$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa File: 5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa (raw, json) Hash identifier: 8cO7e6CRZaGZUM4QJlYJ7BTRMhL5zdJ8bo9ciQN4nFU= Subject key identifier: CE:09:51:7F:24:B3:E7:ED:59:09:CB:8E:23:EB:13:CA:B4:88:F2:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211299B9163B3D0C2D58880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:29:9b:91:63:b3:d0:c2:d5:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=51c0618a-863b-42cf-997d-ace9236446e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:12:ed:20:22:97:6f:fb:c2:d1:f5:b5:33: 16:c9:89:77:c7:d7:6d:4e:b5:89:a2:ed:c0:3a:6c: ad:47:05:67:5f:74:c5:01:25:51:44:c6:62:a2:cc: de:54:fd:7b:7b:72:c7:fc:23:ef:1d:86:13:7c:a5: b0:5a:60:29:e3:59:d2:e4:9b:37:51:70:af:bd:88: 7a:a0:79:51:4f:ee:aa:90:92:6e:35:af:04:05:6c: 55:49:45:6d:ea:16:e2:18:f5:1a:22:af:5c:cd:d3: 03:89:3c:73:b9:40:8f:e7:c9:d2:62:9c:5c:7c:69: a1:02:f2:92:3d:7e:0d:b0:f2:dd:a6:ed:92:9f:42: 1f:6d:59:e7:dc:b6:76:8e:bd:66:14:98:f2:fa:73: c3:9c:14:fe:d2:6c:10:da:0f:0b:58:62:09:8f:f2: 60:73:7f:92:1b:86:c7:c8:fe:c8:86:2d:12:f2:53: b2:82:89:45:21:d6:0e:cc:52:8c:a2:21:70:7e:fa: b9:9d:4d:69:9f:18:c2:b0:de:f4:29:d9:04:4a:fa: a5:cf:20:00:8e:41:68:85:da:31:f6:42:72:05:d6: 76:4b:f5:ed:63:9d:49:8f:3d:a9:6e:77:66:b3:c8: 80:9b:e1:80:d1:85:81:a7:39:4e:cf:90:6b:42:a1: d8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:09:51:7F:24:B3:E7:ED:59:09:CB:8E:23:EB:13:CA:B4:88:F2:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ea6308a-4eb7-3d93-b83a-a828901b5ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ca:a9:63:8e:e9:79:ca:b3:63:ac:17:45:86:6c:cf:1f:b5: c6:67:48:4b:e7:85:b2:a8:16:b7:04:25:28:b3:78:49:36:15: 57:4f:82:1c:a3:35:e1:ea:cf:b3:79:60:08:e6:e7:63:a9:d9: a6:ad:87:3f:6f:07:ad:74:f5:ec:0d:da:dc:c5:9d:c3:8e:16: 37:ac:59:98:7b:e3:82:fa:ed:57:c8:49:fc:c9:99:02:62:89: 28:71:19:4c:ed:7a:e8:ee:84:42:11:30:98:11:b7:ad:b2:22: 47:82:de:d7:ef:d7:fd:d0:13:2d:d2:cf:ec:5b:69:a0:c7:bd: 21:28:e3:b5:cf:b2:01:0f:91:3f:3d:09:d8:31:84:7a:be:3d: a5:2d:f4:a9:9f:6a:e8:de:47:7b:68:2b:16:0d:a0:c2:61:d3: 52:59:04:ad:07:4f:aa:38:32:90:59:e5:24:56:6c:17:f0:dc: 42:8d:5d:c0:fb:a1:20:cc:60:69:25:3a:9a:78:9b:c9:82:a2: 80:c3:2f:89:97:6b:d9:4e:1d:ea:29:5c:4d:ba:f0:18:b4:60: cb:92:8b:0e:2f:00:9a:91:0b:35:f0:5a:d5:57:75:e1:bf:9b: b4:85:a9:71:90:ac:b2:7a:3e:48:9d:81:ab:e3:56:6a:18:c7: e1:cf:5b:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSESmbkWOz0MLViIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NTFjMDYxOGEtODYzYi00MmNmLTk5N2QtYWNlOTIzNjQ0NmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUQS7SAil2/7wtH1tTMWyYl3x9dtTrWJou3A OmytRwVnX3TFASVRRMZioszeVP17e3LH/CPvHYYTfKWwWmAp41nS5Js3UXCvvYh6 oHlRT+6qkJJuNa8EBWxVSUVt6hbiGPUaIq9czdMDiTxzuUCP58nSYpxcfGmhAvKS PX4NsPLdpu2Sn0IfbVnn3LZ2jr1mFJjy+nPDnBT+0mwQ2g8LWGIJj/Jgc3+SG4bH yP7Ihi0S8lOygolFIdYOzFKMoiFwfvq5nU1pnxjCsN70KdkESvqlzyAAjkFohdox 9kJyBdZ2S/XtY51Jjz2pbndms8iAm+GA0YWBpzlOz5BrQqHYpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM4JUX8ks+ftWQnLjiPrE8q0iPLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWVhNjMwOGEtNGViNy0z ZDkzLWI4M2EtYTgyODkwMWI1YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACXKqWOO6XnKs2OsF0WGbM8ftcZnSEvnhbKoFrcEJSizeEk2FVdP ghyjNeHqz7N5YAjm52Op2aathz9vB6109ewN2tzFncOOFjesWZh744L67VfISfzJ mQJiiShxGUzteujuhEIRMJgRt62yIkeC3tfv1/3QEy3Sz+xbaaDHvSEo47XPsgEP kT89CdgxhHq+PaUt9KmfaujeR3toKxYNoMJh01JZBK0HT6o4MpBZ5SRWbBfw3EKN XcD7oSDMYGklOpp4m8mCooDDL4mXa9lOHeopXE268Bi0YMuSiw4vAJqRCzXwWtVX deG/m7SFqXGQrLJ6PkidgavjVmoYx+HPW/w= -----END CERTIFICATE-----Generated at Fri Mar 14 11:14:03 2025 by rpki-client