$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa File: 7812d5a6-8aa4-3831-abe7-befad072a1d3.roa (raw, json) Hash identifier: 9GMDvvCNcf3rXwXsFVMW6Dgy1uZludZbFvYCqSoMpfg= Subject key identifier: 5A:60:49:04:A4:8D:5C:1B:74:4B:E7:1D:19:CF:71:4B:25:BC:C6:06 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FDB429A0A9217E5A43E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fd:b4:29:a0:a9:21:7e:5a:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=218bca4d-7470-4a57-83e8-b560e7ca42fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:97:40:cf:e3:73:25:0e:d7:b4:1f:0d:23:65: 10:68:84:12:d3:23:7f:3f:16:3b:83:ff:d2:f5:4b: a3:5c:76:98:d4:2e:e4:5a:63:9f:28:a1:0f:e5:eb: 02:ac:7a:c3:7e:e3:fd:75:89:f9:49:94:13:77:48: d3:94:20:86:ee:9f:6d:26:9e:8b:19:41:21:89:63: 4c:00:ed:83:3c:b8:97:be:96:7b:53:93:e9:5f:5f: ef:20:f5:d4:a0:e2:d0:27:d4:18:af:ca:08:72:f4: b9:38:12:4b:a9:84:e5:1a:b0:2e:48:d5:9b:5b:90: 44:de:d3:61:a2:c2:5e:18:de:79:a4:5f:7b:1b:8b: 30:92:be:f1:3c:e3:4a:88:d1:6f:1d:9b:0e:5f:c3: 47:e3:0e:d9:b0:b9:ba:1c:a8:14:0b:78:83:ff:69: 1d:d7:e3:ac:ed:26:36:ef:a0:d9:f9:45:4f:56:42: cb:d7:6a:6c:45:25:53:76:38:31:5d:33:38:d1:04: 4d:4c:ca:c6:eb:1a:e3:1c:1c:e0:d1:39:d3:56:73: 29:fb:6e:7d:a8:1a:b8:ca:d6:74:a9:15:bf:94:81: 7d:25:68:3e:4d:a5:65:c0:36:84:3c:1f:b8:62:7d: c5:1f:c2:22:59:fc:e1:6f:5e:72:3a:ba:c6:4b:93: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:60:49:04:A4:8D:5C:1B:74:4B:E7:1D:19:CF:71:4B:25:BC:C6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1f:54:fd:c3:9f:6e:ff:b5:ee:27:32:e3:fc:91:bc:8e:2f: a1:64:d8:d8:bd:f9:4c:7f:57:49:fd:74:cc:87:5a:30:73:9d: 67:b5:6c:2f:76:ed:41:e9:57:d6:4b:25:5b:a6:a3:2f:63:13: 01:2a:63:b3:ed:87:c1:f1:9f:20:aa:e2:74:30:e1:d0:99:6b: bd:5b:4c:93:61:39:df:cf:a2:56:8e:ba:b6:d3:27:23:93:03: 22:e6:e4:0e:e3:38:d0:a6:32:ac:54:3e:b3:31:29:5c:35:d4: e1:24:a3:69:79:cf:91:4c:73:f1:46:51:10:6f:6c:1c:33:ca: b2:c1:a8:e7:d1:93:68:b1:1c:d4:f4:d5:1c:a9:a7:a4:28:56: 5d:f5:a7:ac:05:05:3f:1e:ae:2a:48:a0:11:d9:11:d1:d3:d4: 1a:76:82:b7:a0:4f:2a:36:77:bf:7d:c7:13:79:6f:13:92:9a: 9c:bc:4e:46:2d:64:f7:9b:a9:e0:8f:8a:1f:08:12:9e:8a:e0: cb:b5:41:0a:b9:60:31:40:0c:8d:71:27:76:9f:ee:e5:f3:c5: af:50:de:34:6d:af:9c:85:5b:c4:8a:55:10:5e:d1:00:a8:59: 45:51:4c:fa:52:08:f8:91:ff:99:23:fb:8e:b0:82:2d:66:0f: 8f:7c:c1:4f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSEP20KaCpIX5aQ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjE4YmNhNGQtNzQ3MC00YTU3LTgzZTgtYjU2MGU3Y2E0MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZdAz+NzJQ7XtB8NI2UQaIQS0yN/PxY7g//S 9UujXHaY1C7kWmOfKKEP5esCrHrDfuP9dYn5SZQTd0jTlCCG7p9tJp6LGUEhiWNM AO2DPLiXvpZ7U5PpX1/vIPXUoOLQJ9QYr8oIcvS5OBJLqYTlGrAuSNWbW5BE3tNh osJeGN55pF97G4swkr7xPONKiNFvHZsOX8NH4w7ZsLm6HKgUC3iD/2kd1+Os7SY2 76DZ+UVPVkLL12psRSVTdjgxXTM40QRNTMrG6xrjHBzg0TnTVnMp+259qBq4ytZ0 qRW/lIF9JWg+TaVlwDaEPB+4Yn3FH8IiWfzhb15yOrrGS5MIwQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFpgSQSkjVwbdEvnHRnPcUslvMYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzgxMmQ1YTYtOGFhNC0z ODMxLWFiZTctYmVmYWQwNzJhMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANh9U/cOfbv+17icy4/yRvI4voWTY2L35TH9XSf10zIdaMHOdZ7Vs L3btQelX1kslW6ajL2MTASpjs+2HwfGfIKridDDh0JlrvVtMk2E538+iVo66ttMn I5MDIubkDuM40KYyrFQ+szEpXDXU4SSjaXnPkUxz8UZREG9sHDPKssGo59GTaLEc 1PTVHKmnpChWXfWnrAUFPx6uKkigEdkR0dPUGnaCt6BPKjZ3v33HE3lvE5KanLxO Ri1k95up4I+KHwgSnorgy7VBCrlgMUAMjXEndp/u5fPFr1DeNG2vnIVbxIpVEF7R AKhZRVFM+lII+JH/mSP7jrCCLWYPj3zBTw== -----END CERTIFICATE-----Generated at Sun Apr 6 01:12:01 2025 by rpki-client