$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8749adee-27f3-32d3-983e-47ac820658d3.roa File: 8749adee-27f3-32d3-983e-47ac820658d3.roa (raw, json) Hash identifier: 7JMF9c41ETHkBvhPU2+LmU0iwkMW7xWCu3LJIEpKKHo= Subject key identifier: 26:BE:CF:1E:9F:A7:D1:3F:9C:9C:13:33:8F:B4:1C:AA:FE:A5:5E:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FD65955BCDD8F35E6780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8749adee-27f3-32d3-983e-47ac820658d3.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fd:65:95:5b:cd:d8:f3:5e:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=7a9700d2-4be8-497a-b043-41b31208b8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:05:03:5f:12:10:ad:72:75:db:d3:c0:76: 69:4e:95:b5:4d:db:c0:5e:96:63:8e:c3:2a:36:60: f6:c7:63:0c:3e:ba:c3:50:f3:46:52:f5:e6:ac:b1: 0a:a7:a0:c0:c5:0d:65:96:23:2d:2c:b5:db:c4:89: 99:b0:c5:2a:db:ab:e9:bb:b4:61:ba:f9:f4:50:be: 04:8d:4d:03:7f:fa:5c:9f:6f:2a:b4:c6:cc:87:75: 5b:3f:ea:29:ee:0b:ec:7d:b1:6f:8a:2b:aa:c0:31: 87:94:f3:25:86:80:0d:a1:c6:21:58:67:59:4a:ce: a1:12:c6:db:e3:d9:b1:35:be:98:d5:c2:36:45:d7: 61:37:5f:f8:da:ca:aa:12:92:2e:29:61:bc:8d:28: 32:e2:c3:b4:99:74:cd:f0:1a:de:3b:a0:c9:13:d3: 9d:11:80:c2:0d:e2:0e:01:01:e5:04:44:18:88:7e: a8:2e:d3:2b:0a:3e:8c:98:3a:6c:ae:41:00:ff:aa: af:38:7d:f2:e7:aa:05:97:02:3b:5b:08:9c:eb:6e: 4a:c2:f1:51:c0:9a:56:cd:1b:fe:3a:db:47:b7:9c: a3:dd:20:79:25:86:07:4e:d1:63:56:50:82:97:11: dc:c8:b4:92:13:26:ca:87:55:7e:8e:07:02:be:bc: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BE:CF:1E:9F:A7:D1:3F:9C:9C:13:33:8F:B4:1C:AA:FE:A5:5E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8749adee-27f3-32d3-983e-47ac820658d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:36::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b8:6f:bc:e0:24:e7:ca:ac:81:22:ff:90:37:4a:d0:85:e7: cb:39:66:65:e7:e3:ff:3e:63:b2:47:10:2a:b2:92:25:32:1b: dc:56:93:7e:1a:e0:f2:cd:ad:b2:ef:1c:9a:4c:e0:a1:34:4a: 41:c6:b6:92:75:cd:dc:04:7c:e1:e5:b5:99:e9:8c:ca:b7:f9: 15:6e:f6:2d:2e:2a:42:0d:5f:b2:58:94:12:1c:11:b0:d6:db: 05:43:9e:d3:6f:4a:0a:bd:4e:fe:d1:2e:45:40:88:88:d8:18: e0:55:73:a1:99:36:8a:f4:7b:96:c0:ac:ad:a7:fc:c0:d9:a4: f1:c0:3e:7e:1c:f3:99:45:e7:c7:db:d6:7c:98:23:f2:67:7c: 7f:d3:21:9b:0b:23:4d:a5:bf:06:e7:58:da:f0:a0:6a:19:76: 63:10:3a:60:73:9c:62:e0:43:33:92:f4:da:18:80:42:b5:af: 54:7e:cf:5f:1a:b2:27:4a:68:e8:0e:18:b4:9e:94:35:06:b0: ff:b6:f8:68:cd:c6:65:13:d7:01:7a:68:3b:0b:e7:ab:9b:72: ce:8b:af:9b:5d:a4:50:28:87:59:19:8d:ed:96:63:03:16:f1: 7a:21:9a:51:5f:13:04:ef:da:a0:9a:3a:e0:7a:2d:00:a4:8c: 89:e1:29:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEP1llVvN2PNeZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk N2E5NzAwZDItNGJlOC00OTdhLWIwNDMtNDFiMzEyMDhiOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQMFA18SEK1yddvTwHZpTpW1TdvAXpZjjsMq NmD2x2MMPrrDUPNGUvXmrLEKp6DAxQ1lliMtLLXbxImZsMUq26vpu7Rhuvn0UL4E jU0Df/pcn28qtMbMh3VbP+op7gvsfbFviiuqwDGHlPMlhoANocYhWGdZSs6hEsbb 49mxNb6Y1cI2RddhN1/42sqqEpIuKWG8jSgy4sO0mXTN8BreO6DJE9OdEYDCDeIO AQHlBEQYiH6oLtMrCj6MmDpsrkEA/6qvOH3y56oFlwI7Wwic625KwvFRwJpWzRv+ OttHt5yj3SB5JYYHTtFjVlCClxHcyLSSEybKh1V+jgcCvrwLlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCa+zx6fp9E/nJwTM4+0HKr+pV4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODc0OWFkZWUtMjdmMy0z MmQzLTk4M2UtNDdhYzgyMDY1OGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEu4b7zgJOfKrIEi/5A3StCF58s5ZmXn4/8+Y7JHECqykiUyG9xW k34a4PLNrbLvHJpM4KE0SkHGtpJ1zdwEfOHltZnpjMq3+RVu9i0uKkINX7JYlBIc EbDW2wVDntNvSgq9Tv7RLkVAiIjYGOBVc6GZNor0e5bArK2n/MDZpPHAPn4c85lF 58fb1nyYI/JnfH/TIZsLI02lvwbnWNrwoGoZdmMQOmBznGLgQzOS9NoYgEK1r1R+ z18asidKaOgOGLSelDUGsP+2+GjNxmUT1wF6aDsL56ubcs6Lr5tdpFAoh1kZje2W YwMW8XohmlFfEwTv2qCaOuB6LQCkjInhKVY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:56 2025 by rpki-client