$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa File: 9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa (raw, json) Hash identifier: 1TwRZtw4gr5L/hc/8jTS3OHNym5f30XkDk051pHMWVM= Subject key identifier: BE:1D:DD:20:AF:EA:89:41:A0:65:4C:18:8D:F7:A8:9C:0D:B6:82:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FBA99527975C094C4200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fb:a9:95:27:97:5c:09:4c:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=29f1deeb-4bcf-44b0-911e-01d5f1d662de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:93:d6:e3:5f:60:96:66:27:03:9a:27:ae: 62:97:0f:28:d5:d7:cb:7d:f8:87:ef:6f:78:9e:c0: 8c:b1:c0:09:a2:10:18:7b:88:7a:f8:4a:dd:bd:39: 44:c3:5c:ee:14:92:41:a7:ad:0f:9a:64:9c:29:f0: bf:e0:e4:0f:d7:29:8d:8e:67:21:d2:68:8d:5e:73: 1a:53:23:ce:5f:34:4e:20:48:dd:d0:72:2c:af:d2: ff:95:de:7e:42:3d:72:b3:b2:bd:1f:19:d7:a5:bd: 14:19:7a:91:68:3e:c6:6e:d9:32:f4:b2:3e:28:22: 52:44:7d:86:2e:42:80:d5:32:4e:35:b0:f6:25:3d: 07:bd:46:ab:7b:3e:ee:60:7b:9f:11:0d:75:53:4d: 5e:63:b8:28:4e:3e:c9:2f:3e:21:81:15:44:42:d2: de:ac:ab:88:a6:8f:ad:a1:22:45:62:57:9c:79:18: 57:10:18:42:2a:ff:24:d4:f7:a0:1a:bd:58:2b:b1: 89:b1:2d:78:59:68:64:06:0c:5d:3e:86:1f:81:bb: aa:00:b7:27:ce:97:f5:a2:0a:a6:57:20:ca:d3:84: 96:42:12:68:62:92:33:da:ce:a1:dc:39:f9:57:53: af:99:71:b8:8f:2b:d2:c7:20:f1:07:84:bc:a5:04: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1D:DD:20:AF:EA:89:41:A0:65:4C:18:8D:F7:A8:9C:0D:B6:82:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fb5a701-1c43-3f7a-9d0d-d78f71ed0b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:52:af:96:cd:b4:03:47:00:5a:85:b8:da:ae:43:c1:4b:29: 29:8d:0c:ca:f0:a7:2b:f5:2a:9a:f9:2f:54:e3:e1:ee:e4:d0: 73:85:ea:f1:14:8c:39:8d:e6:9f:ec:47:a6:eb:2c:c6:68:16: 6a:2d:a2:c7:38:fe:57:2b:d7:7a:08:eb:56:02:2d:e8:65:8b: 8b:2d:33:e7:85:26:83:07:1b:6e:73:09:5c:36:e2:0e:e8:f2: 72:94:15:1e:a3:c3:27:09:eb:4e:36:08:52:b7:2b:d2:02:f0: cd:27:63:c2:ce:e1:17:62:b6:88:7e:45:43:1f:eb:0e:3d:fe: 2a:37:66:f9:03:39:3b:33:15:32:71:69:2d:dc:1e:55:f1:2f: 7d:e1:df:23:8c:2b:df:9b:61:85:54:fc:9e:16:6d:cb:90:95: df:95:0a:b1:88:f2:04:51:a3:0d:42:ba:ab:5b:ba:4e:ff:1d: c2:97:6e:40:fa:5b:f5:8a:20:e4:af:16:b1:56:b3:11:b9:f1: bc:43:f9:e6:39:3a:32:9b:7c:b0:ee:1c:40:1b:d7:e7:04:18: 8c:d4:07:29:c6:40:a5:52:93:c3:28:56:16:2b:5a:65:4b:06: b2:bc:40:80:76:4e:ab:25:42:ab:ce:84:96:af:2a:de:ee:2a: 18:95:e6:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEPuplSeXXAlMQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjlmMWRlZWItNGJjZi00NGIwLTkxMWUtMDFkNWYxZDY2MmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWST1uNfYJZmJwOaJ65ilw8o1dfLffiH7294 nsCMscAJohAYe4h6+ErdvTlEw1zuFJJBp60PmmScKfC/4OQP1ymNjmch0miNXnMa UyPOXzROIEjd0HIsr9L/ld5+Qj1ys7K9HxnXpb0UGXqRaD7Gbtky9LI+KCJSRH2G LkKA1TJONbD2JT0HvUarez7uYHufEQ11U01eY7goTj7JLz4hgRVEQtLerKuIpo+t oSJFYleceRhXEBhCKv8k1PegGr1YK7GJsS14WWhkBgxdPoYfgbuqALcnzpf1ogqm VyDK04SWQhJoYpIz2s6h3Dn5V1OvmXG4jyvSxyDxB4S8pQQmswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL4d3SCv6olBoGVMGI33qJwNtoJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZiNWE3MDEtMWM0My0z ZjdhLTlkMGQtZDc4ZjcxZWQwYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJFSr5bNtANHAFqFuNquQ8FLKSmNDMrwpyv1Kpr5L1Tj4e7k0HOF 6vEUjDmN5p/sR6brLMZoFmotosc4/lcr13oI61YCLehli4stM+eFJoMHG25zCVw2 4g7o8nKUFR6jwycJ6042CFK3K9IC8M0nY8LO4Rditoh+RUMf6w49/io3ZvkDOTsz FTJxaS3cHlXxL33h3yOMK9+bYYVU/J4WbcuQld+VCrGI8gRRow1Cuqtbuk7/HcKX bkD6W/WKIOSvFrFWsxG58bxD+eY5OjKbfLDuHEAb1+cEGIzUBynGQKVSk8MoVhYr WmVLBrK8QIB2TqslQqvOhJavKt7uKhiV5mY= -----END CERTIFICATE-----Generated at Sun Apr 6 03:23:09 2025 by rpki-client