$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa File: f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa (raw, json) Hash identifier: MQErn5wvH7oEpFhFhgsR5/BemEJ7tfLJsk87yCK9D2A= Subject key identifier: 59:16:D4:66:2E:4C:C5:7E:5D:3B:94:F9:B1:3A:0C:20:04:37:6E:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A20F0195AB0E7A05E07C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2607:fec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:20:f0:19:5a:b0:e7:a0:5e:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=95733e7f-1d15-4a71-b243-3fe6f30b0c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:91:9c:24:9f:72:71:71:0c:d0:1c:6f:9e: 7e:94:70:9d:88:fc:c5:4c:da:3c:ad:19:5b:d4:d3: 01:3c:74:3f:c7:29:b4:e4:12:30:8a:37:50:8c:6e: 99:d8:1a:83:b3:dd:6f:50:4d:7a:3d:49:eb:95:81: 8e:4d:ae:86:92:01:97:ff:ee:30:fe:5d:6e:e9:6d: 45:9b:c8:1b:37:e1:00:41:14:82:d8:fc:08:19:58: df:46:8b:d6:62:10:9e:9a:5e:f5:2e:c7:87:65:0a: 45:11:1d:44:db:c6:a7:41:3c:81:40:2c:99:04:5d: 06:42:1b:0e:04:ed:2a:cd:23:2d:23:3a:63:11:81: 37:ed:56:23:89:fd:b7:3c:12:16:91:8e:7f:59:d4: 80:59:15:e0:cf:18:b1:f7:1b:c1:ef:66:de:64:a6: a6:63:3e:3a:e5:77:94:82:18:da:6d:3d:cb:8a:69: 67:13:dc:ed:e0:39:aa:14:4d:83:ca:ac:f3:a3:ca: b3:79:f3:d5:d8:ea:f5:6d:2b:94:7d:d8:03:f6:ca: 9c:0f:63:69:40:6e:0e:eb:02:9a:a6:31:b6:4c:c9: d0:33:b3:9d:be:17:4d:9b:7e:c0:45:8c:84:07:51: 8c:96:37:cf:d5:74:c8:be:13:ae:09:bc:10:e6:5a: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:16:D4:66:2E:4C:C5:7E:5D:3B:94:F9:B1:3A:0C:20:04:37:6E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f331fe6f-bf70-3e75-9f22-c9e00e866c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:54:0a:31:57:dd:8d:b7:ef:66:05:df:6e:6a:3d:21:d8:b5: fb:d1:b6:ea:ef:63:4c:3e:ad:19:e0:b8:e6:85:71:5c:ae:e6: 0e:eb:e6:cf:28:b0:88:36:a2:52:f0:a9:dc:51:f4:30:ac:d1: cf:94:a5:10:6e:64:b3:0d:01:62:c6:5f:25:1f:85:74:0d:62: 11:50:12:16:a2:10:27:58:14:38:dd:d5:c6:64:b2:33:56:cf: d0:34:41:cc:a6:a6:7c:a4:02:51:b6:fa:37:e9:b8:af:56:1f: 49:44:93:94:14:13:14:20:ce:ab:7a:fa:8c:4f:be:33:d2:32: fb:a1:45:b1:70:2e:8b:7c:17:9d:68:ab:c1:4c:51:f4:d2:a3: 64:30:4a:42:da:52:df:de:80:ab:41:58:1d:ea:aa:a4:18:5b: d9:21:3a:29:0b:91:22:af:c3:71:5b:59:d5:9e:7e:5d:11:af: 61:76:99:c1:b9:ee:92:17:78:43:ed:e6:6b:c6:7f:a6:48:68: 47:93:22:ac:60:91:82:97:14:64:c7:03:d1:6a:7a:d5:c2:5b: a2:cb:09:d9:87:62:2c:f7:e2:85:a7:27:77:1f:44:d3:a2:78: f3:51:62:66:d8:41:89:2f:fe:24:cb:0d:50:e0:50:a6:da:07: d8:1b:9c:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSiDwGVqw56BeB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTU3MzNlN2YtMWQxNS00YTcxLWIyNDMtM2ZlNmYzMGIwYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm+RnCSfcnFxDNAcb55+lHCdiPzFTNo8rRlb 1NMBPHQ/xym05BIwijdQjG6Z2BqDs91vUE16PUnrlYGOTa6GkgGX/+4w/l1u6W1F m8gbN+EAQRSC2PwIGVjfRovWYhCeml71LseHZQpFER1E28anQTyBQCyZBF0GQhsO BO0qzSMtIzpjEYE37VYjif23PBIWkY5/WdSAWRXgzxix9xvB72beZKamYz465XeU ghjabT3LimlnE9zt4DmqFE2Dyqzzo8qzefPV2Or1bSuUfdgD9sqcD2NpQG4O6wKa pjG2TMnQM7OdvhdNm37ARYyEB1GMljfP1XTIvhOuCbwQ5lpJ6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFkW1GYuTMV+XTuU+bE6DCAEN26LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjMzMWZlNmYtYmY3MC0z ZTc1LTlmMjItYzllMDBlODY2YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf+wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsVAoxV92Nt+9mBd9uaj0h2LX70bbq72NMPq0Z4LjmhXFcruYO6+bP KLCINqJS8KncUfQwrNHPlKUQbmSzDQFixl8lH4V0DWIRUBIWohAnWBQ43dXGZLIz Vs/QNEHMpqZ8pAJRtvo36bivVh9JRJOUFBMUIM6revqMT74z0jL7oUWxcC6LfBed aKvBTFH00qNkMEpC2lLf3oCrQVgd6qqkGFvZITopC5Eir8NxW1nVnn5dEa9hdpnB ue6SF3hD7eZrxn+mSGhHkyKsYJGClxRkxwPRanrVwluiywnZh2Is9+KFpyd3H0TT onjzUWJm2EGJL/4kyw1Q4FCm2gfYG5zr -----END CERTIFICATE-----Generated at Wed May 7 04:07:38 2025 by rpki-client