$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa File: 2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa (raw, json) Hash identifier: oQAJMVEOldTClpnWKeLACeW3nXo8bzAcpZea9+cS00U= Subject key identifier: C3:12:64:14:1B:56:CF:9F:9B:C6:BB:38:46:BE:4F:0B:B0:FF:24:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112A6A20E1F4FF964BCD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2a:6a:20:e1:f4:ff:96:4b:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=6b21c0a4-5304-425d-95d4-cbc6da5c4a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:84:4e:6f:7b:31:35:1b:62:85:5e:17:ca:2c: 05:80:2c:21:39:17:06:d8:35:d9:47:ea:35:af:c6: 92:16:7a:5e:0e:29:26:2c:d8:f2:c5:8d:85:fd:26: a6:48:45:eb:b9:53:91:50:b1:1f:e2:19:d1:1f:4a: de:47:ee:ac:6a:f9:ee:73:b3:42:52:d4:e5:ad:6d: 5d:65:d2:f1:6e:55:0d:52:ea:64:14:5c:c0:23:f7: ad:95:39:72:da:83:bf:a7:61:03:8d:b0:5e:04:e0: f8:1e:7d:56:5d:5e:04:01:cb:fb:f2:83:9b:e5:b1: eb:0b:0d:ee:f5:e8:ec:a9:00:b3:ad:24:29:74:5d: 6a:63:9d:07:45:7d:9c:3a:80:bc:bc:93:09:5d:56: cd:ab:74:eb:3c:19:6b:82:2e:d1:33:0c:eb:58:c2: 44:32:fc:e3:d9:93:99:1d:06:17:00:b0:4a:85:bf: d1:ee:8c:ac:fd:ed:08:0e:da:1c:a0:9c:17:65:14: b6:5d:7a:57:f5:d7:72:3f:98:1b:d6:e3:a5:56:a3: 33:fd:e7:43:11:27:ba:df:12:b2:99:6c:96:fd:4e: 78:bb:2b:f4:b2:92:14:19:21:d0:d0:91:16:a5:d6: a5:a9:73:e1:80:a8:c9:08:73:54:37:3a:1b:c0:a0: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:12:64:14:1B:56:CF:9F:9B:C6:BB:38:46:BE:4F:0B:B0:FF:24:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:17:b8:9f:0e:8b:7e:51:06:ea:cf:64:c2:73:9a:de:a0:e9: 24:a6:01:25:77:b6:19:ef:ae:88:be:16:a2:ca:19:be:d3:b5: 3e:41:01:93:a2:37:6c:99:7d:cb:e9:4f:db:77:e2:ae:9e:d1: f0:ad:ea:a6:54:c1:89:c0:7d:31:e3:42:71:75:ab:29:5b:de: 8e:1a:f6:17:7e:c6:71:55:07:50:13:2f:06:b8:22:70:65:b9: 7c:14:03:dd:f3:59:29:cf:c9:48:05:48:44:3c:c5:e1:d9:a4: 4f:5c:56:40:ed:d8:1c:d6:1d:ca:f0:ed:c0:86:97:81:d2:be: 65:d8:a4:b7:b0:0f:0f:97:45:5f:14:d7:ef:7d:18:b5:3f:ff: da:07:f3:11:c6:35:7a:49:f4:6e:c6:ca:ba:85:78:81:66:3d: 02:be:c6:cf:8a:04:4a:dd:ee:2d:a7:18:45:18:38:41:39:0c: 46:dc:27:78:c6:f4:e3:ea:d4:91:09:b4:bf:dc:7b:b6:c1:99: d7:38:12:f8:a3:1c:62:e5:6c:59:ca:cd:05:6a:66:38:19:05: ac:9a:30:48:8a:68:e6:46:0e:32:b7:b3:8a:52:a9:c2:c4:ed: f2:29:ff:19:d7:01:b7:b1:3e:9b:19:b7:e0:96:22:b6:ea:26: f9:d5:50:8a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSESpqIOH0/5ZLzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NmIyMWMwYTQtNTMwNC00MjVkLTk1ZDQtY2JjNmRhNWM0YTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYROb3sxNRtihV4XyiwFgCwhORcG2DXZR+o1 r8aSFnpeDikmLNjyxY2F/SamSEXruVORULEf4hnRH0reR+6savnuc7NCUtTlrW1d ZdLxblUNUupkFFzAI/etlTly2oO/p2EDjbBeBOD4Hn1WXV4EAcv78oOb5bHrCw3u 9ejsqQCzrSQpdF1qY50HRX2cOoC8vJMJXVbNq3TrPBlrgi7RMwzrWMJEMvzj2ZOZ HQYXALBKhb/R7oys/e0IDtocoJwXZRS2XXpX9ddyP5gb1uOlVqMz/edDESe63xKy mWyW/U54uyv0spIUGSHQ0JEWpdalqXPhgKjJCHNUNzobwKBD6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMMSZBQbVs+fm8a7OEa+Twuw/yS/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmU5MGUwOWYtZjQ4Ny0z Y2UzLWI5YmQtNTI2M2M5MzhlMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGRe4nw6LflEG6s9kwnOa3qDpJKYBJXe2Ge+uiL4WosoZvtO1PkEB k6I3bJl9y+lP23firp7R8K3qplTBicB9MeNCcXWrKVvejhr2F37GcVUHUBMvBrgi cGW5fBQD3fNZKc/JSAVIRDzF4dmkT1xWQO3YHNYdyvDtwIaXgdK+Zdikt7APD5dF XxTX730YtT//2gfzEcY1ekn0bsbKuoV4gWY9Ar7Gz4oESt3uLacYRRg4QTkMRtwn eMb04+rUkQm0v9x7tsGZ1zgS+KMcYuVsWcrNBWpmOBkFrJowSIpo5kYOMrezilKp wsTt8in/GdcBt7E+mxm34JYituom+dVQig== -----END CERTIFICATE-----Generated at Fri Mar 14 13:21:49 2025 by rpki-client