$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cf93025-4317-36ae-8a0b-2747749b1f8c.roa File: 9cf93025-4317-36ae-8a0b-2747749b1f8c.roa (raw, json) Hash identifier: 2VPNiMnC5HWLCKNr91NmFgiqrqT57B0nXa0ADCMv30U= Subject key identifier: 83:CD:F3:40:ED:E6:3E:7A:AD:A1:68:C6:51:1F:60:BF:CE:20:B9:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FBBA63BB28B8AB32E9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cf93025-4317-36ae-8a0b-2747749b1f8c.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fb:ba:63:bb:28:b8:ab:32:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0909d35c-27a9-46a4-8b1c-29cba6695901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:ff:d9:07:c1:57:3b:ed:97:59:e1:6f:31: 7d:82:de:14:83:e8:75:a5:ad:99:5c:33:c8:df:5d: 8e:ed:f1:ee:7f:bc:37:f3:7b:16:a3:9c:46:10:33: fe:d1:1b:fd:6a:34:3b:01:05:7f:3c:75:f9:7a:10: 4c:29:cd:40:a8:97:53:c0:52:f4:31:91:35:b5:8f: ff:97:a9:e0:05:6b:ef:a1:6a:db:7d:04:71:1c:22: 45:ba:4c:b5:db:14:2d:c7:4c:7b:e8:26:92:76:b7: 6f:0f:e8:12:0d:8f:99:24:32:e8:24:f6:e1:10:fc: 62:a4:f3:fa:b4:8d:ff:21:79:38:df:87:0a:2c:4a: 47:83:c4:67:0a:7f:d2:b6:cb:f7:01:c8:9e:26:cf: 10:cb:c0:76:66:8a:e3:13:e9:37:a8:7e:71:f7:c5: f9:dd:c4:68:9f:dd:ca:a4:74:56:a2:ba:9a:09:9d: 33:cc:e7:71:f8:5d:02:80:14:f4:dd:1c:c3:0d:cd: 57:f4:5b:ef:92:f3:48:91:6d:5f:51:19:8d:26:f0: 5f:9d:38:d2:3c:ce:d4:6f:ab:8f:85:a7:b9:1b:74: d1:46:89:21:09:55:ef:ff:7f:90:04:8a:71:ef:6f: f9:91:3a:47:86:71:a0:ad:ec:72:17:ab:ad:17:10: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CD:F3:40:ED:E6:3E:7A:AD:A1:68:C6:51:1F:60:BF:CE:20:B9:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cf93025-4317-36ae-8a0b-2747749b1f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1a:5e:fe:76:24:ca:f9:93:ac:75:fb:a7:ab:e4:1a:b6:0f: 84:54:35:59:89:1a:7a:fc:93:d5:74:28:40:51:02:e0:d4:8f: 29:39:74:3d:1c:3a:65:28:5b:8d:07:a9:e5:21:67:01:76:42: 13:cd:8e:62:60:10:a5:d8:e9:03:27:82:90:92:19:91:92:3a: ce:a5:6a:71:b0:69:0f:46:5a:6a:af:f3:9c:3c:57:c6:04:28: d9:95:71:4f:09:76:51:ad:bf:09:f4:54:8a:0d:67:f1:a9:75: 66:59:32:fe:bd:85:5c:12:c9:cc:46:9b:51:e0:f4:50:77:56: 97:3a:80:1d:94:3a:06:8b:57:ab:b7:0b:a6:5a:87:b1:c1:f2: f1:5f:f5:b6:94:e5:10:eb:b3:91:24:31:02:ac:b7:69:05:09: 1a:32:8f:a4:f9:c1:8d:8d:a1:2f:76:0a:a5:62:2b:57:46:de: 58:02:72:3e:ac:c0:d3:6b:70:ca:39:f7:ad:59:3a:43:b1:f4: 14:c4:00:00:82:0d:27:97:bb:b2:a7:34:8a:79:83:24:0a:39: 9b:c8:b6:93:d0:27:bf:c4:3f:3d:dd:20:d6:45:40:69:28:f0: 1d:49:e4:4a:79:89:6f:c7:5d:10:6b:1d:ff:ad:46:4e:b4:5a: 8e:68:1f:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEPu6Y7souKsy6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDkwOWQzNWMtMjdhOS00NmE0LThiMWMtMjljYmE2Njk1OTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWn/2QfBVzvtl1nhbzF9gt4Ug+h1pa2ZXDPI 312O7fHuf7w383sWo5xGEDP+0Rv9ajQ7AQV/PHX5ehBMKc1AqJdTwFL0MZE1tY// l6ngBWvvoWrbfQRxHCJFuky12xQtx0x76CaSdrdvD+gSDY+ZJDLoJPbhEPxipPP6 tI3/IXk434cKLEpHg8RnCn/Stsv3AcieJs8Qy8B2ZorjE+k3qH5x98X53cRon93K pHRWorqaCZ0zzOdx+F0CgBT03RzDDc1X9FvvkvNIkW1fURmNJvBfnTjSPM7Ub6uP hae5G3TRRokhCVXv/3+QBIpx72/5kTpHhnGgrexyF6utFxBvRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIPN80Dt5j56raFoxlEfYL/OILmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNmOTMwMjUtNDMxNy0z NmFlLThhMGItMjc0Nzc0OWIxZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGoaXv52JMr5k6x1+6er5Bq2D4RUNVmJGnr8k9V0KEBRAuDUjyk5 dD0cOmUoW40HqeUhZwF2QhPNjmJgEKXY6QMngpCSGZGSOs6lanGwaQ9GWmqv85w8 V8YEKNmVcU8JdlGtvwn0VIoNZ/GpdWZZMv69hVwSycxGm1Hg9FB3Vpc6gB2UOgaL V6u3C6Zah7HB8vFf9baU5RDrs5EkMQKst2kFCRoyj6T5wY2NoS92CqViK1dG3lgC cj6swNNrcMo5961ZOkOx9BTEAACCDSeXu7KnNIp5gyQKOZvItpPQJ7/EPz3dINZF QGko8B1J5Ep5iW/HXRBrHf+tRk60Wo5oH1Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:25 2025 by rpki-client