$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8614a06c-6ba8-3abc-ac45-cef9596174d1.roa File: 8614a06c-6ba8-3abc-ac45-cef9596174d1.roa (raw, json) Hash identifier: 9eVnumjKWGVwHM/sTRk9mf66QqTKCJgWk0zbOKV7RlM= Subject key identifier: 46:86:34:48:64:64:02:F7:F9:1D:97:22:E1:99:E5:28:A8:A4:12:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FBDEB40788D0F00D07E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8614a06c-6ba8-3abc-ac45-cef9596174d1.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fb:de:b4:07:88:d0:f0:0d:07:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=a966a9da-0f1c-40d6-9f85-bb7f16b8ec99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:93:0d:e5:30:b1:70:90:e9:e2:60:1c:d9: 7a:d2:61:b3:ad:9e:5a:21:90:58:71:bd:d6:6a:d2: a4:cf:a1:77:13:e3:ba:43:b5:59:23:08:82:4a:00: 2b:b0:c6:cc:53:98:a8:2d:98:38:45:be:f1:8a:c1: ec:09:9d:ee:f1:8b:e5:a6:f8:55:8f:c7:47:87:e3: 56:35:34:3f:9f:f1:46:42:47:3d:d0:5f:c7:72:6f: 68:f8:be:5d:7f:9f:f6:3d:a6:a9:34:6c:5f:a5:c8: 33:3d:dd:05:c1:ee:4f:64:ba:2b:16:92:30:37:01: 9a:df:96:1c:a3:7e:eb:98:c9:ee:86:20:11:46:ee: 37:e5:c7:a4:93:01:da:c9:77:28:57:5f:b2:6b:44: b5:57:3a:9a:06:27:9a:2a:6b:08:9a:f3:87:6f:9d: cb:88:9b:e4:5f:33:9f:b8:24:f5:f5:52:1c:02:a4: 76:12:0d:b2:ae:2f:e1:94:55:91:c2:16:1d:f8:18: b0:21:78:04:5b:fa:3f:a4:64:4d:ff:1c:18:c4:f1: 03:01:8e:56:0e:4d:87:63:1e:30:79:87:79:71:76: fd:25:33:6e:63:60:e8:90:61:59:1f:6b:ed:e8:ac: 99:d2:ac:97:6b:2b:19:2d:5a:f9:4f:0a:24:76:27: 23:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:86:34:48:64:64:02:F7:F9:1D:97:22:E1:99:E5:28:A8:A4:12:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8614a06c-6ba8-3abc-ac45-cef9596174d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f7:37:c8:54:8b:d2:c5:f5:93:bf:5b:11:00:5c:83:d2:1d: 2d:1d:b4:e5:c8:ad:db:9e:a0:21:aa:cd:7a:46:23:ce:82:41: f8:e6:e7:ce:5c:35:4b:2b:c2:9d:ab:c5:ec:f6:e1:9a:59:d8: aa:46:25:57:27:aa:e8:44:16:7a:f0:07:a8:66:48:fb:38:d8: 48:aa:a8:64:cf:74:fb:ce:5e:c3:67:3c:1e:4b:87:93:c5:29: 59:76:19:55:27:9f:e3:b2:1a:8f:d7:a6:e7:84:85:01:57:e2: cd:3f:7c:f2:aa:3b:5a:f2:c1:c4:d3:1c:35:2a:6c:57:cc:3d: e1:df:77:df:a9:8c:78:3f:f0:67:2d:03:c0:4f:d1:7d:6f:17: 57:3a:43:17:db:f7:ba:12:3f:24:4b:3a:dc:7e:2f:b7:55:f1: 5c:36:2a:e3:87:79:93:94:d3:e0:f2:63:11:52:21:18:ee:5e: e6:f1:fd:17:fc:ac:2b:9f:62:6d:2a:c9:05:04:ce:dc:a7:82: ed:50:f5:d1:ff:9b:52:1c:03:cc:cc:f2:c6:cc:0c:81:3e:04: 10:f8:a2:24:3a:c5:98:3c:16:59:f6:99:66:ed:b7:b2:19:b2: a2:c0:3c:c1:52:52:a7:17:94:5b:07:09:a3:15:76:5c:b2:29: a8:8b:c7:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEPvetAeI0PANB+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YTk2NmE5ZGEtMGYxYy00MGQ2LTlmODUtYmI3ZjE2YjhlYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPKTDeUwsXCQ6eJgHNl60mGzrZ5aIZBYcb3W atKkz6F3E+O6Q7VZIwiCSgArsMbMU5ioLZg4Rb7xisHsCZ3u8YvlpvhVj8dHh+NW NTQ/n/FGQkc90F/Hcm9o+L5df5/2PaapNGxfpcgzPd0Fwe5PZLorFpIwNwGa35Yc o37rmMnuhiARRu435cekkwHayXcoV1+ya0S1VzqaBieaKmsImvOHb53LiJvkXzOf uCT19VIcAqR2Eg2yri/hlFWRwhYd+BiwIXgEW/o/pGRN/xwYxPEDAY5WDk2HYx4w eYd5cXb9JTNuY2DokGFZH2vt6KyZ0qyXaysZLVr5Twokdicj6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEaGNEhkZAL3+R2XIuGZ5SiopBKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODYxNGEwNmMtNmJhOC0z YWJjLWFjNDUtY2VmOTU5NjE3NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHT3N8hUi9LF9ZO/WxEAXIPSHS0dtOXIrdueoCGqzXpGI86CQfjm 585cNUsrwp2rxez24ZpZ2KpGJVcnquhEFnrwB6hmSPs42EiqqGTPdPvOXsNnPB5L h5PFKVl2GVUnn+OyGo/XpueEhQFX4s0/fPKqO1rywcTTHDUqbFfMPeHfd9+pjHg/ 8GctA8BP0X1vF1c6Qxfb97oSPyRLOtx+L7dV8Vw2KuOHeZOU0+DyYxFSIRjuXubx /Rf8rCufYm0qyQUEztyngu1Q9dH/m1IcA8zM8sbMDIE+BBD4oiQ6xZg8Fln2mWbt t7IZsqLAPMFSUqcXlFsHCaMVdlyyKaiLx1s= -----END CERTIFICATE-----Generated at Sat Apr 5 23:22:22 2025 by rpki-client