$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a64161b8-d518-3362-a517-e8a1b3c85e63.roa File: a64161b8-d518-3362-a517-e8a1b3c85e63.roa (raw, json) Hash identifier: RvqhELZz+1gcLyNLgBMgWyfbTTVwebNN3c+Zdx0VtTA= Subject key identifier: 12:1D:41:13:A2:0F:B9:E8:14:58:62:5C:7B:D2:AE:20:2D:62:2E:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FD2A81FF116FFC1EDE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a64161b8-d518-3362-a517-e8a1b3c85e63.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fd:2a:81:ff:11:6f:fc:1e:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=745c740e-2d86-4e79-bd91-0fb2809213a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:ee:8c:11:7c:8b:ee:16:95:af:46:f0:ac: 1e:73:0f:89:bd:50:b5:ba:fc:0a:42:32:52:71:03: 79:65:97:80:f9:be:09:6c:d6:cc:1b:b2:89:cf:d5: 00:f0:42:56:c2:fa:30:d5:4d:9b:3a:8c:4d:8a:f6: 23:27:97:00:a0:95:0c:9c:f4:bc:eb:d0:bd:3d:81: dc:1c:94:c8:9a:3b:16:85:06:4f:b8:9c:7c:64:0b: 20:da:b1:40:91:3d:51:c6:ee:4a:4c:70:79:f0:c0: 02:91:1d:ab:32:aa:cc:67:f7:e8:2f:e9:54:5c:d5: f5:47:86:14:22:9f:57:bd:75:d7:72:85:c1:39:f3: 56:fc:97:7f:62:1b:ca:f9:06:3c:6e:f0:15:fb:0d: 64:e7:61:1e:78:2c:a3:67:5f:a8:39:a9:59:b6:a4: 33:35:4b:c9:c5:29:c4:7e:1a:a9:9e:b4:e0:6c:72: 67:50:34:26:b2:0f:74:7b:d8:31:85:21:cc:2c:27: c3:4c:fa:cc:ac:43:fd:42:0a:84:89:56:f6:f1:a1: b5:85:dd:20:9b:ac:dd:66:44:f4:66:7d:7e:01:b6: dc:d6:c0:e3:1b:67:cc:52:52:c9:e3:a3:0b:e3:f3: 80:4c:59:8d:cd:c8:3a:71:d6:54:83:fd:13:79:bc: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1D:41:13:A2:0F:B9:E8:14:58:62:5C:7B:D2:AE:20:2D:62:2E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a64161b8-d518-3362-a517-e8a1b3c85e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9f:03:c3:4a:b9:3e:4f:6d:93:b2:d6:8e:55:44:0c:d0:03: a0:37:bc:e3:00:a7:8b:40:f6:fc:7e:c0:fe:44:a0:42:72:db: 75:95:36:6e:cc:8f:6b:ea:76:bf:c2:62:91:00:3c:c2:31:bb: 80:2e:c0:ab:3f:14:db:03:08:a7:e9:f2:75:0e:5d:cf:3a:54: 09:a4:59:d7:a5:60:f1:78:a6:09:38:71:1e:e1:9e:ce:5e:9a: d7:1f:89:24:78:65:be:ec:05:62:a4:95:49:7d:50:96:83:20: 0e:27:af:46:e1:11:09:c6:1d:e9:34:9e:87:7d:14:58:a6:8f: 6b:d6:58:5e:0b:eb:76:5e:82:11:ea:44:00:b9:5b:35:a5:fc: 8d:02:c9:27:79:9b:17:d2:10:7e:5f:88:a4:52:1f:4c:73:6b: 20:52:b4:25:2a:84:69:93:e4:1d:22:e8:9d:37:04:1e:3c:2e: d5:d9:17:3a:61:86:fd:40:41:88:38:15:3b:cc:41:aa:29:a5: c4:d0:a2:5b:e6:6e:fb:c5:f2:bc:87:6e:6b:fe:aa:07:b4:a7: 77:c7:f6:d3:a0:ef:c4:27:07:b3:b9:d0:52:0b:58:2b:97:f6: cc:96:a4:1f:ff:a7:41:47:0f:95:e4:50:7e:af:7c:e3:23:31: c2:d3:2b:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEP0qgf8Rb/we3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NzQ1Yzc0MGUtMmQ4Ni00ZTc5LWJkOTEtMGZiMjgwOTIxM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAvujBF8i+4Wla9G8Kwecw+JvVC1uvwKQjJS cQN5ZZeA+b4JbNbMG7KJz9UA8EJWwvow1U2bOoxNivYjJ5cAoJUMnPS869C9PYHc HJTImjsWhQZPuJx8ZAsg2rFAkT1Rxu5KTHB58MACkR2rMqrMZ/foL+lUXNX1R4YU Ip9XvXXXcoXBOfNW/Jd/YhvK+QY8bvAV+w1k52EeeCyjZ1+oOalZtqQzNUvJxSnE fhqpnrTgbHJnUDQmsg90e9gxhSHMLCfDTPrMrEP9QgqEiVb28aG1hd0gm6zdZkT0 Zn1+Abbc1sDjG2fMUlLJ46ML4/OATFmNzcg6cdZUg/0Tebx82wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBIdQROiD7noFFhiXHvSriAtYi4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY0MTYxYjgtZDUxOC0z MzYyLWE1MTctZThhMWIzYzg1ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGOfA8NKuT5PbZOy1o5VRAzQA6A3vOMAp4tA9vx+wP5EoEJy23WV Nm7Mj2vqdr/CYpEAPMIxu4AuwKs/FNsDCKfp8nUOXc86VAmkWdelYPF4pgk4cR7h ns5emtcfiSR4Zb7sBWKklUl9UJaDIA4nr0bhEQnGHek0nod9FFimj2vWWF4L63Ze ghHqRAC5WzWl/I0CySd5mxfSEH5fiKRSH0xzayBStCUqhGmT5B0i6J03BB48LtXZ Fzphhv1AQYg4FTvMQaoppcTQolvmbvvF8ryHbmv+qge0p3fH9tOg78QnB7O50FIL WCuX9syWpB//p0FHD5XkUH6vfOMjMcLTK0U= -----END CERTIFICATE-----Generated at Fri Mar 14 10:25:06 2025 by rpki-client