$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9391badf-c7c5-3d55-a232-6fd977b29b8d.roa File: 9391badf-c7c5-3d55-a232-6fd977b29b8d.roa (raw, json) Hash identifier: 4LUy1IxqHFPS3U1fTyWm3G70UBpoQlOjlMfMM8sOaCU= Subject key identifier: 22:BA:5A:29:9A:D6:2B:38:CA:B7:4A:AE:AA:8D:47:F3:4D:B4:E1:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FFAD6E094F3FE90EA480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9391badf-c7c5-3d55-a232-6fd977b29b8d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2607:faf8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ff:ad:6e:09:4f:3f:e9:0e:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=55669ebf-228d-44f6-8e51-5daaa83948ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:c8:00:79:65:89:48:65:5a:eb:a0:b9:16: d9:9f:26:dc:a4:87:d9:74:a5:06:f3:4b:b5:ef:ae: db:cc:da:8a:43:60:10:5c:cd:ef:e0:0a:e2:45:a7: 59:71:22:f1:e1:36:eb:34:5b:ff:da:b5:c9:71:e2: 46:42:dc:90:9d:f4:92:1c:c3:f0:6c:91:6f:98:c5: fa:3a:78:bc:8a:b7:b3:70:c1:eb:30:98:b4:af:75: 14:74:ec:8f:56:e2:2a:fd:22:26:8c:c6:57:06:b9: dc:2d:39:b8:c8:d9:c3:89:d4:30:cc:e9:59:a0:1a: 55:4b:9e:88:ed:be:b8:41:3e:ac:9b:44:87:7e:ad: 8a:d9:ef:95:b8:2a:b0:0a:13:eb:21:9f:27:27:95: fe:20:00:cc:b8:eb:ef:a2:80:fb:1c:e2:e0:25:e9: 98:d5:88:cc:0f:2e:2d:70:9c:28:3d:6b:5a:18:ca: 56:0a:5d:a3:6b:1d:fc:1d:c5:30:61:3f:e5:b7:f3: 10:50:d0:7b:8a:7c:da:26:9b:f0:6b:5b:be:2d:b5: 88:ee:b4:0c:14:e8:76:f3:07:93:e7:a0:4c:7c:f5: 08:90:01:e6:79:0a:ce:ec:e4:35:b0:26:71:46:50: 92:32:e0:fd:17:88:6d:d3:98:bd:29:36:8c:c2:77: 95:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BA:5A:29:9A:D6:2B:38:CA:B7:4A:AE:AA:8D:47:F3:4D:B4:E1:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9391badf-c7c5-3d55-a232-6fd977b29b8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:faf8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fd:50:8b:36:e9:0b:92:05:fd:78:d3:1e:85:78:fb:17:9c: 82:92:03:f3:ac:db:0b:12:22:cf:4c:7d:86:fd:b5:54:35:00: b9:7b:34:58:27:b2:a3:44:85:ae:5e:c8:f4:7a:02:af:59:07: 0d:33:b3:ac:19:bc:2d:fb:3c:19:dd:94:a1:f3:f6:e4:a3:6e: af:07:76:c9:cb:39:6d:e3:07:6b:43:d2:12:14:fa:2c:5c:03: 66:63:59:6c:77:db:a4:07:2e:3c:74:cc:5b:47:be:ae:85:18: 20:4a:b5:8a:22:c3:9b:36:33:e3:f6:c7:c4:15:fa:b5:19:44: 41:8e:0d:4c:fb:42:63:5a:90:52:e8:88:93:df:30:3f:bf:cb: 93:4c:89:64:02:76:b1:65:c4:ed:1a:d5:8d:ab:7d:3e:6c:e4: 59:d1:ad:b0:31:c9:5f:c6:2c:be:bb:88:75:f3:5d:d4:f5:33: 6e:f0:46:a8:be:60:d0:c1:40:cb:3e:07:b5:3c:e6:85:12:12: df:c3:25:8b:2c:5d:51:6b:bb:43:ba:e8:9a:58:6c:9e:52:bb: e5:ff:bc:28:1f:66:b7:ee:46:ae:40:bc:80:2e:34:61:16:ba: cd:a5:40:19:c1:04:b7:25:63:4d:f4:8f:36:8f:d9:8c:bb:9c: dc:3e:2b:9f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjSEP+tbglPP+kOpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NTU2NjllYmYtMjI4ZC00NGY2LThlNTEtNWRhYWE4Mzk0OGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHDIAHlliUhlWuuguRbZnybcpIfZdKUG80u1 767bzNqKQ2AQXM3v4AriRadZcSLx4TbrNFv/2rXJceJGQtyQnfSSHMPwbJFvmMX6 Oni8irezcMHrMJi0r3UUdOyPVuIq/SImjMZXBrncLTm4yNnDidQwzOlZoBpVS56I 7b64QT6sm0SHfq2K2e+VuCqwChPrIZ8nJ5X+IADMuOvvooD7HOLgJemY1YjMDy4t cJwoPWtaGMpWCl2jax38HcUwYT/lt/MQUNB7inzaJpvwa1u+LbWI7rQMFOh28weT 56BMfPUIkAHmeQrO7OQ1sCZxRlCSMuD9F4ht05i9KTaMwneVpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCK6Wima1is4yrdKrqqNR/NNtOHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTM5MWJhZGYtYzdjNS0z ZDU1LWEyMzItNmZkOTc3YjI5YjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6+DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4/VCLNukLkgX9eNMehXj7F5yCkgPzrNsLEiLPTH2G/bVUNQC5ezRY J7KjRIWuXsj0egKvWQcNM7OsGbwt+zwZ3ZSh8/bko26vB3bJyzlt4wdrQ9ISFPos XANmY1lsd9ukBy48dMxbR76uhRggSrWKIsObNjPj9sfEFfq1GURBjg1M+0JjWpBS 6IiT3zA/v8uTTIlkAnaxZcTtGtWNq30+bORZ0a2wMclfxiy+u4h1813U9TNu8Eao vmDQwUDLPge1POaFEhLfwyWLLF1Ra7tDuuiaWGyeUrvl/7woH2a37kauQLyALjRh FrrNpUAZwQS3JWNN9I82j9mMu5zcPiuf -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:23 2025 by rpki-client