$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa File: 1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa (raw, json) Hash identifier: E8Nm1ycObK0J3L5/PY5PNTvn6NKnBRG4Hb/T4Fy74RU= Subject key identifier: 6F:75:1B:66:45:84:83:FA:86:CC:A3:D9:4B:AB:98:D0:E3:48:61:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112B05B0541F601DF22140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2b:05:b0:54:1f:60:1d:f2:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=d70eeb9e-1b6b-4e3d-a7d9-c139ddd91c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:ac:df:3a:76:8c:0b:5c:c6:22:02:11:86: 7d:b6:a8:6e:ac:7c:a5:dc:55:cb:b1:cf:e4:e8:d7: af:5f:76:e3:d6:b1:1e:a0:a7:f1:0d:6e:2d:3f:c8: 6f:38:1a:f6:f9:d9:44:f8:ac:3b:22:82:e3:4d:a7: 1a:3b:2c:5e:80:2e:e6:d9:d9:7a:24:fe:54:25:cb: 06:3a:9c:55:1f:86:7e:cd:f0:24:79:56:5e:2c:39: 6c:b0:a9:79:9b:90:c1:6a:33:b1:29:f9:b2:f8:92: 95:3d:3a:b5:fd:e6:ba:f8:68:77:7f:5c:3a:e0:5a: 2c:4b:07:cc:c8:c6:3c:37:65:d8:01:df:39:bb:66: d7:bc:57:e6:66:16:b0:01:1b:86:8a:f4:6e:30:9b: 46:2b:e3:d8:2e:47:af:57:98:06:8e:98:de:78:b1: ea:5c:6c:c1:68:be:3f:12:fe:fe:ef:2f:dc:e2:64: 56:40:d9:c8:fa:ad:a0:c0:c7:49:af:8b:10:ee:bf: 74:e8:74:62:4b:e3:0b:16:2c:38:13:10:26:3a:73: a4:77:58:db:a2:b7:60:76:4e:c7:03:7f:3d:77:df: f0:de:36:52:19:b6:3d:f1:ee:3d:16:b3:86:48:ef: 14:04:06:a2:89:76:2b:da:ed:61:60:5c:d8:e7:90: 5a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:75:1B:66:45:84:83:FA:86:CC:A3:D9:4B:AB:98:D0:E3:48:61:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acdcb18-9db4-3939-bc33-fc337d80bfb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:91:98:5e:a0:0e:2b:4e:00:94:b4:f8:3e:10:6e:54:cc:84: 4a:14:5d:39:e0:af:6c:42:e8:e9:e1:67:3c:f8:93:e5:d9:75: eb:82:5d:66:a8:50:e0:bc:a8:9b:23:91:9e:d1:79:d4:9a:86: 65:80:1f:81:d9:ad:11:ae:a2:07:cf:bf:33:bb:1d:65:a4:aa: f9:92:70:83:1f:16:f2:ac:f4:41:78:53:c6:94:fa:cc:08:96: d7:f2:a7:44:ea:a6:2a:dc:79:99:7f:17:2f:7b:40:be:29:5e: f3:d4:49:ed:05:a4:70:4e:5a:5c:db:57:15:bb:45:b3:2d:bf: 67:57:ba:43:80:9a:78:b8:0f:b3:68:31:32:6b:4d:a7:f8:b8: 69:79:e2:c7:3e:cd:c8:1c:b2:6b:d0:63:a6:96:4b:05:21:5c: 6b:01:27:db:dd:2c:24:31:3a:f2:2c:12:1a:ee:5d:9c:9a:94: 21:a6:0e:1c:46:fd:75:84:7a:c3:7a:a9:cd:46:6c:fe:0a:37: 40:66:ab:50:b4:11:9d:89:19:63:ee:85:2b:f8:28:f1:84:6e: 92:28:d8:92:f1:17:97:51:42:be:d4:41:4b:62:f1:77:2b:03: ee:6a:f7:e6:12:f2:57:4a:cf:5e:05:ee:cd:a8:5a:41:20:69: b4:5c:1c:f7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSESsFsFQfYB3yIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDcwZWViOWUtMWI2Yi00ZTNkLWE3ZDktYzEzOWRkZDkxYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrqs3zp2jAtcxiICEYZ9tqhurHyl3FXLsc/k 6NevX3bj1rEeoKfxDW4tP8hvOBr2+dlE+Kw7IoLjTacaOyxegC7m2dl6JP5UJcsG OpxVH4Z+zfAkeVZeLDlssKl5m5DBajOxKfmy+JKVPTq1/ea6+Gh3f1w64FosSwfM yMY8N2XYAd85u2bXvFfmZhawARuGivRuMJtGK+PYLkevV5gGjpjeeLHqXGzBaL4/ Ev7+7y/c4mRWQNnI+q2gwMdJr4sQ7r906HRiS+MLFiw4ExAmOnOkd1jbordgdk7H A389d9/w3jZSGbY98e49FrOGSO8UBAaiiXYr2u1hYFzY55BapQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG91G2ZFhIP6hsyj2UurmNDjSGF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjZGNiMTgtOWRiNC0z OTM5LWJjMzMtZmMzMzdkODBiZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAF5GYXqAOK04AlLT4PhBuVMyEShRdOeCvbELo6eFnPPiT5dl164Jd ZqhQ4LyomyORntF51JqGZYAfgdmtEa6iB8+/M7sdZaSq+ZJwgx8W8qz0QXhTxpT6 zAiW1/KnROqmKtx5mX8XL3tAvile89RJ7QWkcE5aXNtXFbtFsy2/Z1e6Q4CaeLgP s2gxMmtNp/i4aXnixz7NyByya9BjppZLBSFcawEn290sJDE68iwSGu5dnJqUIaYO HEb9dYR6w3qpzUZs/go3QGarULQRnYkZY+6FK/go8YRukijYkvEXl1FCvtRBS2Lx dysD7mr35hLyV0rPXgXuzahaQSBptFwc9w== -----END CERTIFICATE-----Generated at Fri Mar 14 10:04:03 2025 by rpki-client