$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc5779c5-99d3-34c3-9ebb-310e16731a98.roa File: fc5779c5-99d3-34c3-9ebb-310e16731a98.roa (raw, json) Hash identifier: Yo8I2p24+4tTDFFSAyDj+AxQJRjHkbfFnE8U/f6F+ms= Subject key identifier: 2B:75:99:FB:04:82:45:09:F5:EC:34:D0:BA:B4:8D:E6:8F:30:01:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1BD152EF66C6063DE200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc5779c5-99d3-34c3-9ebb-310e16731a98.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1b:d1:52:ef:66:c6:06:3d:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=57a98fa3-9eca-45b7-9939-b50aaad1da08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:e8:2e:7d:0f:54:b6:2c:53:8b:0b:4f:b0: d7:ba:10:63:d8:8a:c7:c7:e5:5e:21:0e:0f:46:0d: c8:d7:38:36:c2:58:88:71:1a:db:ba:41:cd:ac:f9: 3a:6d:99:09:3b:9a:7d:92:4a:1a:4e:99:0a:19:de: d3:cf:cf:7a:30:c5:18:a9:77:6f:84:33:02:31:5f: e9:7f:95:db:76:ce:ec:49:33:c2:97:8c:53:ec:fd: 9f:42:be:b6:be:99:fc:d5:f1:bc:ce:6c:a3:92:f3: bb:97:f2:6b:b0:77:bf:fe:a6:44:59:d2:94:29:3e: 85:3f:ee:74:1e:98:1e:f4:1a:db:ba:f2:d4:95:c8: e4:33:b8:e7:1b:f2:ad:7d:7d:fb:68:7c:fe:21:8f: 83:26:9c:5e:0f:00:0e:e8:b6:07:b1:1c:67:18:4b: fe:a9:39:98:e6:5b:a5:7f:65:a4:49:1c:74:74:a1: 84:b9:63:14:92:b3:98:9f:d5:16:3a:8b:c2:bd:52: 44:d1:37:65:a4:2f:11:1a:af:b9:18:35:42:d6:ec: 37:e7:42:05:fb:be:1e:97:98:84:38:12:8c:94:a9: 7b:7b:b5:68:11:5d:61:72:55:b6:28:22:35:df:1f: 6f:49:d2:a6:0c:2d:8f:c1:85:e5:3e:2d:10:f9:fa: 31:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:75:99:FB:04:82:45:09:F5:EC:34:D0:BA:B4:8D:E6:8F:30:01:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc5779c5-99d3-34c3-9ebb-310e16731a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0b:fa:87:86:f7:50:2f:b2:ab:2f:72:bb:56:bf:1f:8a:68: 98:56:fb:df:fd:54:ea:3d:76:c1:87:b8:fe:fa:5a:97:41:32: 54:44:09:ef:7c:b7:a5:77:d1:e7:22:bb:eb:2d:fd:99:ab:99: 9c:b1:5d:a8:b8:a7:67:7f:80:e9:af:99:d6:5b:27:67:d9:bb: a4:33:28:66:22:bc:13:ed:a4:8f:0e:46:4d:4d:5b:66:59:78: 29:c3:17:77:1a:14:40:11:e7:3d:a7:f3:84:b6:a9:1b:f7:50: 50:c2:49:f9:03:66:76:41:1a:89:9f:3c:aa:9b:77:29:13:7d: c0:44:9d:39:ef:c5:de:a1:47:55:22:55:39:9b:f6:4e:4c:fa: 25:8e:90:0e:14:30:b9:72:25:a2:1e:99:29:33:0b:2d:9e:8a: a5:41:2c:e7:d0:4a:d0:03:c7:83:d2:c5:e3:50:18:9e:f8:db: 17:51:79:55:81:e8:19:e9:5c:9e:16:27:4d:7d:ed:4f:77:4d: eb:af:3b:15:9e:54:9e:5f:70:5e:dc:26:1a:b2:8d:32:96:db: 8f:13:96:43:e6:97:a7:bb:40:2d:a3:79:93:50:40:77:69:59: 8b:d2:e5:d8:a2:67:86:e0:10:44:9f:9f:b6:73:5c:46:2a:11: 54:26:78:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxShvRUu9mxgY94gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTdhOThmYTMtOWVjYS00NWI3LTk5MzktYjUwYWFhZDFkYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5zoLn0PVLYsU4sLT7DXuhBj2IrHx+VeIQ4P Rg3I1zg2wliIcRrbukHNrPk6bZkJO5p9kkoaTpkKGd7Tz896MMUYqXdvhDMCMV/p f5Xbds7sSTPCl4xT7P2fQr62vpn81fG8zmyjkvO7l/JrsHe//qZEWdKUKT6FP+50 Hpge9BrbuvLUlcjkM7jnG/KtfX37aHz+IY+DJpxeDwAO6LYHsRxnGEv+qTmY5lul f2WkSRx0dKGEuWMUkrOYn9UWOovCvVJE0TdlpC8RGq+5GDVC1uw350IF+74el5iE OBKMlKl7e7VoEV1hclW2KCI13x9vSdKmDC2PwYXlPi0Q+foxYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCt1mfsEgkUJ9ew00Lq0jeaPMAGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmM1Nzc5YzUtOTlkMy0z NGMzLTllYmItMzEwZTE2NzMxYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADoL+oeG91AvsqsvcrtWvx+KaJhW+9/9VOo9dsGHuP76WpdBMlRE Ce98t6V30eciu+st/ZmrmZyxXai4p2d/gOmvmdZbJ2fZu6QzKGYivBPtpI8ORk1N W2ZZeCnDF3caFEAR5z2n84S2qRv3UFDCSfkDZnZBGomfPKqbdykTfcBEnTnvxd6h R1UiVTmb9k5M+iWOkA4UMLlyJaIemSkzCy2eiqVBLOfQStADx4PSxeNQGJ742xdR eVWB6BnpXJ4WJ0197U93TeuvOxWeVJ5fcF7cJhqyjTKW248TlkPml6e7QC2jeZNQ QHdpWYvS5diiZ4bgEESfn7ZzXEYqEVQmePU= -----END CERTIFICATE-----Generated at Sun May 11 00:42:47 2025 by rpki-client