$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa File: 35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa (raw, json) Hash identifier: Xf3YK6iyi9hk922WkHq4WtbjR3WPmoFGCLJhy85aaOU= Subject key identifier: 40:B2:34:22:4D:6D:8C:5B:E9:47:3B:43:BC:60:52:D4:8E:8E:BA:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21124A4E09392F1E2D8D740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2001:4988::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:24:a4:e0:93:92:f1:e2:d8:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=db78e561-fc7e-4857-8154-cc0e2162218a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:29:87:95:9f:64:e4:3b:fe:c2:33:41:0c: 1c:57:e0:af:07:3a:7f:64:6a:ae:d5:d0:4c:7a:04: 70:53:3d:5e:ae:70:cb:c7:5e:43:93:b6:25:30:8f: c8:99:bf:a9:82:e4:f7:9f:ad:6e:ad:13:9e:2d:fd: 61:06:a6:5e:a9:5c:b3:1c:1b:47:d6:a1:98:34:93: 2b:ed:d9:e3:be:20:5f:76:57:2c:3e:f1:a3:12:8e: 97:0d:0b:43:f7:30:64:e4:47:be:52:39:e9:34:65: 0a:77:78:be:76:81:04:0e:1d:00:b4:e3:e1:d9:55: a9:ae:1f:2d:91:39:3d:6c:6d:04:68:d9:83:e1:1d: 8b:1c:43:06:5b:72:04:a0:e2:f8:00:08:e6:78:22: 43:44:b7:84:30:70:04:72:a2:ac:89:c6:2e:8d:c6: 0a:45:db:02:51:cd:6d:13:66:96:0e:ac:b2:00:85: 80:03:e1:1b:22:74:b6:6d:c1:15:bf:f8:4c:d2:34: b8:d0:94:75:88:e7:99:d2:eb:ea:8f:f3:48:7c:8b: bb:cf:ed:01:2e:9f:ab:57:e5:72:0c:ca:49:a5:39: e7:95:1b:86:3e:3b:23:73:3a:95:01:f5:b9:8d:ce: e9:79:3b:96:b4:f2:2d:cf:19:15:14:e7:99:c4:c8: 92:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B2:34:22:4D:6D:8C:5B:E9:47:3B:43:BC:60:52:D4:8E:8E:BA:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4988::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:40:4c:9e:93:da:fa:d2:25:35:04:b6:6b:8d:19:7a:c5:1f: 4e:57:dd:f8:c8:a8:85:12:f1:fb:61:b8:2f:a9:a3:90:ac:fc: 9e:83:c6:b3:70:7f:9f:67:e7:dd:3c:91:5a:1c:78:7d:7a:3f: c2:d5:81:39:80:ac:f9:94:38:42:98:7a:fa:f9:d5:45:b7:b2: ef:66:28:57:b1:c7:83:f3:9e:87:bf:9d:4c:ac:29:09:f2:55: cb:12:67:9f:09:56:fa:a1:f9:82:5b:e4:96:49:b5:30:48:f0: ce:90:45:6d:b5:d8:b0:63:7b:c5:81:f7:62:58:54:23:9f:20: cf:a7:e4:00:21:d0:1c:ee:a3:e1:fd:33:d1:86:8a:8c:24:ef: f5:47:e8:10:bb:6d:46:05:4f:81:83:80:cb:7a:a8:d9:0a:f0: 05:91:ac:e7:4a:24:f4:2e:2e:a3:c9:03:96:0d:8e:b7:00:20: 9f:8a:f2:52:c7:3b:03:6e:c5:ed:52:c2:f1:14:71:4c:8b:d4: 40:22:d6:93:d4:0f:24:49:20:cd:8a:74:f5:e2:65:40:f2:6c: fe:18:b0:41:10:44:92:4c:50:a0:65:85:df:7b:7a:25:ec:31: fb:78:4f:f3:5a:49:18:12:8e:44:da:ee:39:e1:6a:48:00:98: 68:43:3f:38 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjSESSk4JOS8eLY10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZGI3OGU1NjEtZmM3ZS00ODU3LTgxNTQtY2MwZTIxNjIyMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7sph5WfZOQ7/sIzQQwcV+CvBzp/ZGqu1dBM egRwUz1ernDLx15Dk7YlMI/Imb+pguT3n61urROeLf1hBqZeqVyzHBtH1qGYNJMr 7dnjviBfdlcsPvGjEo6XDQtD9zBk5Ee+UjnpNGUKd3i+doEEDh0AtOPh2VWprh8t kTk9bG0EaNmD4R2LHEMGW3IEoOL4AAjmeCJDRLeEMHAEcqKsicYujcYKRdsCUc1t E2aWDqyyAIWAA+EbInS2bcEVv/hM0jS40JR1iOeZ0uvqj/NIfIu7z+0BLp+rV+Vy DMpJpTnnlRuGPjsjczqVAfW5jc7peTuWtPItzxkVFOeZxMiSFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFECyNCJNbYxb6Uc7Q7xgUtSOjrqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzVlNWM1M2UtYzUzNi0z ZjcwLThmNGQtMTlhZThhMjg4NmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdQEyek9r60iU1BLZrjRl6xR9OV934yKiFEvH7YbgvqaOQrPyeg8az cH+fZ+fdPJFaHHh9ej/C1YE5gKz5lDhCmHr6+dVFt7LvZihXsceD856Hv51MrCkJ 8lXLEmefCVb6ofmCW+SWSbUwSPDOkEVttdiwY3vFgfdiWFQjnyDPp+QAIdAc7qPh /TPRhoqMJO/1R+gQu21GBU+Bg4DLeqjZCvAFkaznSiT0Li6jyQOWDY63ACCfivJS xzsDbsXtUsLxFHFMi9RAItaT1A8kSSDNinT14mVA8mz+GLBBEESSTFCgZYXfe3ol 7DH7eE/zWkkYEo5E2u454WpIAJhoQz84 -----END CERTIFICATE-----Generated at Fri Mar 14 11:03:04 2025 by rpki-client