$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa File: c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa (raw, json) Hash identifier: k1CJlHw6O4dYC0WumTQizX6PSLi1vhDgVcnZeI6KfA8= Subject key identifier: 77:FF:46:5E:2B:37:98:3A:15:51:78:24:8F:D8:4F:1E:F4:DF:3B:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FF20FCFE271CBB8026FC Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ff:20:fc:fe:27:1c:bb:80:26:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=81bafe6c-5db4-49c3-b01e-1ed85b676f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:ea:1a:b9:81:f5:f7:d7:b8:4b:d9:9f:d6: 01:4a:6c:26:00:8a:3d:50:3e:5e:b9:59:e8:4d:fb: b2:2b:5a:68:c7:da:c4:0d:de:c6:a6:9f:14:24:21: 33:1d:9b:1f:ec:68:a4:5c:5d:d1:c2:da:a9:95:81: 1f:bb:ad:09:7f:bf:37:54:46:16:7b:23:b1:ef:09: d9:d2:61:52:d8:26:d4:e7:0e:77:22:3a:76:35:17: 6b:37:30:e8:47:b0:44:1a:22:aa:0b:69:7b:82:4f: 63:a2:21:93:67:57:d1:11:cd:28:c1:16:37:ac:01: 97:e2:21:d5:84:1a:ad:06:75:5a:f5:69:fd:e0:a5: ee:29:92:88:4e:ba:a7:80:49:f3:fa:ca:63:69:91: 99:9b:d5:eb:67:dd:12:1c:14:e3:56:dd:04:5e:e6: 77:69:3b:ed:49:6c:d2:d1:48:01:00:20:bc:9c:30: 0f:ae:98:cc:aa:b2:57:86:04:15:56:b4:3b:4d:b9: d3:fa:5d:b3:df:38:d1:69:ed:cf:e9:8b:02:fc:51: fa:4c:f7:52:3d:3a:5b:bc:8c:77:b9:03:aa:d0:2d: d6:0c:85:34:e7:2a:c3:34:a7:f5:df:92:26:90:f9: 5d:85:d8:ca:93:cb:a7:c5:6c:7e:90:b4:51:cc:48: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FF:46:5E:2B:37:98:3A:15:51:78:24:8F:D8:4F:1E:F4:DF:3B:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4df1144-c40f-3438-a1cb-b2f414a5ff5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:cf:3c:a3:bf:98:c2:16:81:5d:6d:25:d7:8a:10:ff:e6:06: 65:a7:11:1f:72:fe:68:b7:99:b6:77:23:f6:0c:f9:a5:1a:1a: 29:e5:57:43:98:a6:36:c1:5b:f1:42:8c:3f:ba:bd:fd:e4:8e: ff:18:cb:b9:8d:7b:3e:d4:a7:9e:f8:01:45:9a:8d:6f:cb:02: e2:3f:8f:d9:5c:a0:4f:ff:5c:c4:e9:6c:47:02:5a:c7:83:75: 9a:4c:9c:a3:dc:04:d6:2b:64:67:74:63:82:89:c3:a2:8a:38: f2:c6:2c:0d:ff:3f:07:87:c3:a6:9b:07:76:08:b5:7e:37:22: 13:5a:85:ec:72:40:5f:70:52:95:c0:11:9f:34:f9:10:7d:3b: 5a:a6:73:d8:cd:15:a5:c3:ff:18:17:bd:7b:b8:5b:2b:74:de: 30:33:f7:64:9a:48:6f:ac:f9:c7:45:44:7f:b6:08:5d:2f:42: 3e:51:5e:df:4e:70:e0:59:2a:f1:80:51:7e:14:a4:f0:4b:2d: 2f:33:d7:fe:6d:59:8f:c0:f9:af:ad:23:23:84:de:28:80:78: 45:cd:fe:40:51:1f:b8:04:d2:1a:04:02:6e:cb:76:b6:59:0a: 0a:2c:32:7f:9f:0c:25:75:2b:67:8a:dc:08:11:96:03:9e:82: ec:10:de:59 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSEP8g/P4nHLuAJvwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODFiYWZlNmMtNWRiNC00OWMzLWIwMWUtMWVkODViNjc2ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY3qGrmB9ffXuEvZn9YBSmwmAIo9UD5euVno TfuyK1pox9rEDd7Gpp8UJCEzHZsf7GikXF3RwtqplYEfu60Jf783VEYWeyOx7wnZ 0mFS2CbU5w53Ijp2NRdrNzDoR7BEGiKqC2l7gk9joiGTZ1fREc0owRY3rAGX4iHV hBqtBnVa9Wn94KXuKZKITrqngEnz+spjaZGZm9XrZ90SHBTjVt0EXuZ3aTvtSWzS 0UgBACC8nDAPrpjMqrJXhgQVVrQ7TbnT+l2z3zjRae3P6YsC/FH6TPdSPTpbvIx3 uQOq0C3WDIU05yrDNKf135ImkPldhdjKk8unxWx+kLRRzEgLmQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHf/Rl4rN5g6FVF4JI/YTx703zv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzRkZjExNDQtYzQwZi0z NDM4LWExY2ItYjJmNDE0YTVmZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAC0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiM88o7+YwhaBXW0l14oQ/+YGZacRH3L+aLeZtncj9gz5pRoaKeVX Q5imNsFb8UKMP7q9/eSO/xjLuY17PtSnnvgBRZqNb8sC4j+P2VygT/9cxOlsRwJa x4N1mkyco9wE1itkZ3RjgonDooo48sYsDf8/B4fDppsHdgi1fjciE1qF7HJAX3BS lcARnzT5EH07WqZz2M0VpcP/GBe9e7hbK3TeMDP3ZJpIb6z5x0VEf7YIXS9CPlFe 305w4Fkq8YBRfhSk8EstLzPX/m1Zj8D5r60jI4TeKIB4Rc3+QFEfuATSGgQCbst2 tlkKCiwyf58MJXUrZ4rcCBGWA56C7BDeWQ== -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:39 2025 by rpki-client