$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa File: b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa (raw, json) Hash identifier: ATsOZ3FgDkB0C1sRR6Rf7yD1a0z9qOQBBgLAERRtvJU= Subject key identifier: 34:93:7A:C8:18:A6:46:00:7D:85:EF:E7:74:77:09:65:3C:08:C2:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FF5A80829916624BC800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:3900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ff:5a:80:82:99:16:62:4b:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=86a65f01-d953-4931-a6d2-4eca22e49527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:1d:5f:14:c7:30:01:31:a9:3a:f5:19:23: 48:9f:10:76:b5:04:01:05:71:42:28:31:48:d4:ce: 13:71:7f:0e:68:c2:ed:8e:34:50:c5:9b:f9:e6:ca: 4f:ad:ae:8a:6e:17:d8:77:c5:00:76:02:4d:04:75: c6:02:6e:d9:e5:aa:aa:cc:69:bb:2e:72:fb:6e:66: c2:51:24:69:06:ec:bc:26:dc:9d:e3:29:e0:74:52: dd:5c:49:1a:37:1a:32:b2:5c:b2:d4:82:26:e9:0b: ee:76:7d:a2:7d:69:18:09:fb:a3:f9:71:f6:59:73: 7e:e4:25:87:5e:e6:d9:2d:d0:84:87:a0:6f:c8:04: ea:4b:52:77:d5:34:d3:cb:f9:64:6b:5c:14:34:0b: be:11:93:4b:7a:a4:04:dd:6a:37:d6:06:60:ed:24: fe:bf:4c:ac:c8:57:75:64:03:f3:1e:e8:38:e1:4e: 69:b3:51:ba:04:5a:8b:30:9b:36:f6:08:37:e9:c7: b8:eb:ec:c8:8b:b3:87:29:ee:54:b4:bd:4c:0b:a7: 7e:bd:f5:19:43:eb:55:f8:a0:1f:40:1b:dc:d7:29: 17:9d:e6:da:4c:10:ee:c6:b4:f0:cf:17:29:2c:4e: 5d:f7:87:62:5a:9e:a9:05:9e:8b:e0:65:7e:c3:2f: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:93:7A:C8:18:A6:46:00:7D:85:EF:E7:74:77:09:65:3C:08:C2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:52:51:19:e2:2f:51:d2:5f:59:9e:cf:43:02:d7:f1:4a:3c: 41:27:6c:33:8a:f0:43:fa:c6:87:c6:93:53:0b:16:bc:a1:21: f8:b4:9d:87:a5:a2:cf:7a:34:38:b9:04:12:66:d1:e8:b4:af: 40:c2:32:60:61:95:59:31:c8:ed:ee:47:de:36:1a:eb:45:42: 87:aa:cb:5b:d3:1d:82:dc:2f:88:3d:17:23:7d:0f:67:ff:31: 83:0e:4d:9f:77:d3:fd:86:56:7e:8f:96:25:8c:9a:e4:48:f3: 60:46:fa:ed:d3:63:32:b4:6c:13:e6:9c:4d:88:b5:0f:00:1d: 0c:a2:be:8b:ec:4c:28:0f:cd:cb:63:52:cc:32:d6:4d:ba:45: 6d:5d:d2:8f:c0:15:c5:fa:e5:08:1f:90:7a:e1:94:8e:3a:0a: f3:04:92:97:08:1f:ba:dc:04:7b:41:cf:c2:d4:20:75:de:20: d2:3c:77:19:e4:26:83:57:84:52:0a:34:46:3a:87:7d:e8:48: 76:9c:75:41:34:36:42:cc:4d:07:b2:7b:de:fa:ac:8c:3f:11: 6d:01:08:05:d9:f6:da:10:03:e4:d9:0f:9a:82:42:b7:f5:de: 19:8e:5c:df:4e:b5:2e:18:49:cc:74:44:6f:de:d6:3e:47:4f: e1:25:c3:ed -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSEP9agIKZFmJLyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODZhNjVmMDEtZDk1My00OTMxLWE2ZDItNGVjYTIyZTQ5NTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgcdXxTHMAExqTr1GSNInxB2tQQBBXFCKDFI 1M4TcX8OaMLtjjRQxZv55spPra6KbhfYd8UAdgJNBHXGAm7Z5aqqzGm7LnL7bmbC USRpBuy8Jtyd4yngdFLdXEkaNxoyslyy1IIm6Qvudn2ifWkYCfuj+XH2WXN+5CWH XubZLdCEh6BvyATqS1J31TTTy/lka1wUNAu+EZNLeqQE3Wo31gZg7ST+v0ysyFd1 ZAPzHug44U5ps1G6BFqLMJs29gg36ce46+zIi7OHKe5UtL1MC6d+vfUZQ+tV+KAf QBvc1ykXnebaTBDuxrTwzxcpLE5d94diWp6pBZ6L4GV+wy/ZtwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDSTesgYpkYAfYXv53R3CWU8CMLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjlkYWFkNGEtMjUzNi0z ZDFlLWI2ZjMtN2UyNWQyOGNiODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeVJRGeIvUdJfWZ7PQwLX8Uo8QSdsM4rwQ/rGh8aTUwsWvKEh+LSd h6Wiz3o0OLkEEmbR6LSvQMIyYGGVWTHI7e5H3jYa60VCh6rLW9MdgtwviD0XI30P Z/8xgw5Nn3fT/YZWfo+WJYya5EjzYEb67dNjMrRsE+acTYi1DwAdDKK+i+xMKA/N y2NSzDLWTbpFbV3Sj8AVxfrlCB+QeuGUjjoK8wSSlwgfutwEe0HPwtQgdd4g0jx3 GeQmg1eEUgo0RjqHfehIdpx1QTQ2QsxNB7J73vqsjD8RbQEIBdn22hAD5NkPmoJC t/XeGY5c3061LhhJzHREb97WPkdP4SXD7Q== -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:37 2025 by rpki-client