$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0abf54f7-48c9-3323-b355-88e6aeb522b7.roa File: 0abf54f7-48c9-3323-b355-88e6aeb522b7.roa (raw, json) Hash identifier: R3eNP3b7VRUzF0UQQXHIsaj6KqUbiu199byhWzznMOY= Subject key identifier: DF:6F:A0:BE:4B:A5:C8:A6:2E:A8:41:F3:38:9C:40:C6:44:1A:39:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112A4EFCB5392E519A2F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0abf54f7-48c9-3323-b355-88e6aeb522b7.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2a:4e:fc:b5:39:2e:51:9a:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=acb78d34-61ee-4d79-bf48-03a15fa47a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:96:e7:36:16:8e:e5:d0:9f:2b:98:f4:ed: d5:01:db:1a:40:9c:7e:cf:3e:d0:b7:66:f9:73:52: 5b:01:ec:22:8f:24:2d:80:93:5b:11:a2:85:99:66: d1:1c:89:f0:af:22:d4:5b:23:02:e1:25:b5:fc:1e: 69:27:a4:a7:25:3a:5b:63:4f:f3:81:ed:d7:df:5b: 19:ac:52:45:8e:66:ff:61:7e:d7:94:c4:4b:7f:10: 4e:e6:f7:64:7e:e6:6b:66:4a:62:a9:d3:f6:53:0a: 07:e5:67:64:3b:c8:a1:12:57:5f:30:f5:6d:45:30: 5c:5f:56:44:6e:fc:8b:37:80:9f:1a:48:25:19:d1: a5:5c:bb:eb:bb:0c:ed:39:52:19:67:01:15:d4:ab: 94:16:72:88:e8:36:04:a6:33:59:85:36:b6:6b:aa: 86:ca:16:ac:be:a8:6e:9a:49:70:95:b3:91:b1:5f: a3:8f:bc:36:46:7d:5a:b4:15:91:e5:3a:13:94:2f: f3:18:cf:51:71:6d:70:d8:d0:f8:99:80:ca:61:b4: 60:01:59:0f:f5:11:fe:8f:35:62:f3:1f:c0:25:ab: 2e:b8:c3:ee:2c:13:be:e2:25:82:62:ae:c5:11:2f: f8:d6:c5:64:6f:0f:74:59:29:e6:d4:f5:05:e8:b1: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6F:A0:BE:4B:A5:C8:A6:2E:A8:41:F3:38:9C:40:C6:44:1A:39:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0abf54f7-48c9-3323-b355-88e6aeb522b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f4:b0:f7:ef:91:54:3e:2b:0c:cf:c9:6b:2c:2a:11:e2:fb: 8e:5d:6e:3c:17:03:0a:fc:5d:a8:ed:f4:00:3d:ba:f9:9f:6b: 7c:8d:9f:8f:f9:05:df:53:cc:d0:80:c5:f4:55:ad:6a:38:6d: 61:fd:0b:f4:86:78:7e:3f:4c:cb:6b:1d:17:af:67:94:58:e1: 38:3c:19:c9:91:9c:a1:fa:bc:66:2c:cb:82:f0:9f:25:d4:30: 43:54:72:66:b5:03:c3:7d:a3:ed:fa:79:a5:74:49:37:57:e4: d0:5d:4e:31:4f:d2:66:2c:6b:ba:74:09:60:d8:e2:d5:63:52: e7:58:2b:a0:68:ac:a1:8e:f1:d2:31:29:ba:09:e6:dc:fc:00: 63:2f:91:89:5f:5d:92:70:f2:76:b7:1f:c6:cf:50:96:b6:e7: c6:dd:1f:4d:04:d1:8a:9d:83:84:7e:23:04:ba:6e:6b:1a:14: 73:65:5d:f7:1c:4e:5c:29:e3:b6:81:4e:9f:6a:1f:cc:39:7a: bf:1c:44:00:ae:88:a7:ab:57:d4:6d:78:2b:cb:43:b2:89:02: 7d:6b:ff:ba:57:c3:c5:7a:b0:6a:63:87:92:76:c8:5d:8b:c6: 64:69:0a:63:5f:bf:c2:86:80:25:6d:7d:a8:70:c9:8d:bc:84: 57:38:b7:0a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSESpO/LU5LlGaL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YWNiNzhkMzQtNjFlZS00ZDc5LWJmNDgtMDNhMTVmYTQ3YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicyW5zYWjuXQnyuY9O3VAdsaQJx+zz7Qt2b5 c1JbAewijyQtgJNbEaKFmWbRHInwryLUWyMC4SW1/B5pJ6SnJTpbY0/zge3X31sZ rFJFjmb/YX7XlMRLfxBO5vdkfuZrZkpiqdP2UwoH5WdkO8ihEldfMPVtRTBcX1ZE bvyLN4CfGkglGdGlXLvruwztOVIZZwEV1KuUFnKI6DYEpjNZhTa2a6qGyhasvqhu mklwlbORsV+jj7w2Rn1atBWR5ToTlC/zGM9RcW1w2ND4mYDKYbRgAVkP9RH+jzVi 8x/AJasuuMPuLBO+4iWCYq7FES/41sVkbw90WSnm1PUF6LFJRQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN9voL5LpcimLqhB8zicQMZEGjkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGFiZjU0ZjctNDhjOS0z MzIzLWIzNTUtODhlNmFlYjUyMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAT/Sw9++RVD4rDM/JaywqEeL7jl1uPBcDCvxdqO30AD26+Z9rfI2f j/kF31PM0IDF9FWtajhtYf0L9IZ4fj9My2sdF69nlFjhODwZyZGcofq8ZizLgvCf JdQwQ1RyZrUDw32j7fp5pXRJN1fk0F1OMU/SZixrunQJYNji1WNS51groGisoY7x 0jEpugnm3PwAYy+RiV9dknDydrcfxs9Qlrbnxt0fTQTRip2DhH4jBLpuaxoUc2Vd 9xxOXCnjtoFOn2ofzDl6vxxEAK6Ip6tX1G14K8tDsokCfWv/ulfDxXqwamOHknbI XYvGZGkKY1+/woaAJW19qHDJjbyEVzi3Cg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:00 2025 by rpki-client