$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb51557-45e4-39cc-bb83-55f34037e45c.roa File: feb51557-45e4-39cc-bb83-55f34037e45c.roa (raw, json) Hash identifier: Xx1lWG40es2tHLFIlwPJdgDESON0k+dJHvPQ720uD8Y= Subject key identifier: 60:6E:12:19:8E:7F:3B:4C:CF:FE:11:78:9E:58:23:0C:73:62:A6:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A17833A8424A015154400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb51557-45e4-39cc-bb83-55f34037e45c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2001:4840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:17:83:3a:84:24:a0:15:15:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=57da2335-af9c-4f61-8f3e-d739ed250fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:c0:4b:2a:09:be:54:92:16:90:32:4e:55: e6:bf:5d:93:a2:a0:02:bb:e8:df:b1:ec:17:4e:20: 1c:b7:10:92:0f:ad:86:eb:c6:17:b6:78:ba:15:0f: dd:cb:17:20:55:2e:69:37:47:16:73:35:c9:1f:25: 7e:2a:fc:d5:fc:0c:4e:7f:03:af:92:38:58:9e:a0: 2e:da:dc:08:ce:20:36:34:51:d1:87:50:77:a6:fd: 85:41:a8:29:97:ba:7b:1f:a4:e2:6e:22:01:02:40: 64:21:58:8a:2c:8f:c1:c1:ea:89:0a:fd:66:4f:c8: 9b:66:ce:ac:8e:50:e9:9b:5c:8b:9d:54:8d:85:2f: 82:f5:c3:c4:d6:21:88:91:11:8e:2a:ec:c0:97:71: 13:f5:39:2e:c4:ee:85:dc:12:e5:a7:3a:1e:6f:cd: 2f:5e:b3:6f:75:1f:67:8d:c8:f0:86:8e:c2:5e:6d: 76:df:8a:1c:cd:55:40:74:19:5d:57:20:23:d6:55: 32:a5:f2:53:ab:93:90:16:66:bd:df:18:24:e0:39: 4b:af:5c:b6:86:f7:2e:2d:34:34:a8:29:45:41:bc: 0c:e7:20:65:16:4d:c8:2e:5f:3d:8a:a4:30:6a:dc: 30:1e:48:92:5c:cc:fa:16:73:ca:b3:1e:97:92:28: f9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6E:12:19:8E:7F:3B:4C:CF:FE:11:78:9E:58:23:0C:73:62:A6:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/feb51557-45e4-39cc-bb83-55f34037e45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:70:3b:af:e5:5b:ce:a6:47:65:29:29:6b:4c:8e:44:1c:98: 91:15:16:43:7d:eb:ad:ec:05:4b:ec:de:c1:75:73:35:c9:3a: ba:37:ec:04:76:07:ae:43:6f:e9:84:e2:eb:ff:ad:6a:28:2c: c6:ec:56:39:35:91:8c:55:b0:2f:45:ee:5d:5d:47:f7:5c:a9: a8:7e:e5:bf:88:f1:b8:2c:ed:5e:7a:a3:a1:e2:1c:09:6d:4d: ad:0a:91:7a:6e:32:e7:84:2e:10:c3:4a:91:3e:39:42:61:e6: da:01:2b:0d:b4:ec:b3:28:1a:5f:76:0c:68:e7:ff:ab:b2:f2: 8e:b0:0b:8a:64:00:20:db:61:e1:8f:a9:cf:40:d8:74:06:80: 67:80:d1:ea:d7:d3:22:4b:4e:80:fe:65:d7:3e:c1:35:4f:4b: 39:14:f7:32:21:ee:b2:6a:76:0b:18:90:54:b3:8b:92:fe:5a: e6:23:55:44:9f:22:a8:31:29:9a:23:11:7c:53:a2:91:33:f2: 4b:71:ab:26:b4:27:9e:c6:1e:dc:6d:7a:77:6d:c5:cb:40:35: 0c:c2:66:d5:51:03:73:e1:d3:cd:6d:4b:e7:0c:9f:86:34:59: ad:4b:10:3d:79:b1:3a:a4:29:d7:b6:d7:74:b7:49:f8:5b:44: ab:9f:6e:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSheDOoQkoBUVRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTdkYTIzMzUtYWY5Yy00ZjYxLThmM2UtZDczOWVkMjUwZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+XASyoJvlSSFpAyTlXmv12ToqACu+jfsewX TiActxCSD62G68YXtni6FQ/dyxcgVS5pN0cWczXJHyV+KvzV/AxOfwOvkjhYnqAu 2twIziA2NFHRh1B3pv2FQagpl7p7H6TibiIBAkBkIViKLI/BweqJCv1mT8ibZs6s jlDpm1yLnVSNhS+C9cPE1iGIkRGOKuzAl3ET9TkuxO6F3BLlpzoeb80vXrNvdR9n jcjwho7CXm1234oczVVAdBldVyAj1lUypfJTq5OQFma93xgk4DlLr1y2hvcuLTQ0 qClFQbwM5yBlFk3ILl89iqQwatwwHkiSXMz6FnPKsx6Xkij50QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGBuEhmOfztMz/4ReJ5YIwxzYqajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmViNTE1NTctNDVlNC0z OWNjLWJiODMtNTVmMzQwMzdlNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmcDuv5VvOpkdlKSlrTI5EHJiRFRZDfeut7AVL7N7BdXM1yTq6N+wE dgeuQ2/phOLr/61qKCzG7FY5NZGMVbAvRe5dXUf3XKmofuW/iPG4LO1eeqOh4hwJ bU2tCpF6bjLnhC4Qw0qRPjlCYebaASsNtOyzKBpfdgxo5/+rsvKOsAuKZAAg22Hh j6nPQNh0BoBngNHq19MiS06A/mXXPsE1T0s5FPcyIe6yanYLGJBUs4uS/lrmI1VE nyKoMSmaIxF8U6KRM/JLcasmtCeexh7cbXp3bcXLQDUMwmbVUQNz4dPNbUvnDJ+G NFmtSxA9ebE6pCnXttd0t0n4W0Srn27K -----END CERTIFICATE-----Generated at Sat May 10 22:12:52 2025 by rpki-client