$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa File: dfae6790-4364-3d1e-9409-6da10de1af43.roa (raw, json) Hash identifier: Q1JgDoRHsURsHgnHFy8XQ1TuIcNWuCwcHrHdmZWoFOU= Subject key identifier: D3:A7:B5:6E:C0:6C:3D:99:FF:97:7E:A4:DD:1F:15:B7:29:6C:AD:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FE986328B70B6CC30D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:1c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fe:98:63:28:b7:0b:6c:c3:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=28c36421-32b4-4c6c-8e74-4e7690a44a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:e3:ac:c2:dc:be:8b:30:5d:6e:1f:53:70: 49:a6:14:51:48:8c:2b:d4:eb:03:20:43:bc:12:b7: 79:97:c6:e3:b1:ce:48:be:88:99:ba:4f:8d:4e:5a: bb:bc:dc:ff:35:b9:87:78:30:51:79:be:01:0b:ca: bb:b5:aa:8e:d6:f7:40:56:07:0e:01:5e:5b:7c:29: a4:d0:3b:9c:a1:15:ae:a7:85:57:f6:c2:38:5d:56: b5:42:08:e8:5b:01:4c:7c:1f:c4:80:23:d2:d0:82: 5b:d7:b2:c4:ed:3b:94:6f:0b:8d:a1:14:b9:7f:fa: bc:de:4d:45:38:d7:d6:9c:0e:ad:3d:8f:a5:70:48: cf:e9:fb:80:84:32:5c:75:1c:4a:9a:76:f6:35:8f: bd:29:c3:95:72:1e:ce:92:46:6c:97:e2:9e:9d:aa: 92:cf:1e:c3:d2:93:72:f8:05:05:9d:36:a1:18:13: 6e:75:55:c9:d4:25:6a:ce:6d:48:a8:f3:f6:60:96: bf:d1:a5:4c:57:13:49:dc:a9:8e:0f:71:2f:37:15: 65:23:5b:39:a2:8b:32:d9:a6:93:e2:eb:8f:27:02: ae:ec:86:32:80:2d:85:e6:bd:04:75:39:bc:2d:a9: cd:45:bf:d2:34:a6:8f:a5:11:3c:04:72:02:0f:df: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A7:B5:6E:C0:6C:3D:99:FF:97:7E:A4:DD:1F:15:B7:29:6C:AD:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e5:bf:ba:ac:d1:c4:22:68:49:0c:69:6a:9b:67:d2:b0:e6: f9:d0:ae:ed:c8:7f:09:8f:57:85:42:ea:a0:af:6d:f7:7c:9d: 37:d2:47:ef:b0:88:43:2d:e5:44:f1:b5:bd:08:78:a6:30:f4: 25:1f:79:35:f0:75:5b:5b:6e:1b:24:28:1c:fc:76:0f:52:c9: c6:62:b6:3f:19:4b:5f:83:6a:94:bf:92:5c:e5:57:47:aa:b0: d9:b1:ee:5c:bd:fe:91:0b:08:11:ba:b8:9b:15:3f:86:ac:23: f4:4b:1f:28:13:64:c4:a6:f5:11:98:a7:23:1b:8f:f5:91:93: e8:c7:ee:fc:be:4b:d7:f4:3d:97:80:74:dd:62:f6:48:76:fb: c5:21:f5:a5:c4:ca:52:f0:84:e5:25:f9:d9:b3:10:64:63:bc: 76:34:4e:ac:45:9d:29:d2:13:81:b6:79:81:9e:60:4e:1a:c5: c3:b0:f8:ac:1e:2c:b8:70:37:31:2e:e0:de:fa:9b:8f:06:73: da:52:76:d0:7e:6f:16:12:48:d3:df:9d:0f:13:0e:7c:2a:8c: a5:90:80:d0:24:12:b6:8b:0f:d5:9a:39:15:04:df:7a:f3:0d: 17:f3:9e:01:03:8b:3f:6d:c7:8d:c3:f6:55:f0:ab:9b:08:f3: 91:36:d9:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSEP6YYyi3C2zDDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjhjMzY0MjEtMzJiNC00YzZjLThlNzQtNGU3NjkwYTQ0YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLnjrMLcvoswXW4fU3BJphRRSIwr1OsDIEO8 Erd5l8bjsc5IvoiZuk+NTlq7vNz/NbmHeDBReb4BC8q7taqO1vdAVgcOAV5bfCmk 0DucoRWup4VX9sI4XVa1QgjoWwFMfB/EgCPS0IJb17LE7TuUbwuNoRS5f/q83k1F ONfWnA6tPY+lcEjP6fuAhDJcdRxKmnb2NY+9KcOVch7OkkZsl+KenaqSzx7D0pNy +AUFnTahGBNudVXJ1CVqzm1IqPP2YJa/0aVMVxNJ3KmOD3EvNxVlI1s5oosy2aaT 4uuPJwKu7IYygC2F5r0EdTm8LanNRb/SNKaPpRE8BHICD98qJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNOntW7AbD2Z/5d+pN0fFbcpbK0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZhZTY3OTAtNDM2NC0z ZDFlLTk0MDktNmRhMTBkZTFhZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHeW/uqzRxCJoSQxpaptn0rDm+dCu7ch/CY9XhULqoK9t93ydN9JH 77CIQy3lRPG1vQh4pjD0JR95NfB1W1tuGyQoHPx2D1LJxmK2PxlLX4NqlL+SXOVX R6qw2bHuXL3+kQsIEbq4mxU/hqwj9EsfKBNkxKb1EZinIxuP9ZGT6Mfu/L5L1/Q9 l4B03WL2SHb7xSH1pcTKUvCE5SX52bMQZGO8djROrEWdKdITgbZ5gZ5gThrFw7D4 rB4suHA3MS7g3vqbjwZz2lJ20H5vFhJI09+dDxMOfCqMpZCA0CQStosP1Zo5FQTf evMNF/OeAQOLP23HjcP2VfCrmwjzkTbZoQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:32 2025 by rpki-client