$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa File: 8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa (raw, json) Hash identifier: fsJH0jFp5xBdr1QPusoZfWPmtPPmdfVzJD7VkWmsdTw= Subject key identifier: 86:73:86:71:D5:31:79:02:64:7F:91:B2:45:8E:96:49:FB:F3:9A:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112A9127DF654693353880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2a:91:27:df:65:46:93:35:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=10f2495d-635d-497f-846c-b1ee2c744b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7d:2d:6d:eb:50:ba:09:fe:a9:f9:9f:52:91: 92:c4:c6:c1:52:8f:88:46:8e:85:65:8d:a2:59:f5: c6:9e:88:f5:8e:37:3f:71:30:5e:a8:c4:37:a1:a8: 85:29:4b:35:05:be:e6:f9:b3:23:35:df:06:5c:42: ab:c8:90:a0:62:8d:59:e4:65:ae:e4:62:f4:42:b9: 6b:f3:f4:0c:7c:ce:4e:02:6c:13:20:fa:4d:0d:26: cc:8c:11:67:cd:1f:64:12:57:2f:6a:76:71:7f:43: ca:26:33:9e:48:f2:6a:0d:3b:c5:05:fa:33:3d:72: 90:fe:6f:79:5f:df:db:ac:a8:e8:c3:7e:2f:2a:99: e5:ab:08:1c:eb:3e:ab:26:30:14:10:72:e8:63:20: 8a:24:79:fe:44:40:16:e7:9f:64:ee:b1:fd:0a:24: 18:71:3b:cb:64:a9:f7:e8:9b:ac:b9:25:01:40:a0: 65:a0:4c:ff:f0:08:d7:67:c9:96:ed:f4:f8:a7:73: 12:fb:7c:6c:d5:82:0a:a3:be:22:a8:75:40:7d:ff: 4c:77:55:9f:67:66:ec:99:4c:bd:12:5b:8a:26:0c: 11:fe:18:3b:84:4d:af:c6:77:55:69:37:96:9e:47: 1c:9a:42:67:ce:d6:57:55:37:82:ab:5d:2e:d3:e1: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:73:86:71:D5:31:79:02:64:7F:91:B2:45:8E:96:49:FB:F3:9A:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bac0752-b495-3bd1-baa0-6c65b6cd85ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:f00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9d:76:e5:fb:ed:38:51:4b:d1:b9:b1:0a:b4:0a:be:d5:6e: 0a:82:ef:b3:17:24:d6:63:3b:2a:63:65:a8:00:f9:9f:28:16: 54:fe:ca:35:57:03:d7:99:3b:de:61:62:9c:15:60:eb:4b:b6: 7d:e5:53:61:9e:92:01:9e:a7:34:42:0a:63:cc:f9:26:c7:ec: f6:03:9a:aa:7b:f4:15:03:b2:50:e0:7b:8f:39:44:b8:04:d1: f1:d9:a2:3c:1f:3d:aa:af:da:2a:57:70:bb:93:11:0b:53:a9: df:26:28:66:ee:3d:62:ed:a7:1f:07:33:db:23:45:4d:83:98: 54:34:92:30:3f:22:3f:b1:f5:20:1f:7a:6c:33:7d:f3:53:b5: b4:20:9b:9b:21:0b:72:21:7d:f8:1f:19:fb:b9:18:bd:23:6d: a1:e3:26:be:75:76:f5:b2:84:98:bb:64:9e:bd:fc:66:d6:55: 49:c5:c5:bc:86:cf:ff:f2:5d:22:e6:ae:9c:00:70:5c:33:27: 72:87:fa:42:7b:0e:ae:29:9c:48:c2:0a:4b:b9:0d:a3:ed:c3: 88:92:0c:c7:3a:5f:c9:34:47:5a:b7:f6:09:61:92:e3:0b:5c: 22:58:bd:a2:f9:76:ac:48:92:f1:28:00:c4:0a:5b:91:46:63: 2e:57:7a:54 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSESqRJ99lRpM1OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MTBmMjQ5NWQtNjM1ZC00OTdmLTg0NmMtYjFlZTJjNzQ0Yjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn0tbetQugn+qfmfUpGSxMbBUo+IRo6FZY2i WfXGnoj1jjc/cTBeqMQ3oaiFKUs1Bb7m+bMjNd8GXEKryJCgYo1Z5GWu5GL0Qrlr 8/QMfM5OAmwTIPpNDSbMjBFnzR9kElcvanZxf0PKJjOeSPJqDTvFBfozPXKQ/m95 X9/brKjow34vKpnlqwgc6z6rJjAUEHLoYyCKJHn+REAW559k7rH9CiQYcTvLZKn3 6JusuSUBQKBloEz/8AjXZ8mW7fT4p3MS+3xs1YIKo74iqHVAff9Md1WfZ2bsmUy9 EluKJgwR/hg7hE2vxndVaTeWnkccmkJnztZXVTeCq10u0+Fm5wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIZzhnHVMXkCZH+RskWOlkn785pKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJhYzA3NTItYjQ5NS0z YmQxLWJhYTAtNmM2NWI2Y2Q4NWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAA8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAF5125fvtOFFL0bmxCrQKvtVuCoLvsxck1mM7KmNlqAD5nygWVP7K NVcD15k73mFinBVg60u2feVTYZ6SAZ6nNEIKY8z5Jsfs9gOaqnv0FQOyUOB7jzlE uATR8dmiPB89qq/aKldwu5MRC1Op3yYoZu49Yu2nHwcz2yNFTYOYVDSSMD8iP7H1 IB96bDN981O1tCCbmyELciF9+B8Z+7kYvSNtoeMmvnV29bKEmLtknr38ZtZVScXF vIbP//JdIuaunABwXDMncof6QnsOrimcSMIKS7kNo+3DiJIMxzpfyTRHWrf2CWGS 4wtcIli9ovl2rEiS8SgAxApbkUZjLld6VA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:33 2025 by rpki-client