$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d6078f-ea8e-3f71-9e30-3bb81f0c51e0.roa File: 71d6078f-ea8e-3f71-9e30-3bb81f0c51e0.roa (raw, json) Hash identifier: GUxAj4RC8KmP6R4cg0NvdpVfWM/siEu5xlclbSNKUGk= Subject key identifier: C3:70:9A:FC:A4:C0:44:24:69:D7:77:3D:3C:26:03:38:B8:5A:16:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112A7830D614B1314B31C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d6078f-ea8e-3f71-9e30-3bb81f0c51e0.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2a:78:30:d6:14:b1:31:4b:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=f7142545-8af1-4fb6-902a-380424f74ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:ad:03:52:aa:ac:24:c6:2a:34:b6:0d:2c: b3:ac:c5:69:86:08:9c:cb:a3:71:03:98:59:eb:cc: ac:72:72:b4:15:38:aa:cb:2d:90:01:65:1e:8e:a9: ad:03:94:39:21:73:fd:7a:08:10:78:a3:39:18:a2: a6:2d:1b:e0:a7:ea:48:33:28:0e:7d:ff:49:66:54: 39:8e:be:24:f9:2a:6e:d4:bd:49:26:cb:76:04:f2: 0e:fd:4b:9c:98:74:7b:2c:24:4d:28:91:5f:83:ca: ef:fa:06:01:fe:2e:6f:d8:88:89:65:0b:71:90:48: 6c:74:b5:ad:15:37:12:67:90:6c:c1:9e:e7:1a:3d: cf:74:da:b4:42:68:15:ac:8d:a3:96:ee:ba:70:02: 45:57:60:b0:95:a3:92:82:67:63:f1:37:4a:b6:47: c7:93:8b:d0:d0:28:1d:f4:38:0d:6e:fc:8d:01:17: 09:37:45:dc:fc:3b:92:ef:d6:b2:06:0c:9d:52:5b: 30:3f:fb:32:4b:f8:b5:9f:bc:47:7d:eb:c8:cb:7e: 44:f5:b6:11:a2:16:df:55:46:58:4a:06:0b:2a:1c: c0:a9:b2:8a:b7:e7:f2:3f:53:1a:49:9e:07:6a:69: 3b:20:24:56:c3:af:39:1c:45:6d:2a:06:80:ce:ea: fd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:70:9A:FC:A4:C0:44:24:69:D7:77:3D:3C:26:03:38:B8:5A:16:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d6078f-ea8e-3f71-9e30-3bb81f0c51e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e0:bd:6a:73:d8:47:21:83:57:24:37:e0:b4:d9:7d:47:d0: ad:af:bb:38:2a:47:ca:96:2d:5d:d2:20:97:3a:38:b7:78:e8: b3:73:b6:80:02:8b:d9:5c:6c:9b:50:18:cc:49:7f:a6:4b:57: d0:4e:89:d8:07:dd:da:31:1f:43:85:42:5c:cd:ac:77:2a:3f: ce:56:4d:8b:23:b9:f6:b1:50:e3:1c:4b:41:13:78:f8:57:90: e6:79:cb:6b:a1:6c:f6:f3:8d:1f:e7:35:86:d5:8b:f5:c3:36: 4c:9f:4c:dc:3b:8e:3b:5b:b1:62:18:1f:04:22:2b:11:05:fd: 39:18:4c:0e:b7:19:f5:9c:ee:0d:68:6c:cf:86:1a:4f:3b:df: 48:de:b9:8e:9f:29:7f:88:c6:61:20:62:d5:8f:4e:7a:2f:86: 67:a1:b2:e7:13:ed:3d:1a:b0:26:cf:be:22:41:e7:45:ee:ae: 58:7b:22:0d:a6:50:00:af:ee:19:2b:e2:53:b3:53:f1:8b:c8: 33:da:d6:85:18:72:e8:b5:dc:2c:44:c0:4c:5e:54:d0:f1:a5: 54:b8:6d:71:6a:fc:ca:a6:27:a8:6c:20:28:77:17:d6:d5:4b: 91:7b:38:88:02:79:39:0f:85:f3:d1:98:2b:42:e0:02:f8:be: 78:73:9f:e2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSESp4MNYUsTFLMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjcxNDI1NDUtOGFmMS00ZmI2LTkwMmEtMzgwNDI0Zjc0ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplqtA1KqrCTGKjS2DSyzrMVphgicy6NxA5hZ 68yscnK0FTiqyy2QAWUejqmtA5Q5IXP9eggQeKM5GKKmLRvgp+pIMygOff9JZlQ5 jr4k+Spu1L1JJst2BPIO/UucmHR7LCRNKJFfg8rv+gYB/i5v2IiJZQtxkEhsdLWt FTcSZ5BswZ7nGj3PdNq0QmgVrI2jlu66cAJFV2CwlaOSgmdj8TdKtkfHk4vQ0Cgd 9DgNbvyNARcJN0Xc/DuS79ayBgydUlswP/syS/i1n7xHfevIy35E9bYRohbfVUZY SgYLKhzAqbKKt+fyP1MaSZ4Hamk7ICRWw685HEVtKgaAzur9cwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMNwmvykwEQkadd3PTwmAzi4WhYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzFkNjA3OGYtZWE4ZS0z ZjcxLTllMzAtM2JiODFmMGM1MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAA0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAF+C9anPYRyGDVyQ34LTZfUfQra+7OCpHypYtXdIglzo4t3jos3O2 gAKL2Vxsm1AYzEl/pktX0E6J2Afd2jEfQ4VCXM2sdyo/zlZNiyO59rFQ4xxLQRN4 +FeQ5nnLa6Fs9vONH+c1htWL9cM2TJ9M3DuOO1uxYhgfBCIrEQX9ORhMDrcZ9Zzu DWhsz4YaTzvfSN65jp8pf4jGYSBi1Y9Oei+GZ6Gy5xPtPRqwJs++IkHnRe6uWHsi DaZQAK/uGSviU7NT8YvIM9rWhRhy6LXcLETATF5U0PGlVLhtcWr8yqYnqGwgKHcX 1tVLkXs4iAJ5OQ+F89GYK0LgAvi+eHOf4g== -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:50 2025 by rpki-client