$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa File: 2d21dbca-2657-35c0-8519-24ed1492a5e2.roa (raw, json) Hash identifier: ViQiPvk9w8IGjkSSLbgmyY0y7dDRF6fKx8lvBjp97pY= Subject key identifier: 7E:5D:85:87:9F:B2:F3:64:D9:A8:91:C9:B9:C8:71:5F:BB:34:B5:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FEFFEF1DAAE2AB9E60E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fe:ff:ef:1d:aa:e2:ab:9e:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=a626d02b-4291-49f9-a7f0-0a06afc7f035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:b0:2b:a9:48:99:d1:bb:2d:63:97:50:ae: 6c:4d:c9:98:1f:9e:e5:7c:3f:4f:20:ff:19:78:66: 01:d5:12:c0:7f:36:bc:34:0f:67:e3:ac:62:5a:52: 2b:96:9a:e7:be:da:e2:dd:a0:61:88:08:6d:c0:21: 40:af:7b:51:ee:9c:ad:43:cb:3f:02:61:db:4d:87: b8:d3:ba:f4:d4:41:1e:90:ac:19:80:1d:42:d9:97: af:7f:6d:47:b0:8c:3d:f2:89:b1:b5:9f:06:da:ed: 34:f7:6c:92:e1:96:1b:b4:b7:e4:c5:e3:e1:58:af: e5:61:b9:7d:64:a1:fb:4d:fa:6e:f3:95:b1:41:e3: 8e:50:5c:dc:e3:43:13:79:28:21:a5:14:40:e9:74: cf:8c:b0:31:d7:97:d3:dc:8c:52:e7:9a:cb:84:3c: 2c:24:7c:29:ad:96:ec:83:c0:17:09:0d:2a:06:09: 94:b5:a8:ca:dd:b9:73:7f:ac:cd:9c:ba:76:80:0b: ba:00:d4:bf:c7:6d:b2:d1:00:89:d5:6c:2b:e7:16: 7d:8f:1e:9a:2a:dc:c5:82:05:b0:89:f3:16:7a:6c: 0e:09:19:f3:3e:bb:12:58:c5:b1:7d:4d:f9:53:6c: c1:4e:fe:ca:08:1d:53:61:96:1b:ae:a1:ba:a9:6d: 3e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5D:85:87:9F:B2:F3:64:D9:A8:91:C9:B9:C8:71:5F:BB:34:B5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:9d:61:34:93:0b:3c:9a:1d:3f:ec:0a:f0:06:a5:13:9e:c8: f5:85:16:ca:4e:b3:e4:9d:b5:c5:a0:45:17:97:25:2a:c1:a1: b1:15:a6:43:8d:ca:b3:5e:e8:80:6a:87:57:13:3e:e8:45:4e: ec:e1:34:95:6e:c4:92:e7:a4:f9:29:2a:0d:be:df:bb:d7:e3: f2:60:e8:a8:cf:6a:a6:1c:55:07:f5:00:1c:e3:ba:ca:ce:43: 58:1e:f8:fc:3c:55:fb:0b:a4:7b:ff:61:93:eb:b4:39:2d:1c: 1d:47:ba:a8:50:b8:63:c6:8e:84:f8:f3:aa:96:99:0f:94:26: 56:2f:4b:bd:e8:c3:42:2a:b2:4e:11:48:d5:03:43:a0:3d:00: 04:c1:ad:c8:b1:fe:53:b4:01:9b:48:b1:02:84:fb:cd:47:5b: a4:54:5c:a7:b9:10:5d:a5:c5:12:78:57:84:04:bc:2d:85:b4: fd:da:a1:2f:6e:8d:e7:43:c7:b5:67:0a:ee:c3:55:4f:ee:cf: b2:8e:4f:0c:56:e5:b9:9c:7e:05:55:9f:ed:b8:0b:d2:24:86: 49:a4:73:50:ae:0c:6b:a0:9c:27:ff:de:ac:bb:b6:25:70:0d: 0a:8e:6b:a5:63:c8:52:d8:bc:9c:01:9b:d9:89:ca:a1:9a:72: 18:18:68:fa -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSEP7/7x2q4queYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YTYyNmQwMmItNDI5MS00OWY5LWE3ZjAtMGEwNmFmYzdmMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi+wK6lImdG7LWOXUK5sTcmYH57lfD9PIP8Z eGYB1RLAfza8NA9n46xiWlIrlprnvtri3aBhiAhtwCFAr3tR7pytQ8s/AmHbTYe4 07r01EEekKwZgB1C2Zevf21HsIw98omxtZ8G2u0092yS4ZYbtLfkxePhWK/lYbl9 ZKH7Tfpu85WxQeOOUFzc40MTeSghpRRA6XTPjLAx15fT3IxS55rLhDwsJHwprZbs g8AXCQ0qBgmUtajK3blzf6zNnLp2gAu6ANS/x22y0QCJ1Wwr5xZ9jx6aKtzFggWw ifMWemwOCRnzPrsSWMWxfU35U2zBTv7KCB1TYZYbrqG6qW0+mQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH5dhYefsvNk2aiRybnIcV+7NLWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQyMWRiY2EtMjY1Ny0z NWMwLTg1MTktMjRlZDE0OTJhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAH51hNJMLPJodP+wK8AalE57I9YUWyk6z5J21xaBFF5clKsGhsRWm Q43Ks17ogGqHVxM+6EVO7OE0lW7Ekuek+SkqDb7fu9fj8mDoqM9qphxVB/UAHOO6 ys5DWB74/DxV+wuke/9hk+u0OS0cHUe6qFC4Y8aOhPjzqpaZD5QmVi9LvejDQiqy ThFI1QNDoD0ABMGtyLH+U7QBm0ixAoT7zUdbpFRcp7kQXaXFEnhXhAS8LYW0/dqh L26N50PHtWcK7sNVT+7Pso5PDFbluZx+BVWf7bgL0iSGSaRzUK4Ma6CcJ//erLu2 JXANCo5rpWPIUti8nAGb2YnKoZpyGBho+g== -----END CERTIFICATE-----Generated at Sat Apr 5 23:33:24 2025 by rpki-client