$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02750d3e-aef9-394e-a8c6-89cf4f79c875.roa File: 02750d3e-aef9-394e-a8c6-89cf4f79c875.roa (raw, json) Hash identifier: PPvrujwb7J/e6hPpNgXvpx0avYW/nY9OxrQH4D0o3Hw= Subject key identifier: 3A:B4:2E:8D:2D:04:DB:87:70:09:2D:BD:B6:09:92:A8:1A:D9:3B:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FEDCB085B7004BA0FC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02750d3e-aef9-394e-a8c6-89cf4f79c875.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fe:dc:b0:85:b7:00:4b:a0:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=e1ee6ab9-6651-407f-b69a-56c53d0f4a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8e:0b:5e:e5:0b:b0:b8:e2:5e:be:d0:08:99: 1e:8c:b7:24:0b:4e:81:35:8f:f1:29:0a:02:29:64: e5:3a:d3:b5:04:61:5f:74:8c:4d:a5:f0:69:0d:ca: 96:53:03:01:02:f4:08:13:0b:5c:29:a0:58:fa:e5: 35:72:46:76:ea:3c:6f:01:4e:ee:6e:37:f2:e2:7d: 25:1c:4c:c3:58:7a:b6:32:9e:46:0f:64:13:21:12: 17:b5:4a:19:4c:a3:91:ef:4f:21:97:c4:ac:43:65: 37:52:4d:31:ea:5e:9a:c1:d2:56:d1:8d:79:a6:44: 9c:d3:8d:b3:39:81:26:a9:cb:ef:ca:87:79:c9:b3: a0:e4:52:aa:7c:c3:22:14:ce:b9:dd:c5:af:cc:a4: fd:c0:0a:31:80:fb:e0:62:ec:51:cd:2e:98:7d:d8: d2:a7:0d:96:dd:3f:53:96:0f:2e:10:25:70:b6:0e: dd:2a:1d:2a:55:39:04:db:c9:14:f9:88:29:7c:c3: bc:78:0c:91:dc:11:f4:ac:78:58:28:27:34:f5:bb: 36:81:7f:2b:db:68:b5:0a:2f:72:1a:71:1f:ab:25: 97:4e:3e:c0:9f:98:c5:45:74:b2:15:d1:7d:13:4b: 9f:c0:27:82:66:6b:6e:eb:d3:d9:79:e2:ac:3d:fc: ec:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B4:2E:8D:2D:04:DB:87:70:09:2D:BD:B6:09:92:A8:1A:D9:3B:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02750d3e-aef9-394e-a8c6-89cf4f79c875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:57:30:24:7f:fc:45:c0:98:d7:8f:bb:3a:c3:eb:5c:e4:e6: 30:ef:69:ce:76:f9:1d:04:24:64:8c:ce:aa:43:04:41:32:3e: 09:a7:b3:ee:bf:78:0f:7d:26:38:8c:d7:45:fc:15:7c:7e:c8: 1f:9c:b1:93:f1:1a:e4:95:c6:0f:f9:ef:cf:ea:7a:16:d1:ff: 72:cb:95:a6:85:2a:94:fa:fd:80:3d:1c:cd:71:1b:94:bd:11: 19:d8:d6:46:c9:97:8d:1c:74:e2:86:3c:29:8a:7f:6b:30:6f: 55:a4:d0:3a:d3:d7:70:58:ec:ce:34:54:c9:4b:37:6f:64:64: 98:2c:c0:89:dd:5e:d7:5d:9c:fd:ee:ef:60:64:5d:5c:da:c1: d1:5b:0b:bd:ac:06:59:4c:b8:bf:43:af:c9:61:ab:d6:23:22: f7:a1:1f:20:07:6f:8a:9e:98:9e:99:d7:71:6e:ee:0b:2b:c5: 65:26:33:98:97:40:5c:11:0e:c0:1c:64:4f:8f:29:09:e1:1c: d3:94:1c:57:c4:46:bf:d4:44:d0:e0:e4:ca:c9:3f:2f:5a:28: be:4e:77:67:22:99:39:d9:f7:65:db:21:e7:21:b5:39:a6:df: 14:a2:cc:06:66:93:2a:20:4a:d0:2c:fb:2a:43:9d:24:2d:cc: bf:66:94:15 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSEP7csIW3AEug/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZTFlZTZhYjktNjY1MS00MDdmLWI2OWEtNTZjNTNkMGY0YTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I4LXuULsLjiXr7QCJkejLckC06BNY/xKQoC KWTlOtO1BGFfdIxNpfBpDcqWUwMBAvQIEwtcKaBY+uU1ckZ26jxvAU7ubjfy4n0l HEzDWHq2Mp5GD2QTIRIXtUoZTKOR708hl8SsQ2U3Uk0x6l6awdJW0Y15pkSc042z OYEmqcvvyod5ybOg5FKqfMMiFM653cWvzKT9wAoxgPvgYuxRzS6YfdjSpw2W3T9T lg8uECVwtg7dKh0qVTkE28kU+YgpfMO8eAyR3BH0rHhYKCc09bs2gX8r22i1Ci9y GnEfqyWXTj7An5jFRXSyFdF9E0ufwCeCZmtu69PZeeKsPfzsOwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDq0Lo0tBNuHcAktvbYJkqga2TseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDI3NTBkM2UtYWVmOS0z OTRlLWE4YzYtODljZjRmNzljODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALlcwJH/8RcCY14+7OsPrXOTmMO9pznb5HQQkZIzOqkMEQTI+Caez 7r94D30mOIzXRfwVfH7IH5yxk/Ea5JXGD/nvz+p6FtH/csuVpoUqlPr9gD0czXEb lL0RGdjWRsmXjRx04oY8KYp/azBvVaTQOtPXcFjszjRUyUs3b2RkmCzAid1e112c /e7vYGRdXNrB0VsLvawGWUy4v0OvyWGr1iMi96EfIAdvip6YnpnXcW7uCyvFZSYz mJdAXBEOwBxkT48pCeEc05QcV8RGv9RE0ODkysk/L1oovk53ZyKZOdn3Zdsh5yG1 OabfFKLMBmaTKiBK0Cz7KkOdJC3Mv2aUFQ== -----END CERTIFICATE-----Generated at Sat Apr 5 20:30:06 2025 by rpki-client