$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/240f3b0b-3813-3db6-9658-56c128b51a7f.roa File: 240f3b0b-3813-3db6-9658-56c128b51a7f.roa (raw, json) Hash identifier: G9UPegEhlMoyUACfoUZ9aGlpUFXkO5YaKYs3vLhkb9s= Subject key identifier: 99:BC:85:85:C2:CC:2C:AD:55:3B:A2:3A:A5:39:D4:ED:2E:D3:28:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211290BE7EC96261FC54A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/240f3b0b-3813-3db6-9658-56c128b51a7f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:29:0b:e7:ec:96:26:1f:c5:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0c3d2f30-b624-4da0-b4e3-04de04cc9194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:25:b7:24:e0:da:bb:9c:d4:59:96:8f:7e: 7d:96:db:aa:92:62:f9:25:7e:f9:f8:cb:7c:76:84: 05:7e:82:52:35:da:d3:9f:f8:ff:9c:c8:d9:90:ce: 80:37:7c:be:11:41:5e:3c:fe:78:55:4c:6a:1b:45: 2f:f6:92:dc:e7:e5:17:10:b8:95:7d:82:3b:e0:1d: 24:58:ac:28:d7:6b:c6:28:18:70:7b:9d:24:86:ed: 79:72:4f:65:f8:e6:19:76:42:09:bc:bd:ae:12:03: f8:72:16:6f:2f:03:fc:c3:1d:b4:22:50:eb:22:60: 59:72:27:78:5d:78:8e:be:e0:22:d8:af:01:dd:60: bd:37:14:da:06:74:9e:38:16:d7:69:bb:23:98:87: f0:ca:9e:bc:af:ea:df:d6:35:81:e6:5c:e1:a2:09: 55:a5:25:76:c9:11:a0:cb:54:98:ba:39:a4:04:73: 75:e5:be:b1:55:40:ac:0f:ad:f0:2f:17:3c:e6:23: 25:ec:d4:4b:ef:19:e3:84:a2:01:ae:73:84:82:c5: 4f:fd:06:f5:96:74:38:4a:93:53:e4:04:ce:af:a2: 54:56:a9:b2:97:89:7f:96:6a:9b:4c:56:c1:5d:ca: 85:bc:c5:3d:e1:90:9c:db:5d:85:08:65:07:d4:d4: 0e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BC:85:85:C2:CC:2C:AD:55:3B:A2:3A:A5:39:D4:ED:2E:D3:28:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/240f3b0b-3813-3db6-9658-56c128b51a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:91:82:59:07:19:32:39:4a:82:a6:34:3d:da:62:e6:2b:70: 7d:12:b2:ae:54:45:cc:c3:96:56:25:c1:8c:82:9a:c5:60:58: 56:d6:8d:4e:c0:3b:84:3b:68:3b:e0:d5:49:28:29:6f:49:98: 81:36:32:6a:c3:49:5c:60:51:4b:8a:ba:25:43:cd:24:b4:36: f1:48:9c:c3:a3:9b:3a:55:6f:02:9f:5f:4a:7b:dc:81:5b:c0: 74:b4:a3:d2:81:02:95:f6:12:3a:17:90:d1:a5:cf:d7:cc:d8: 1b:44:82:3d:76:af:e9:4d:6a:49:ec:2d:91:0b:98:ea:72:65: 8d:bf:a5:d5:32:fb:e5:a5:1b:1e:2b:da:81:5d:bb:f2:53:8d: 36:8d:f2:fc:d6:97:66:8c:ec:df:44:fc:0e:85:40:53:e4:c3: bc:39:3b:6a:e3:2d:28:4e:6e:8a:c1:22:3b:28:90:db:65:08: 33:1f:43:ac:29:e0:e5:d9:7f:3a:60:8c:90:ea:7d:24:8d:77: b8:44:d4:26:91:7e:02:19:4a:f5:9b:33:b3:4f:e2:c1:c9:69: a4:b3:d2:47:d0:82:1e:cf:06:2f:3d:ec:33:ee:13:e4:b0:67: 1d:8b:82:30:3b:ff:bf:78:3b:40:50:dd:51:18:e9:a3:32:45: 6e:3a:18:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSESkL5+yWJh/FSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGMzZDJmMzAtYjYyNC00ZGEwLWI0ZTMtMDRkZTA0Y2M5MTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi8ltyTg2ruc1FmWj359ltuqkmL5JX75+Mt8 doQFfoJSNdrTn/j/nMjZkM6AN3y+EUFePP54VUxqG0Uv9pLc5+UXELiVfYI74B0k WKwo12vGKBhwe50khu15ck9l+OYZdkIJvL2uEgP4chZvLwP8wx20IlDrImBZcid4 XXiOvuAi2K8B3WC9NxTaBnSeOBbXabsjmIfwyp68r+rf1jWB5lzhoglVpSV2yRGg y1SYujmkBHN15b6xVUCsD63wLxc85iMl7NRL7xnjhKIBrnOEgsVP/Qb1lnQ4SpNT 5ATOr6JUVqmyl4l/lmqbTFbBXcqFvMU94ZCc212FCGUH1NQOswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJm8hYXCzCytVTuiOqU51O0u0yjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQwZjNiMGItMzgxMy0z ZGI2LTk2NTgtNTZjMTI4YjUxYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICRglkHGTI5SoKmND3aYuYrcH0Ssq5URczDllYlwYyCmsVgWFbW jU7AO4Q7aDvg1UkoKW9JmIE2MmrDSVxgUUuKuiVDzSS0NvFInMOjmzpVbwKfX0p7 3IFbwHS0o9KBApX2EjoXkNGlz9fM2BtEgj12r+lNaknsLZELmOpyZY2/pdUy++Wl Gx4r2oFdu/JTjTaN8vzWl2aM7N9E/A6FQFPkw7w5O2rjLShOborBIjsokNtlCDMf Q6wp4OXZfzpgjJDqfSSNd7hE1CaRfgIZSvWbM7NP4sHJaaSz0kfQgh7PBi897DPu E+SwZx2LgjA7/794O0BQ3VEY6aMyRW46GB8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:28 2025 by rpki-client