$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5460827-1213-3452-8879-dabb791030bb.roa File: a5460827-1213-3452-8879-dabb791030bb.roa (raw, json) Hash identifier: mbiqzczyBamWT+9SnSeVI89Dco4LC115LVmQmKSfXOU= Subject key identifier: 34:7C:91:62:8F:10:33:92:8C:44:4D:51:DC:2E:BA:C8:EF:35:8B:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FC3B7133158FF7286480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5460827-1213-3452-8879-dabb791030bb.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fc:3b:71:33:15:8f:f7:28:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=f40b60c4-dc57-4f88-aeb4-583aba3369d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:b7:01:3b:06:ed:22:53:9a:25:70:a0:f1: f0:d4:dc:ae:be:47:71:df:d6:22:e7:22:fd:06:1e: 8a:cd:d3:ee:c0:ce:9a:fc:a0:28:17:9b:9c:b8:c2: f5:bf:54:32:24:94:34:83:c8:77:7e:f3:7a:d8:65: 12:c7:24:93:6d:18:bf:03:06:7c:33:d6:e8:4c:b8: a5:21:5b:09:d3:90:8a:b3:d4:46:d0:19:3e:e7:cd: 48:34:cd:0f:c3:44:e9:5c:70:73:20:85:eb:22:3c: 50:e7:21:91:6a:e4:76:56:3c:0b:e6:a4:c6:01:fa: bd:80:64:ea:53:54:a2:8e:f9:c3:6d:6d:40:a0:20: d7:84:79:d2:a9:92:de:3f:07:83:ae:5e:24:d4:6b: 86:34:00:f5:9a:bc:f4:88:cf:94:e3:1a:32:f6:c6: 63:09:55:5f:db:af:5e:35:ba:3b:d3:db:fd:b4:61: 48:48:55:be:34:7d:dc:2f:d7:2a:bc:7e:aa:84:b1: 79:01:53:c0:e0:da:98:c9:68:04:9a:aa:1e:97:36: 77:20:82:60:8d:b7:40:fc:bc:d0:26:34:5c:9b:4a: 10:d3:92:2f:df:b0:e3:09:36:e2:4e:cb:a0:15:9b: 6b:d6:2d:b7:82:f3:79:7c:e1:60:bc:4c:1d:ab:4d: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7C:91:62:8F:10:33:92:8C:44:4D:51:DC:2E:BA:C8:EF:35:8B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5460827-1213-3452-8879-dabb791030bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:14::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a0:f0:20:0d:58:47:1d:e7:46:f3:ec:cb:4f:cb:73:17:bb: ce:cc:d5:8c:d7:0b:0e:b8:ac:5a:64:da:2e:6f:49:c9:59:8a: 4e:5b:e4:32:45:0c:f7:90:9b:58:23:87:a8:e1:1e:0d:52:0a: 21:33:39:f3:a0:21:c7:e2:da:03:8a:b1:4c:e6:36:a6:1e:41: 5d:eb:d7:ab:5f:e1:2b:18:f5:59:2d:4d:e5:1b:46:25:9f:b2: a0:ac:45:47:58:bd:22:a7:d8:37:8c:9b:40:e7:f9:cc:a9:bf: e6:b0:2c:5d:1e:d8:f0:8e:16:6b:40:32:c0:bd:62:32:b4:2f: 57:02:88:e4:3d:8f:ba:6a:ba:09:a7:1a:77:f0:d7:85:a7:17: 1c:58:16:d2:c1:55:01:da:21:19:00:d4:ca:19:79:6d:83:4c: 12:63:19:14:91:20:7d:43:68:3f:51:69:9f:0f:ff:a8:40:1e: 16:60:5e:32:ca:39:01:21:e1:df:6f:98:c5:a2:39:60:ef:3b: fb:83:61:59:e8:32:ad:53:c4:4e:6a:9f:96:50:bf:93:97:4f: 25:31:3f:94:49:12:db:46:8c:2f:3b:1d:83:e6:05:17:65:96: b3:3f:89:c4:5a:b7:ad:e8:ee:d6:0f:80:b7:95:91:34:55:72: 93:2b:e6:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEPw7cTMVj/coZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjQwYjYwYzQtZGM1Ny00Zjg4LWFlYjQtNTgzYWJhMzM2OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkku3ATsG7SJTmiVwoPHw1Nyuvkdx39Yi5yL9 Bh6KzdPuwM6a/KAoF5ucuML1v1QyJJQ0g8h3fvN62GUSxySTbRi/AwZ8M9boTLil IVsJ05CKs9RG0Bk+581INM0Pw0TpXHBzIIXrIjxQ5yGRauR2VjwL5qTGAfq9gGTq U1SijvnDbW1AoCDXhHnSqZLePweDrl4k1GuGNAD1mrz0iM+U4xoy9sZjCVVf269e Nbo709v9tGFISFW+NH3cL9cqvH6qhLF5AVPA4NqYyWgEmqoelzZ3IIJgjbdA/LzQ JjRcm0oQ05Iv37DjCTbiTsugFZtr1i23gvN5fOFgvEwdq032dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDR8kWKPEDOSjERNUdwuusjvNYvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU0NjA4MjctMTIxMy0z NDUyLTg4NzktZGFiYjc5MTAzMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAACg8CANWEcd50bz7MtPy3MXu87M1YzXCw64rFpk2i5vSclZik5b 5DJFDPeQm1gjh6jhHg1SCiEzOfOgIcfi2gOKsUzmNqYeQV3r16tf4SsY9VktTeUb RiWfsqCsRUdYvSKn2DeMm0Dn+cypv+awLF0e2PCOFmtAMsC9YjK0L1cCiOQ9j7pq ugmnGnfw14WnFxxYFtLBVQHaIRkA1MoZeW2DTBJjGRSRIH1DaD9RaZ8P/6hAHhZg XjLKOQEh4d9vmMWiOWDvO/uDYVnoMq1TxE5qn5ZQv5OXTyUxP5RJEttGjC87HYPm BRdllrM/icRat63o7tYPgLeVkTRVcpMr5ow= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:17 2025 by rpki-client