$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa File: f1def610-6bdb-3266-9d82-dc9da0ae8803.roa (raw, json) Hash identifier: BQ/1ykXOfYY9LJf6JrP1/OMdn/0zDI92RSR1OH4mWbs= Subject key identifier: C2:CA:2A:8E:90:DD:55:CF:A6:9F:36:55:FE:85:15:14:01:91:12:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A46A4B9CB66BD5F2B6484 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:46:a4:b9:cb:66:bd:5f:2b:64:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=51765028-8a75-48cd-9143-418607d5e161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:b2:ba:41:8e:0a:b9:0e:c8:2d:20:2c:a9: f5:22:80:c6:03:ac:06:7d:8f:ef:47:bb:2b:27:63: 65:e6:5b:e2:86:c7:61:f6:f5:bf:c9:36:0d:42:24: 0e:39:91:fc:ca:91:dd:a6:d5:d6:46:3f:ce:45:1f: 5b:3b:e5:81:b8:d7:f3:7f:6e:fb:fd:28:60:b0:ee: 9b:b2:00:1c:63:a3:f0:e6:75:85:fd:7d:15:f1:9c: a2:75:c4:7f:15:c7:71:74:c4:6e:a4:2d:c5:bb:92: 1e:73:06:1e:35:3f:d1:5f:2a:dd:b8:be:e9:95:8b: 8d:6f:b0:ff:41:29:62:2a:59:ee:1d:11:49:b3:71: 18:bf:79:f8:50:f4:e2:bb:2f:04:60:d0:04:05:e7: 73:df:a9:a0:ae:5e:35:93:cd:82:28:47:82:a4:22: 43:b9:0f:1e:b7:80:92:aa:00:1e:62:8c:f8:fa:73: 88:e0:2d:b9:18:8d:3a:5e:bc:12:03:04:b0:a5:41: 90:4f:a3:6d:42:03:3a:59:bc:f3:95:24:e8:e5:79: 5c:01:04:8f:bd:7a:49:4b:aa:72:fb:bd:64:0d:94: c1:e7:9b:b7:e5:f5:07:b1:8e:a1:8d:9f:16:65:49: cf:97:2d:d1:ca:65:a6:92:2e:3b:36:94:d8:18:ea: b3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CA:2A:8E:90:DD:55:CF:A6:9F:36:55:FE:85:15:14:01:91:12:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1def610-6bdb-3266-9d82-dc9da0ae8803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b5:de:92:7b:28:39:d0:be:3c:dc:e3:7d:c1:56:2c:e1:8c: 57:5f:8a:78:55:dc:17:28:0e:cb:cd:75:20:6c:6a:27:93:3d: 6e:4f:1d:96:28:fb:a3:a2:8c:3a:51:37:86:37:ff:cb:6c:69: e9:fb:2a:e2:3a:07:11:8c:2c:de:0a:35:94:f4:38:08:7d:67: f8:8e:6a:ab:89:99:f2:90:76:36:d2:ee:64:89:4f:df:4c:bd: 6d:74:f0:e4:8d:a9:5d:b9:e9:03:e7:d8:36:dd:00:cb:63:2a: 93:a4:52:8f:45:d2:4b:d0:7e:b0:4d:39:80:b3:e9:79:a1:d2: 47:19:c4:f9:22:66:d6:be:ac:d5:29:a9:ea:55:8c:d9:09:f8: 4e:6f:db:87:be:d0:15:20:81:1c:13:1f:85:fb:1e:f1:f3:5e: 75:3a:db:64:c2:2e:29:91:ea:87:86:d0:35:c8:7f:56:26:1c: 73:e0:42:94:cb:8a:5c:b5:90:3b:c4:fa:16:bd:6d:d6:6f:25: 6f:5e:cd:a6:90:74:0d:2d:ca:60:df:22:06:7f:fa:ad:37:40: 8f:3e:ff:6e:18:3e:03:e0:9e:7c:1c:ab:8c:51:96:45:a6:cb: c6:85:43:3a:e6:3f:cf:e3:a6:fa:7d:82:c0:e0:4f:e5:24:ee: 22:4d:66:33 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkakuctmvV8rZIQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTE3NjUwMjgtOGE3NS00OGNkLTkxNDMtNDE4NjA3ZDVlMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHiyukGOCrkOyC0gLKn1IoDGA6wGfY/vR7sr J2Nl5lvihsdh9vW/yTYNQiQOOZH8ypHdptXWRj/ORR9bO+WBuNfzf277/ShgsO6b sgAcY6Pw5nWF/X0V8ZyidcR/FcdxdMRupC3Fu5IecwYeNT/RXyrduL7plYuNb7D/ QSliKlnuHRFJs3EYv3n4UPTiuy8EYNAEBedz36mgrl41k82CKEeCpCJDuQ8et4CS qgAeYoz4+nOI4C25GI06XrwSAwSwpUGQT6NtQgM6WbzzlSTo5XlcAQSPvXpJS6py +71kDZTB55u35fUHsY6hjZ8WZUnPly3RymWmki47NpTYGOqz3QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMLKKo6Q3VXPpp82Vf6FFRQBkRIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFkZWY2MTAtNmJkYi0z MjY2LTlkODItZGM5ZGEwYWU4ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAA4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUrXeknsoOdC+PNzjfcFWLOGMV1+KeFXcFygOy811IGxqJ5M9bk8d lij7o6KMOlE3hjf/y2xp6fsq4joHEYws3go1lPQ4CH1n+I5qq4mZ8pB2NtLuZIlP 30y9bXTw5I2pXbnpA+fYNt0Ay2Mqk6RSj0XSS9B+sE05gLPpeaHSRxnE+SJm1r6s 1Smp6lWM2Qn4Tm/bh77QFSCBHBMfhfse8fNedTrbZMIuKZHqh4bQNch/ViYcc+BC lMuKXLWQO8T6Fr1t1m8lb17NppB0DS3KYN8iBn/6rTdAjz7/bhg+A+CefByrjFGW RabLxoVDOuY/z+Om+n2CwOBP5STuIk1mMw== -----END CERTIFICATE-----Generated at Sat May 10 13:22:21 2025 by rpki-client