8d:fc:10: 60:5d:08:18:d0:81:42:a3:b6:82:38:3d:7d:5c:d9:58:7f:c0: a5:09:8e:53:96:02:01:2b:c7:78:f5:59:15:30:25:20:af:93: 91:66:2f:36:1a:b8:57:cf:89:54:8e:22:4a:f5:c5:83:5f:9b: 36:3a:9f:55:e4:8e:f1:4f:ba:4b:61:9f:f1:c2:fc:0d:44:ec: 49:d6:04:cb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh3lF2r7dtTNOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDhjOGIyMmMtNzU0ZS00ZDBmLWFmYTctYjhkYzlmMDk4OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNEPSwJzElyGFyqXkKF1q8zJgAyVfDyVRIp5 1M7l8U1zoMWDTIeJ31Kn+NEqJa8TIQpiRBm86aMLFVONF8F+Hc9L3Hj7ZYBp/E1J E17roegFJCzat4YSlcg/bSeqKghY91cfw/VnGOsyn+ORMcROa0+Hy94gxzhsQqny x2qYGbmSHgw1v2YpqHxQDIW/k30pLi6zJM0W/GR+Bhi/lPUTymDKkWLEMTTIs5zX gidaJtwFY05oiE0fSonpeWwyHjPiQS0ktaN18l8OfDinJN7vCyuCW5K+Z6pMagGW 6oPxekfQY7SXxrekydEPZ2JCxE/M/Ik6DG6wDA9KUZEEwLsgbwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCcqeXtDnmNmdU31MRwFQcsxg9+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWMzZWNhOWItMDNkNy0z MDBmLTgyMmEtM2I0NGUwMGExMDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkyJ87RUcgY7h6AwOe/7rFHnFOb4LDyAx6qX2uw3CwWRKJ0whPmeE jY0ZRhqO4zOdeVXl3AXt7mPcrnHSA2AOXgA4FjncynnPe4kOOVKY+WKeteyO4X6l 8SSk667wZ/pLegbpomGSkmhbQhmHtQLVq3q30vIZ1ueboSoCsOdU+Nb/IMduith6 CblD5DU0qAxFKlGjLgBHE3G9es+KVU1GnffK4jB7/04jbgXc46NA9DscjfwQYF0I GNCBQqO2gjg9fVzZWH/ApQmOU5YCASvHePVZFTAlIK+TkWYvNhq4V8+JVI4iSvXF g1+bNjqfVeSO8U+6S2Gf8cL8DUTsSdYEyw== -----END CERTIFICATE-----Generated at Sat May 10 07:32:01 2025 by rpki-client