$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa File: fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa (raw, json) Hash identifier: GS/9fydd9Q5hMMqyjGgkpCJqTMOxh2rkR+G7pYZs/eE= Subject key identifier: 39:8C:60:87:8F:96:9D:44:2B:45:7D:A0:BC:65:C7:68:83:20:C3:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4756099033A550F28B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 2604:cb00:2900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:47:56:09:90:33:a5:50:f2:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7d1aeef4-ebfc-497c-bbde-e7d50759e9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ac:9e:6f:0c:58:59:1d:fa:cb:5a:cb:fa:0d: 61:17:f7:dd:f1:69:bf:45:6e:9f:9d:3b:df:b4:b4: e7:c7:a5:69:6c:d5:8f:6c:a8:0f:ce:a8:7e:0d:61: b5:82:a3:4c:b1:80:9f:29:db:d3:db:80:c0:21:7a: 91:20:5f:f3:85:52:9b:d5:51:90:0a:01:a8:30:67: 95:ea:dd:a6:65:80:00:d3:2b:ce:61:e5:20:9a:eb: 90:ac:78:bc:36:fb:93:34:fe:e3:fa:68:d9:1a:83: 22:58:ff:36:b0:fb:ab:6c:50:60:69:56:86:78:be: d2:66:ae:b3:a0:cf:86:ca:d0:71:3c:02:1f:02:35: 36:d7:59:96:57:85:05:a9:b5:31:0c:b3:65:60:e0: 9b:74:ba:58:66:91:86:46:d2:8a:2a:08:b9:dd:bc: 0d:65:2b:92:a2:55:1c:87:30:5c:f3:3e:44:17:cf: db:52:0f:f1:6d:53:9a:ca:5b:bf:38:b3:a2:a0:59: 70:b1:d0:98:2f:79:0f:72:b8:72:a1:f2:ae:ac:89: 0f:66:48:a1:cf:1d:0c:34:cd:35:0c:e9:e5:86:9d: c9:3b:1d:b4:6e:15:05:3b:21:c8:a6:44:54:95:14: 4c:a0:d5:fd:70:af:70:e9:0b:84:02:bc:22:43:4e: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8C:60:87:8F:96:9D:44:2B:45:7D:A0:BC:65:C7:68:83:20:C3:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4b:71:cf:74:90:b5:5d:0a:de:5c:19:41:a8:ae:28:fb:af: b0:4a:83:a0:02:6f:9a:8f:c3:ae:bc:92:e0:21:3c:ec:58:b6: e3:1c:1f:f1:a1:6d:cf:6f:de:8b:36:f3:cd:df:bb:6d:ab:96: 5a:43:57:48:0d:80:8e:be:ea:ce:72:e7:c2:ec:f3:4b:16:11: c1:9f:45:f9:61:5e:5b:27:0e:84:c3:6a:25:aa:79:95:08:e6: 52:06:94:f5:1e:aa:38:cb:2c:78:58:4b:aa:fc:f1:0d:76:f4: 4a:aa:33:22:28:7f:38:4c:7f:07:02:66:9d:ee:b5:ec:5d:14: 6d:73:53:a3:f4:14:7c:c1:23:f9:9d:4f:52:f7:82:ae:5d:96: 4e:3c:6a:61:b0:25:b3:55:6a:c8:9e:f2:86:74:fb:82:97:2f: 6f:fe:c6:7e:a0:0a:0a:1f:76:50:75:52:25:60:5b:ce:81:c9: c0:d1:f0:e2:8c:b9:42:4d:52:1f:ab:14:6a:66:b5:d5:a9:77: b1:6d:6e:c7:1b:64:c2:d2:a4:34:a8:a2:89:73:97:41:2a:5b: 33:d8:f9:34:21:2a:ad:b0:6e:71:9a:d0:5e:26:3c:fb:55:ba: 18:3c:db:09:8e:96:55:60:e6:66:b5:63:a6:53:be:b3:92:44: e2:72:e9:15 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSkdWCZAzpVDyiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2QxYWVlZjQtZWJmYy00OTdjLWJiZGUtZTdkNTA3NTllOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36yebwxYWR36y1rL+g1hF/fd8Wm/RW6fnTvf tLTnx6VpbNWPbKgPzqh+DWG1gqNMsYCfKdvT24DAIXqRIF/zhVKb1VGQCgGoMGeV 6t2mZYAA0yvOYeUgmuuQrHi8NvuTNP7j+mjZGoMiWP82sPurbFBgaVaGeL7SZq6z oM+GytBxPAIfAjU211mWV4UFqbUxDLNlYOCbdLpYZpGGRtKKKgi53bwNZSuSolUc hzBc8z5EF8/bUg/xbVOaylu/OLOioFlwsdCYL3kPcrhyofKurIkPZkihzx0MNM01 DOnlhp3JOx20bhUFOyHIpkRUlRRMoNX9cK9w6QuEArwiQ05eiQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDmMYIePlp1EK0V9oLxlx2iDIMPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmVkMWM2N2MtZGIyMi0z NDgzLWIyZTMtZjU5NmUwN2RiY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAK0txz3SQtV0K3lwZQaiuKPuvsEqDoAJvmo/DrryS4CE87Fi24xwf 8aFtz2/eizbzzd+7bauWWkNXSA2Ajr7qznLnwuzzSxYRwZ9F+WFeWycOhMNqJap5 lQjmUgaU9R6qOMsseFhLqvzxDXb0SqozIih/OEx/BwJmne617F0UbXNTo/QUfMEj +Z1PUveCrl2WTjxqYbAls1VqyJ7yhnT7gpcvb/7GfqAKCh92UHVSJWBbzoHJwNHw 4oy5Qk1SH6sUama11al3sW1uxxtkwtKkNKiiiXOXQSpbM9j5NCEqrbBucZrQXiY8 +1W6GDzbCY6WVWDmZrVjplO+s5JE4nLpFQ== -----END CERTIFICATE-----Generated at Wed May 7 01:06:40 2025 by rpki-client