$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa File: 15be2d45-d867-3d76-b5bf-f422f8eab30f.roa (raw, json) Hash identifier: rzAtuZ0GLAALf0m/8Zr/7EBTCMNfH6tVe+FZiZSr9JI= Subject key identifier: 7D:10:B1:16:7F:DB:F7:C2:E3:CC:09:13:AB:99:D8:61:4E:16:93:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21129E661F58731A5662E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:32::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:29:e6:61:f5:87:31:a5:66:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=9956da25-1a69-445b-93fc-75349d5be34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:1e:5e:f1:7b:b3:42:a5:b9:cf:33:76:45: 7e:2e:f8:21:ae:05:66:fc:c6:27:62:95:74:85:7c: c3:37:10:13:01:63:a8:2a:bb:8c:a3:ec:2d:70:ae: a2:6a:b5:9c:4e:60:77:61:43:ff:8b:d7:9c:8f:0f: fe:15:17:e6:1f:5f:c6:64:4a:18:c0:89:e3:46:55: 39:16:dd:4d:70:df:e1:ef:a9:ec:6a:63:96:25:0f: f3:7f:4e:5a:fd:cf:85:bc:9c:7c:f6:84:34:d1:19: 3a:74:9b:e5:30:65:75:b3:51:e2:fe:ed:41:7c:9c: 94:58:5a:1b:b4:f7:15:eb:f2:00:d5:8d:e9:ed:6c: 32:8f:67:af:27:be:d3:2e:63:2e:87:72:01:15:32: 3a:5c:fd:10:d0:60:b1:64:4b:e5:a3:3d:5a:7c:7e: 80:a2:7a:25:75:23:88:12:0c:b3:e2:d0:53:ce:29: a1:6f:09:a0:a8:ac:12:8c:01:54:6d:97:b0:50:59: 73:c1:df:84:5b:67:fc:19:46:ee:58:3b:2f:a1:aa: 4b:89:4f:28:af:b0:ec:ab:6d:46:15:55:1b:8f:11: 41:6c:ee:ef:fe:19:d0:07:4a:bf:ce:d8:27:9e:1f: ac:88:b0:61:02:01:15:2f:16:97:20:75:9b:e5:66: bf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:10:B1:16:7F:DB:F7:C2:E3:CC:09:13:AB:99:D8:61:4E:16:93:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15be2d45-d867-3d76-b5bf-f422f8eab30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:32::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bf:45:1c:b7:56:6a:2b:c9:77:0d:5f:52:f5:3f:3d:19:cc: c8:31:de:ef:f5:bb:f8:91:77:f5:04:ae:46:8e:a1:48:31:16: c3:6d:22:36:37:45:80:23:a0:6c:e3:9c:73:bb:bc:af:38:79: 18:78:12:f2:85:46:0d:35:f3:b5:d8:4a:e2:e0:d3:39:22:7f: fe:f2:53:1b:64:9c:70:07:22:c1:8e:9d:9c:1f:59:40:73:16: 77:1a:57:3e:bb:a1:91:fb:8d:de:fa:2d:39:6b:0e:9a:49:af: f5:1a:c6:a5:95:cf:d4:75:e6:67:7b:89:34:13:f3:b8:11:2c: cd:6a:e6:66:77:27:f1:fe:b2:2d:d1:5c:93:f1:f7:72:f3:92: 07:df:0b:ed:00:ca:76:cc:95:da:a6:f3:a6:09:85:2f:fd:3c: 97:ac:c3:31:41:af:d1:79:90:cb:1c:db:0d:30:1b:e1:eb:92: dd:49:7e:82:c7:03:ac:c5:c9:f8:26:c3:a7:6c:b7:c4:16:ae: b8:d8:a5:4c:83:00:73:9b:2d:64:a8:9e:5c:46:65:7b:7a:90: 1b:28:cf:dd:dd:e4:44:51:69:9a:24:ab:86:ce:78:ae:a5:2c: e3:d7:6f:a2:68:8f:4e:68:4b:99:33:c1:c0:1e:d7:4d:41:55: 3e:54:7c:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSESnmYfWHMaVmLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OTk1NmRhMjUtMWE2OS00NDViLTkzZmMtNzUzNDlkNWJlMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMYeXvF7s0Kluc8zdkV+LvghrgVm/MYnYpV0 hXzDNxATAWOoKruMo+wtcK6iarWcTmB3YUP/i9ecjw/+FRfmH1/GZEoYwInjRlU5 Ft1NcN/h76nsamOWJQ/zf05a/c+FvJx89oQ00Rk6dJvlMGV1s1Hi/u1BfJyUWFob tPcV6/IA1Y3p7Wwyj2evJ77TLmMuh3IBFTI6XP0Q0GCxZEvloz1afH6AonoldSOI Egyz4tBTzimhbwmgqKwSjAFUbZewUFlzwd+EW2f8GUbuWDsvoapLiU8or7Dsq21G FVUbjxFBbO7v/hnQB0q/ztgnnh+siLBhAgEVLxaXIHWb5Wa/RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH0QsRZ/2/fC48wJE6uZ2GFOFpMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTViZTJkNDUtZDg2Ny0z ZDc2LWI1YmYtZjQyMmY4ZWFiMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADS/RRy3VmoryXcNX1L1Pz0ZzMgx3u/1u/iRd/UErkaOoUgxFsNt IjY3RYAjoGzjnHO7vK84eRh4EvKFRg0187XYSuLg0zkif/7yUxtknHAHIsGOnZwf WUBzFncaVz67oZH7jd76LTlrDppJr/UaxqWVz9R15md7iTQT87gRLM1q5mZ3J/H+ si3RXJPx93LzkgffC+0AynbMldqm86YJhS/9PJeswzFBr9F5kMsc2w0wG+Hrkt1J foLHA6zFyfgmw6dst8QWrrjYpUyDAHObLWSonlxGZXt6kBsoz93d5ERRaZokq4bO eK6lLOPXb6Joj05oS5kzwcAe101BVT5UfPI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:31 2025 by rpki-client