$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aaab681-3551-3e6d-bdad-a8f966c205ec.roa File: 0aaab681-3551-3e6d-bdad-a8f966c205ec.roa (raw, json) Hash identifier: W4O+Pklmn340uU7lz24qHhlkxvXQEIY8cuVsQywcfl8= Subject key identifier: 84:61:4F:4A:15:68:2C:58:01:3E:6E:49:D3:DF:DD:93:DE:9A:30:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112AC8F8B37FB62A300880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aaab681-3551-3e6d-bdad-a8f966c205ec.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:1800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2a:c8:f8:b3:7f:b6:2a:30:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=33918058-eb23-4e9a-b54c-6020a588dd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:7a:14:bd:41:77:d9:c6:64:7d:50:c8:14: 13:91:1b:e7:a2:12:c7:30:b0:9b:1e:42:0d:8d:22: fa:cd:22:99:f4:bc:87:fd:57:95:fa:8e:b1:50:81: 94:2d:02:d8:8b:37:4d:9c:54:a9:a3:b3:f8:6d:36: 40:ab:3d:02:fb:7b:9f:fe:14:36:8b:2c:e6:5b:35: 05:75:3e:ca:bd:4d:2b:24:39:79:aa:0d:27:e5:f5: 71:f3:e8:69:0f:f9:9f:fd:46:a6:38:ec:d6:93:34: 18:46:6f:b9:05:3f:63:70:a8:1d:99:40:b6:9e:72: 90:85:fc:ab:d2:c1:8b:31:2f:76:62:bf:12:6e:55: 3e:4f:7d:d2:1b:c5:29:8a:a8:cd:4c:98:86:4c:7b: 06:f1:9c:3d:40:9a:d9:da:37:4b:d5:bd:e2:f1:0e: e0:f7:87:1d:1d:8b:fe:83:b8:c4:82:90:e3:06:bf: e2:4a:96:bb:4b:0d:bb:14:f3:71:4a:37:4d:d1:fd: 94:5f:7a:ec:b9:a5:f1:d4:b7:e1:71:72:6c:d7:aa: b3:d7:b4:c0:f4:95:f0:ce:41:3f:fa:ef:88:03:9f: 18:10:e3:f7:ef:bf:f8:9c:c9:48:1c:c2:ac:f4:73: 7c:ac:24:12:46:fa:30:e4:3e:91:6b:47:5f:03:d2: df:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:61:4F:4A:15:68:2C:58:01:3E:6E:49:D3:DF:DD:93:DE:9A:30:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aaab681-3551-3e6d-bdad-a8f966c205ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:05:a9:40:1a:85:67:ae:a4:4c:6f:0e:5b:67:eb:69:6e:97: 51:50:d4:11:19:c8:11:24:58:5a:57:e8:ac:69:bb:8b:e0:a0: 87:31:15:18:f9:bf:6a:85:ea:64:23:02:b6:d4:6b:99:a9:fa: 09:91:e9:4e:6f:77:f0:be:9d:cd:21:ec:64:89:37:70:e7:b6: 49:70:6a:c6:aa:62:86:69:d6:42:a2:6f:2f:63:57:1b:09:03: ac:fa:ec:2e:88:af:c4:9b:ab:cb:ee:8a:9c:a1:0d:e7:7f:d0: 51:b5:0a:ca:3d:bd:a8:eb:66:0b:50:d4:ca:5b:05:49:b6:07: b5:b4:ee:73:24:79:44:32:2e:46:6a:bd:b5:89:ca:c1:88:41: 70:f9:75:5e:e0:7b:89:13:9c:0c:75:e5:f9:17:64:9c:20:76: 73:c0:bf:cd:18:31:85:d8:0c:04:92:f5:54:fd:68:51:82:d7: da:70:b2:5f:a1:a7:c4:2c:2a:2e:63:6a:2a:34:bf:5d:44:7a: d2:9c:2d:db:36:d9:72:7a:c0:6b:60:ab:93:47:af:cb:59:14: 54:34:de:c7:d0:12:c5:1a:5e:bb:72:f6:fd:62:de:01:c0:e1: d5:2c:85:77:fd:8b:1b:32:3c:4b:cb:d0:db:d1:ea:53:79:7b: ac:df:da:15 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSESrI+LN/tiowCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MzM5MTgwNTgtZWIyMy00ZTlhLWI1NGMtNjAyMGE1ODhkZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj16FL1Bd9nGZH1QyBQTkRvnohLHMLCbHkIN jSL6zSKZ9LyH/VeV+o6xUIGULQLYizdNnFSpo7P4bTZAqz0C+3uf/hQ2iyzmWzUF dT7KvU0rJDl5qg0n5fVx8+hpD/mf/UamOOzWkzQYRm+5BT9jcKgdmUC2nnKQhfyr 0sGLMS92Yr8SblU+T33SG8UpiqjNTJiGTHsG8Zw9QJrZ2jdL1b3i8Q7g94cdHYv+ g7jEgpDjBr/iSpa7Sw27FPNxSjdN0f2UX3rsuaXx1LfhcXJs16qz17TA9JXwzkE/ +u+IA58YEOP377/4nMlIHMKs9HN8rCQSRvow5D6Ra0dfA9LfbwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIRhT0oVaCxYAT5uSdPf3ZPemjBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGFhYWI2ODEtMzU1MS0z ZTZkLWJkYWQtYThmOTY2YzIwNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATwWpQBqFZ66kTG8OW2fraW6XUVDUERnIESRYWlforGm7i+CghzEV GPm/aoXqZCMCttRrman6CZHpTm938L6dzSHsZIk3cOe2SXBqxqpihmnWQqJvL2NX GwkDrPrsLoivxJury+6KnKEN53/QUbUKyj29qOtmC1DUylsFSbYHtbTucyR5RDIu Rmq9tYnKwYhBcPl1XuB7iROcDHXl+RdknCB2c8C/zRgxhdgMBJL1VP1oUYLX2nCy X6GnxCwqLmNqKjS/XUR60pwt2zbZcnrAa2Crk0evy1kUVDTex9ASxRpeu3L2/WLe AcDh1SyFd/2LGzI8S8vQ29HqU3l7rN/aFQ== -----END CERTIFICATE-----Generated at Thu Apr 10 01:58:13 2025 by rpki-client