$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa File: 9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa (raw, json) Hash identifier: +YrT6b2KGrTOLG1FC4FI2iuDhLmTgTdaxzHIak0u4SY= Subject key identifier: 70:6F:97:BD:19:00:5A:6E:63:A3:CF:E6:3C:23:B1:59:37:61:F9:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FD94B8A0A877287A1400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fd:94:b8:a0:a8:77:28:7a:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=672662de-9724-4590-871e-dbb83e22acf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:78:c2:14:b5:ca:99:e9:8b:49:20:6b:c4: 88:8b:e5:01:79:fc:7a:29:de:ee:9c:39:80:74:76: f6:3d:79:b8:1c:58:56:5c:64:f6:2c:dd:2b:d5:95: e5:9f:21:b0:7b:47:5d:99:f2:88:37:fa:73:11:19: 90:1f:c0:85:cb:3e:55:d6:44:db:af:ec:67:26:ab: 39:57:7c:69:fc:15:44:54:da:a1:06:37:01:3e:55: fb:49:7d:4a:3b:43:f3:31:b0:9a:7e:db:83:36:1e: 05:42:85:7b:4d:38:1d:7a:6e:fd:7e:45:ff:54:95: 4e:df:4e:10:15:14:ec:7c:0f:42:30:fa:3d:b3:5f: a2:d0:31:9c:b5:8a:77:80:7d:f8:72:ce:ac:c6:d7: 1a:39:d6:9d:26:66:f5:22:ad:be:04:be:68:ae:0c: 73:05:47:9e:87:7d:37:9f:fd:57:53:24:20:71:8d: 05:af:bc:84:21:8a:b4:c8:f6:3f:be:45:36:62:7f: 5b:8f:bb:e8:19:7a:a1:b2:95:e3:00:38:c7:07:d0: 95:a7:55:45:c2:b8:49:14:df:0c:e7:4a:d7:07:1e: ce:b5:16:a7:67:6f:d4:c1:11:eb:32:8c:b8:34:8d: ad:ef:3e:50:c2:26:4a:a6:36:97:8b:f1:b5:46:3d: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6F:97:BD:19:00:5A:6E:63:A3:CF:E6:3C:23:B1:59:37:61:F9:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9021175d-e99d-33b6-80bf-1b22ac4d2f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d0:43:2f:73:62:0a:a2:b1:21:3d:fe:a3:e4:aa:b3:8a:2c: 35:21:e5:7d:07:c9:8d:f7:4d:ee:fe:a4:da:93:4e:80:13:e8: be:25:70:ee:c1:eb:a7:a8:70:92:de:ee:0a:63:d2:be:13:7e: 16:6a:20:29:bc:1f:d1:59:ad:cd:59:14:68:50:0e:43:9a:01: 7f:5e:1f:6e:df:83:22:79:3c:e1:c5:8d:9f:97:24:d0:ff:a0: 65:2b:61:d4:9b:29:aa:97:b7:83:7d:6f:e1:00:e9:6a:9d:ce: 36:92:ee:4e:b9:ed:03:04:f3:e1:6c:e7:8a:8c:f2:79:52:8f: 51:4d:e3:21:c7:12:f9:b5:e5:6f:1c:11:74:ec:22:98:b3:a6: 4a:63:22:25:7e:65:9e:83:8e:b9:2d:48:c8:83:90:f7:33:95: 52:67:45:60:ae:44:be:5a:7d:77:aa:6d:9d:c7:f4:75:4a:67: 32:cf:63:32:b7:95:66:eb:7e:9a:5a:91:aa:5d:6d:5c:8c:83: e2:c9:38:55:d7:ea:ea:cc:0c:57:5b:9a:a5:9c:1d:e1:d4:36: f5:47:9f:7e:b6:5c:62:8b:5f:d7:95:47:f7:52:73:dd:ef:4e: fc:a5:e3:5f:e9:d1:ca:67:d8:e5:38:9f:c6:32:5a:01:6b:9b: ff:c9:9a:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEP2UuKCodyh6FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjcyNjYyZGUtOTcyNC00NTkwLTg3MWUtZGJiODNlMjJhY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVB4whS1ypnpi0kga8SIi+UBefx6Kd7unDmA dHb2PXm4HFhWXGT2LN0r1ZXlnyGwe0ddmfKIN/pzERmQH8CFyz5V1kTbr+xnJqs5 V3xp/BVEVNqhBjcBPlX7SX1KO0PzMbCaftuDNh4FQoV7TTgdem79fkX/VJVO304Q FRTsfA9CMPo9s1+i0DGctYp3gH34cs6sxtcaOdadJmb1Iq2+BL5orgxzBUeeh303 n/1XUyQgcY0Fr7yEIYq0yPY/vkU2Yn9bj7voGXqhspXjADjHB9CVp1VFwrhJFN8M 50rXBx7OtRanZ2/UwRHrMoy4NI2t7z5QwiZKpjaXi/G1Rj2NQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHBvl70ZAFpuY6PP5jwjsVk3YflmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTAyMTE3NWQtZTk5ZC0z M2I2LTgwYmYtMWIyMmFjNGQyZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIrQQy9zYgqisSE9/qPkqrOKLDUh5X0HyY33Te7+pNqTToAT6L4l cO7B66eocJLe7gpj0r4TfhZqICm8H9FZrc1ZFGhQDkOaAX9eH27fgyJ5POHFjZ+X JND/oGUrYdSbKaqXt4N9b+EA6WqdzjaS7k657QME8+Fs54qM8nlSj1FN4yHHEvm1 5W8cEXTsIpizpkpjIiV+ZZ6DjrktSMiDkPczlVJnRWCuRL5afXeqbZ3H9HVKZzLP YzK3lWbrfppakapdbVyMg+LJOFXX6urMDFdbmqWcHeHUNvVHn362XGKLX9eVR/dS c93vTvyl41/p0cpn2OU4n8YyWgFrm//Jmos= -----END CERTIFICATE-----Generated at Fri Mar 14 13:41:15 2025 by rpki-client