$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be8324fe-af6a-321e-a44f-1e817df24027.roa File: be8324fe-af6a-321e-a44f-1e817df24027.roa (raw, json) Hash identifier: fls59LmHNFwxzc8FsODZIKNHUOJFyWOWucZIt7qLnKM= Subject key identifier: 7A:DA:5A:99:6B:BC:99:02:81:83:17:E5:23:EE:16:3F:59:DD:52:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112B2FFB525B35D364D380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be8324fe-af6a-321e-a44f-1e817df24027.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2b:2f:fb:52:5b:35:d3:64:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=65380df1-b97e-42dc-95ac-8d35865c06f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:34:e6:e3:20:0a:39:7c:0f:66:3a:d3:85:86: e6:d6:86:32:58:2a:d3:08:db:6a:7a:62:64:1e:96: a5:1e:c8:54:c9:ea:da:38:10:c4:88:51:da:83:93: 19:e9:9c:3f:24:98:e6:e8:9a:8c:68:00:cb:29:9e: b8:d4:58:3f:52:4e:11:ac:f2:b6:d1:05:53:d1:66: 91:fd:36:78:38:f4:9a:74:01:4f:34:f1:92:e0:cb: 61:a5:c5:fe:e0:cf:62:aa:e8:13:77:c2:85:66:86: 0a:30:e5:4d:c1:9f:5a:fe:ab:6e:5c:2a:79:02:75: bd:e4:1b:49:91:33:f9:58:18:f4:05:7e:30:8f:b8: e6:ab:b1:d2:9f:0e:16:3d:c6:b0:2f:ea:e6:af:32: 95:1f:d8:0d:62:45:e9:46:6b:a1:a6:08:83:f8:ff: 75:9f:66:d6:f4:4f:12:87:e2:92:b0:eb:84:db:63: 6b:36:5c:1e:3e:14:25:25:55:d7:58:4b:e1:12:0e: 7a:42:15:88:ea:93:2d:f8:d9:ab:5c:48:51:fe:c0: db:8c:75:74:f5:ef:4e:08:b3:f4:1f:bc:fa:61:9d: 76:d2:b3:19:ec:49:78:d3:cc:5d:fe:7f:29:96:a3: 91:0d:09:51:b3:53:8d:da:ad:1e:60:bd:a7:18:0b: c4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DA:5A:99:6B:BC:99:02:81:83:17:E5:23:EE:16:3F:59:DD:52:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/be8324fe-af6a-321e-a44f-1e817df24027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d9:fb:10:e0:76:d4:64:22:14:aa:7b:d9:12:bf:1e:43:21: 8f:ab:a8:40:dc:3d:83:b3:7b:b6:ab:8e:35:36:30:df:24:2b: 42:f7:b1:22:09:30:85:96:88:96:05:fa:e3:6e:fe:fc:8e:fa: 47:ff:15:ce:c7:64:d6:be:2e:6d:92:74:52:f5:e5:42:fe:ce: 40:03:cc:b9:af:77:4a:a2:e9:0f:22:09:8b:35:df:2b:c3:94: 50:a6:49:ab:ca:02:22:e3:a1:a6:08:84:c6:95:2c:90:d6:28: 67:e5:2c:ce:53:b3:a4:03:c9:86:40:9c:9e:82:35:ab:f3:ea: a8:21:78:34:aa:d3:6a:b9:38:fc:8d:13:b5:a3:eb:d2:3b:eb: 5f:3d:68:f5:49:c5:33:64:a9:35:77:b0:e1:f9:ff:a6:80:eb: a8:4f:c0:11:bd:dd:8f:1f:eb:39:62:d2:72:30:f7:13:e0:86: 52:3f:57:2e:19:42:4b:8a:44:3e:9e:d7:05:66:f8:df:de:dd: bf:5d:72:0a:5c:1f:ab:4a:be:3f:fe:fb:86:b9:e1:43:a1:05: b3:21:e4:13:57:18:95:a5:bc:bd:fe:ab:8c:f9:1e:04:0c:47: b6:8c:15:19:13:70:af:dc:b3:d6:3e:72:46:ed:88:a6:fe:4d: 26:2c:59:84 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSESsv+1JbNdNk04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjUzODBkZjEtYjk3ZS00MmRjLTk1YWMtOGQzNTg2NWMwNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTTm4yAKOXwPZjrThYbm1oYyWCrTCNtqemJk HpalHshUyeraOBDEiFHag5MZ6Zw/JJjm6JqMaADLKZ641Fg/Uk4RrPK20QVT0WaR /TZ4OPSadAFPNPGS4MthpcX+4M9iqugTd8KFZoYKMOVNwZ9a/qtuXCp5AnW95BtJ kTP5WBj0BX4wj7jmq7HSnw4WPcawL+rmrzKVH9gNYkXpRmuhpgiD+P91n2bW9E8S h+KSsOuE22NrNlwePhQlJVXXWEvhEg56QhWI6pMt+NmrXEhR/sDbjHV09e9OCLP0 H7z6YZ120rMZ7El408xd/n8plqORDQlRs1ON2q0eYL2nGAvElwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHraWplrvJkCgYMX5SPuFj9Z3VKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmU4MzI0ZmUtYWY2YS0z MjFlLWE0NGYtMWU4MTdkZjI0MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhNn7EOB21GQiFKp72RK/HkMhj6uoQNw9g7N7tquONTYw3yQrQvex IgkwhZaIlgX6427+/I76R/8Vzsdk1r4ubZJ0UvXlQv7OQAPMua93SqLpDyIJizXf K8OUUKZJq8oCIuOhpgiExpUskNYoZ+UszlOzpAPJhkCcnoI1q/PqqCF4NKrTark4 /I0TtaPr0jvrXz1o9UnFM2SpNXew4fn/poDrqE/AEb3djx/rOWLScjD3E+CGUj9X LhlCS4pEPp7XBWb4397dv11yClwfq0q+P/77hrnhQ6EFsyHkE1cYlaW8vf6rjPke BAxHtowVGRNwr9yz1j5yRu2Ipv5NJixZhA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:52 2025 by rpki-client