$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa File: 9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa (raw, json) Hash identifier: 7hoFtsng0fA6FRr4SJhaRLALRQ7Wtery1Etp5ztOR28= Subject key identifier: 7E:F3:53:EA:50:05:CA:C1:B9:28:4A:BC:4E:E0:13:A4:6D:7A:AE:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D7A65A158CA2E950299833C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:4300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:5a:15:8c:a2:e9:50:29:98:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=dfc3ccf8-9d57-4db0-b45a-7b21e12dbad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:80:c9:62:e0:c3:71:06:e1:a3:56:d3:90:8b: 79:ae:02:24:6f:ce:74:3e:f9:4a:bb:34:e0:e9:97: 3a:73:2a:a5:b3:58:97:a8:db:bd:ff:8d:93:14:04: e6:ee:5c:48:43:7c:93:22:6e:3b:ad:39:ae:13:76: 87:7f:d2:8a:2c:b3:62:55:a7:90:28:dd:46:c1:b9: bf:92:d0:67:b8:79:51:a7:48:22:45:fd:16:1f:7c: f0:e8:50:77:e9:9c:8c:d3:0e:2a:82:e6:76:8a:cd: 25:f3:a5:1c:1d:85:43:6f:5e:07:1e:43:de:22:6f: c9:ed:6d:f5:3a:f3:62:b2:12:13:f0:c9:52:20:30: bc:5e:34:87:76:78:b9:66:74:47:d5:1e:a2:49:fc: c1:4e:64:3d:80:57:60:d8:57:ce:55:39:eb:91:c6: 9d:b6:ff:8d:e0:9d:9a:52:e9:29:70:33:05:bc:03: 34:ee:41:11:7a:97:54:ae:ff:2a:08:1d:89:91:19: 1b:2f:4c:b4:84:89:9a:56:c5:cb:ce:73:92:4a:54: 9c:72:18:e6:f4:b9:96:cb:2c:40:8c:83:92:85:f3: 19:37:88:38:8c:04:39:77:35:0d:6c:99:39:0c:49: 40:68:70:d7:d9:bf:c4:2a:ce:40:7a:c2:26:db:f7: 42:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F3:53:EA:50:05:CA:C1:B9:28:4A:BC:4E:E0:13:A4:6D:7A:AE:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:4300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ed:75:08:17:21:84:00:01:38:ff:53:d3:5e:b6:bb:1a:cf: c2:7e:5d:97:92:1f:52:b8:ca:0f:1f:d6:9e:c8:90:61:18:ff: 0b:0e:58:79:e7:bf:50:3e:fc:94:1c:e3:f6:47:39:64:23:0c: 0b:0b:fa:31:61:59:31:db:a4:eb:c9:56:32:4b:db:b2:ee:ca: c9:58:7f:e3:4d:f1:04:bf:a4:35:06:39:b2:b6:2a:bb:e7:9f: 20:ad:b9:8a:80:42:92:7b:87:e2:0f:32:02:97:6f:56:fa:5c: b8:53:4d:d9:cc:a6:47:f0:67:41:0b:77:53:56:54:02:84:b2: 11:72:c7:2a:09:55:44:c2:e8:8a:29:d8:2d:8a:f2:1d:36:14: 2b:06:94:5f:29:80:7d:fc:b6:0b:be:2f:c0:6b:82:6e:26:b3: 85:5c:a1:04:20:0c:ed:d0:5b:d8:0d:48:c1:9d:5e:95:7e:05: 2d:92:6d:d1:c9:05:ed:23:4c:35:6e:20:86:8b:f8:b5:d6:e0: 3e:fb:e5:a8:32:55:78:96:8a:02:60:e6:a5:a5:e4:ba:00:60: 71:c7:22:72:28:99:b8:7c:6f:32:53:3e:b2:79:d9:22:20:a3: 06:8f:5c:de:a0:71:36:82:6a:b5:6c:db:06:9e:f1:95:a5:01: 0f:1c:9c:27 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjXploVjKLpUCmYM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZGZjM2NjZjgtOWQ1Ny00ZGIwLWI0NWEtN2IyMWUxMmRiYWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YDJYuDDcQbho1bTkIt5rgIkb850PvlKuzTg 6Zc6cyqls1iXqNu9/42TFATm7lxIQ3yTIm47rTmuE3aHf9KKLLNiVaeQKN1Gwbm/ ktBnuHlRp0giRf0WH3zw6FB36ZyM0w4qguZ2is0l86UcHYVDb14HHkPeIm/J7W31 OvNishIT8MlSIDC8XjSHdni5ZnRH1R6iSfzBTmQ9gFdg2FfOVTnrkcadtv+N4J2a UukpcDMFvAM07kERepdUrv8qCB2JkRkbL0y0hImaVsXLznOSSlScchjm9LmWyyxA jIOShfMZN4g4jAQ5dzUNbJk5DElAaHDX2b/EKs5AesIm2/dCwQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH7zU+pQBcrBuShKvE7gE6Rteq4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNkMTQ2YTAtMmQwYy0z MTBiLWE1ZTMtZDc0ZDAyNTRiMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAEMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACO11CBchhAABOP9T0162uxrPwn5dl5IfUrjKDx/WnsiQYRj/Cw5Y eee/UD78lBzj9kc5ZCMMCwv6MWFZMduk68lWMkvbsu7KyVh/403xBL+kNQY5srYq u+efIK25ioBCknuH4g8yApdvVvpcuFNN2cymR/BnQQt3U1ZUAoSyEXLHKglVRMLo iinYLYryHTYUKwaUXymAffy2C74vwGuCbiazhVyhBCAM7dBb2A1IwZ1elX4FLZJt 0ckF7SNMNW4ghov4tdbgPvvlqDJVeJaKAmDmpaXkugBgccciciiZuHxvMlM+snnZ IiCjBo9c3qBxNoJqtWzbBp7xlaUBDxycJw== -----END CERTIFICATE-----Generated at Sat Apr 5 20:24:03 2025 by rpki-client