$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/efa345d2-280a-3922-bb17-4fdd922e06cb.roa File: efa345d2-280a-3922-bb17-4fdd922e06cb.roa (raw, json) Hash identifier: 4TJgyq5Ds3zfMAO0WEH4xXHMbTStWhfoV47/cjdCO24= Subject key identifier: D5:4D:B9:BA:F4:C6:E8:4A:8B:5A:F6:1F:9B:C4:EE:3D:F2:AC:AA:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1D78200AF7E2E5E0EB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/efa345d2-280a-3922-bb17-4fdd922e06cb.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1d:78:20:0a:f7:e2:e5:e0:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ae19d947-347f-405c-836b-3c7a79270062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:f6:87:cc:ac:de:9f:3c:3f:bc:ad:f9:80: 64:e7:32:02:d5:d5:46:6c:10:0e:82:9b:08:85:8b: 5e:49:df:4c:8e:d8:b6:92:8f:fc:ba:32:90:78:da: 3a:41:c0:11:f8:0e:c1:50:2f:11:0b:0d:23:08:b3: 8b:f6:ab:6c:2e:74:75:b4:55:50:00:49:e4:7d:3a: bb:c7:8d:24:41:d0:f1:1e:cc:cb:72:dd:91:ef:03: 6b:41:8b:37:3c:f4:b7:ec:63:c1:95:75:07:8d:d0: 36:38:57:f7:f5:e1:31:a0:82:cd:79:53:66:85:a0: fc:01:88:ca:64:52:9f:62:93:87:5a:10:5a:d1:d0: 21:90:0f:71:99:ac:fa:29:8b:7f:21:c5:14:87:de: 0e:f4:be:71:e3:ac:19:4e:72:c8:31:16:ba:09:64: de:e2:98:03:8b:65:29:92:c0:4b:8f:ad:74:b8:6d: 7d:d2:5c:22:25:bf:a1:aa:c7:dc:ce:75:89:9e:e8: ef:3b:a9:80:fa:75:73:bd:c8:a7:11:d9:d6:c1:ff: 3e:86:ee:1b:24:11:29:82:79:7f:69:b6:b4:5d:ed: f2:66:0b:0c:c6:d7:aa:6d:e5:ab:00:3a:c0:bd:cb: ed:23:2a:db:e9:4a:63:92:44:1f:2b:cd:1d:ef:80: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4D:B9:BA:F4:C6:E8:4A:8B:5A:F6:1F:9B:C4:EE:3D:F2:AC:AA:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/efa345d2-280a-3922-bb17-4fdd922e06cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:16:87:a2:12:fb:9c:6d:cf:e6:65:e1:bf:48:18:1b:6a:ec: 7b:c6:42:55:5f:b0:c2:2a:06:72:35:58:92:77:fe:0b:5c:eb: be:e2:c0:25:aa:e6:39:e6:00:e5:f3:ff:da:4f:50:e0:aa:90: b7:af:83:d0:fe:a5:a6:6d:66:af:73:7c:36:1f:86:60:6d:4c: b1:dc:39:0d:f2:f6:bc:32:5f:8b:fd:1f:5b:e5:ea:76:da:8b: ce:73:58:c7:84:22:3e:76:13:f3:9a:3b:6a:5b:10:f6:89:c7: 21:c8:e0:1e:72:58:b1:52:6f:dd:45:58:88:e4:e1:15:5b:e3: 41:18:00:3e:6c:68:ce:4f:07:e0:46:fc:db:6f:2a:5e:98:a8: d7:ea:94:3c:c4:90:9d:c2:e6:a3:56:53:57:c2:f4:04:2a:f4: 6b:62:9e:2e:56:c9:40:93:c4:74:4b:83:cd:7e:1b:1f:70:88: 5b:bb:8e:b9:3f:31:94:6f:6d:d7:81:55:85:c3:3e:73:57:3e: 9a:b5:d8:f1:52:fa:da:81:8a:4c:60:32:1f:63:47:30:0e:aa: d5:3d:be:5e:84:98:2c:f4:18:a7:81:9d:19:8d:b1:c0:37:c4: d6:76:28:24:28:1b:87:3f:d7:7f:ee:f9:1b:b8:87:81:9c:fd: df:fd:a4:5d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSh14IAr34uXg6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YWUxOWQ5NDctMzQ3Zi00MDVjLTgzNmItM2M3YTc5MjcwMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC/2h8ys3p88P7yt+YBk5zIC1dVGbBAOgpsI hYteSd9Mjti2ko/8ujKQeNo6QcAR+A7BUC8RCw0jCLOL9qtsLnR1tFVQAEnkfTq7 x40kQdDxHszLct2R7wNrQYs3PPS37GPBlXUHjdA2OFf39eExoILNeVNmhaD8AYjK ZFKfYpOHWhBa0dAhkA9xmaz6KYt/IcUUh94O9L5x46wZTnLIMRa6CWTe4pgDi2Up ksBLj610uG190lwiJb+hqsfcznWJnujvO6mA+nVzvcinEdnWwf8+hu4bJBEpgnl/ aba0Xe3yZgsMxteqbeWrADrAvcvtIyrb6UpjkkQfK80d74CqNwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNVNubr0xuhKi1r2H5vE7j3yrKr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWZhMzQ1ZDItMjgwYS0z OTIyLWJiMTctNGZkZDkyMmUwNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkxaHohL7nG3P5mXhv0gYG2rse8ZCVV+wwioGcjVYknf+C1zrvuLA JarmOeYA5fP/2k9Q4KqQt6+D0P6lpm1mr3N8Nh+GYG1Msdw5DfL2vDJfi/0fW+Xq dtqLznNYx4QiPnYT85o7alsQ9onHIcjgHnJYsVJv3UVYiOThFVvjQRgAPmxozk8H 4Eb8228qXpio1+qUPMSQncLmo1ZTV8L0BCr0a2KeLlbJQJPEdEuDzX4bH3CIW7uO uT8xlG9t14FVhcM+c1c+mrXY8VL62oGKTGAyH2NHMA6q1T2+XoSYLPQYp4GdGY2x wDfE1nYoJCgbhz/Xf+75G7iHgZz93/2kXQ== -----END CERTIFICATE-----Generated at Sat May 10 22:07:22 2025 by rpki-client