$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/106d5bb7-bab7-33dc-99c7-aa4ffb37aa66.roa File: 106d5bb7-bab7-33dc-99c7-aa4ffb37aa66.roa (raw, json) Hash identifier: hJXb692nZe4v82FnxqoXtxg5iE7OW2jdCiobbz1namI= Subject key identifier: 6E:E9:2D:8E:4C:D3:62:3B:D3:F8:EF:7A:B0:F7:C8:79:89:13:1B:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D7A6592ACEAF937110D6AD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/106d5bb7-bab7-33dc-99c7-aa4ffb37aa66.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:59:2a:ce:af:93:71:10:d6:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=d8866cfd-5b6d-4e69-bbf8-264c97d7ff97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:3a:8b:09:d2:98:6c:e7:ba:6b:d1:d9:f6: 7f:e0:4f:ba:ed:0f:e1:7a:a7:9a:de:8a:5d:0f:38: b6:15:4a:73:10:b5:c4:9b:ba:30:f1:55:1b:d0:7c: 54:9a:f7:c3:ab:e7:27:1a:25:29:b9:99:2e:ea:5c: 8d:38:2d:a2:9d:af:e4:20:76:5f:b7:17:16:f5:d9: 20:f0:59:9d:8c:3b:38:b1:6d:9d:dc:06:07:8b:87: 61:a2:72:7e:fc:57:2e:72:b0:48:9e:06:53:f7:40: 73:3c:e0:1d:76:ba:29:87:87:fa:2e:63:94:64:bc: a8:f2:65:4b:c9:a8:82:03:3e:e8:fa:60:f1:4b:94: 6d:82:d3:aa:6e:3d:c6:4e:3f:4d:8e:9c:03:29:36: 9d:e5:6c:68:38:46:08:63:2e:fa:85:eb:fc:1f:8b: ae:17:98:ee:f1:28:c9:3e:f5:82:23:48:c9:5a:03: 70:c7:54:d3:eb:0a:82:19:7c:44:c2:e4:f8:a5:36: 4d:fb:49:19:47:6e:52:8f:e5:ed:41:85:cb:44:cd: 14:eb:2e:af:74:9f:0b:10:cc:4d:2f:1e:19:03:85: b3:8d:e7:c0:07:4c:d1:02:67:9b:70:bb:96:d1:65: c0:f9:ed:42:b7:a8:2a:02:19:89:7b:64:68:b1:32: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E9:2D:8E:4C:D3:62:3B:D3:F8:EF:7A:B0:F7:C8:79:89:13:1B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/106d5bb7-bab7-33dc-99c7-aa4ffb37aa66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:bf:20:f4:91:70:71:1e:55:7e:dd:57:b0:3f:b4:a4:d5:76: 0c:4d:e7:16:6e:1b:d4:3d:03:2f:26:8c:05:eb:80:52:0d:2b: f4:67:7f:fe:1b:66:00:3e:5c:5c:f2:6c:de:98:06:ab:6e:0d: f9:bf:4e:46:f8:b8:56:bf:71:7e:a0:28:19:d9:23:71:ca:2d: d1:4f:2d:02:60:1f:f5:83:0e:9d:d2:e8:31:7e:e9:4d:76:da: 13:5a:5d:33:ee:ce:f5:e3:f4:5d:1c:29:08:2f:bd:d4:ea:70: d1:a5:5f:39:ed:65:4b:57:8a:6a:38:a8:ca:0c:32:ed:45:1e: 90:81:9d:ec:d4:9c:db:4a:04:dc:3c:e9:fe:94:db:2a:b8:17: ab:bb:58:d6:73:d3:79:44:d4:83:62:af:78:d2:2e:ef:58:43: c5:c1:32:e2:50:98:e7:d1:dc:f3:df:7d:18:45:c9:62:53:6a: 8f:08:3d:40:00:50:4a:bb:46:d7:56:5f:6b:b0:95:83:28:6d: d5:f4:28:07:00:44:8e:18:bb:49:96:c6:30:e2:7d:9c:99:25: 20:e6:1a:ed:4b:23:86:9a:bc:4a:75:96:4c:c5:c5:32:9a:8a: 98:e1:8c:e4:ea:53:ae:48:2e:52:f2:12:d5:b6:c1:a8:be:36: 9e:98:94:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXplkqzq+TcRDWrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZDg4NjZjZmQtNWI2ZC00ZTY5LWJiZjgtMjY0Yzk3ZDdmZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sM6iwnSmGznumvR2fZ/4E+67Q/heqea3opd Dzi2FUpzELXEm7ow8VUb0HxUmvfDq+cnGiUpuZku6lyNOC2ina/kIHZftxcW9dkg 8FmdjDs4sW2d3AYHi4dhonJ+/FcucrBIngZT90BzPOAddroph4f6LmOUZLyo8mVL yaiCAz7o+mDxS5RtgtOqbj3GTj9NjpwDKTad5WxoOEYIYy76hev8H4uuF5ju8SjJ PvWCI0jJWgNwx1TT6wqCGXxEwuT4pTZN+0kZR25Sj+XtQYXLRM0U6y6vdJ8LEMxN Lx4ZA4WzjefAB0zRAmebcLuW0WXA+e1Ct6gqAhmJe2RosTKP5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG7pLY5M02I70/jverD3yHmJExs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA2ZDViYjctYmFiNy0z M2RjLTk5YzctYWE0ZmZiMzdhYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABa/IPSRcHEeVX7dV7A/tKTVdgxN5xZuG9Q9Ay8mjAXrgFINK/Rn f/4bZgA+XFzybN6YBqtuDfm/Tkb4uFa/cX6gKBnZI3HKLdFPLQJgH/WDDp3S6DF+ 6U122hNaXTPuzvXj9F0cKQgvvdTqcNGlXzntZUtXimo4qMoMMu1FHpCBnezUnNtK BNw86f6U2yq4F6u7WNZz03lE1INir3jSLu9YQ8XBMuJQmOfR3PPffRhFyWJTao8I PUAAUEq7RtdWX2uwlYMobdX0KAcARI4Yu0mWxjDifZyZJSDmGu1LI4aavEp1lkzF xTKaipjhjOTqU65ILlLyEtW2wai+Np6YlKg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:21 2025 by rpki-client