$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0b3b8d4-72d5-3826-ab29-692facf46a8d.roa File: e0b3b8d4-72d5-3826-ab29-692facf46a8d.roa (raw, json) Hash identifier: D0x178NmQAMMIMf85FGs4FdTCltQpO9/jkjOcbSFFpM= Subject key identifier: D2:9D:9B:4A:0E:91:FE:67:5A:94:B4:05:45:E8:CC:8F:81:BD:53:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FD729533CD79E75374C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0b3b8d4-72d5-3826-ab29-692facf46a8d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fd:72:95:33:cd:79:e7:53:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=d413e4ec-967a-4fd1-80fb-3616504add16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:0d:75:6d:78:6a:10:9b:e2:73:c9:9e:66: 7d:84:5b:39:c8:17:32:7b:02:90:98:67:a8:4c:97: 67:a3:f5:57:9c:24:fc:7e:63:ff:e3:97:2e:01:bf: fe:64:12:12:ca:72:88:46:4d:c4:19:c0:c1:a1:c4: 75:84:72:61:30:2c:7b:c9:44:61:d3:0e:b4:0a:79: 4f:9f:9c:c3:dc:ab:ec:95:b6:04:13:be:d6:7b:7b: 96:a6:cf:cd:60:98:e9:11:3b:ed:a6:e1:92:b4:97: fe:23:97:82:9a:6c:a3:51:cb:94:d0:b9:14:a1:dc: 7b:35:2c:2e:42:98:5a:ea:25:5c:73:a1:71:87:41: 6b:66:f7:69:83:4a:cb:c2:d9:5c:e2:47:01:57:44: d1:49:11:af:f1:c2:90:b2:51:f3:ea:4a:bd:9f:7f: ae:f4:f2:14:92:4e:f5:a8:c8:d5:ef:ca:b2:4e:4a: 6a:31:26:96:95:cb:62:7e:45:69:a6:61:98:99:2e: 6e:31:93:71:15:27:96:11:79:44:5f:89:83:d7:60: 06:1f:02:60:3a:0a:5d:3a:bb:e9:63:1e:7a:f1:e2: 34:07:3c:e5:c9:b2:6e:84:0f:b6:21:48:95:af:7a: b3:b3:96:8e:d5:dd:55:0e:b0:06:2e:cb:c7:5d:df: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9D:9B:4A:0E:91:FE:67:5A:94:B4:05:45:E8:CC:8F:81:BD:53:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0b3b8d4-72d5-3826-ab29-692facf46a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:52:19:57:9c:39:68:02:58:35:e3:3b:2f:f2:87:18:7c:0a: f8:58:ec:7b:d0:77:e4:9e:ef:47:11:75:fc:f5:21:3b:67:e8: 9c:f3:09:5d:66:a9:b3:4d:0c:d3:bd:82:ca:55:f4:9c:3c:c4: 82:93:35:21:cd:9d:8c:a3:c7:c2:cc:47:4d:86:5c:40:c9:c5: 61:0c:28:f6:8c:75:df:f4:9b:af:c4:16:40:2a:e2:59:4b:f3: 55:11:26:da:49:4b:47:bd:4c:29:20:73:dc:fa:03:7a:7e:81: 8c:bc:40:a9:03:80:69:43:a9:29:f7:b7:03:80:83:85:e6:f9: 9f:c0:dd:3c:8a:c8:57:df:7e:56:1c:11:b2:73:4c:70:f8:f3: ff:3b:29:3f:93:8a:a6:b7:a7:de:72:31:b4:4e:a1:9e:28:c8: fb:a5:c6:91:7b:59:d6:fd:2f:af:96:95:a8:95:e3:a3:58:9d: 19:48:36:89:2a:48:e7:29:82:d1:c3:f0:4b:5b:53:aa:4c:8c: a8:3d:29:f3:96:ee:2a:d7:b5:ae:5f:f1:84:4f:75:7c:8c:f0: bc:dc:a2:11:4a:2a:8d:95:7b:d2:e1:dd:d7:ff:ab:16:b9:8f: da:8b:88:ff:58:cf:19:97:60:ed:ed:61:90:3b:e6:a5:d3:32: 8b:c7:14:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEP1ylTPNeedTdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDQxM2U0ZWMtOTY3YS00ZmQxLTgwZmItMzYxNjUwNGFkZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqigNdW14ahCb4nPJnmZ9hFs5yBcyewKQmGeo TJdno/VXnCT8fmP/45cuAb/+ZBISynKIRk3EGcDBocR1hHJhMCx7yURh0w60CnlP n5zD3KvslbYEE77We3uWps/NYJjpETvtpuGStJf+I5eCmmyjUcuU0LkUodx7NSwu Qpha6iVcc6Fxh0FrZvdpg0rLwtlc4kcBV0TRSRGv8cKQslHz6kq9n3+u9PIUkk71 qMjV78qyTkpqMSaWlctifkVppmGYmS5uMZNxFSeWEXlEX4mD12AGHwJgOgpdOrvp Yx568eI0BzzlybJuhA+2IUiVr3qzs5aO1d1VDrAGLsvHXd+MqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNKdm0oOkf5nWpS0BUXozI+BvVPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTBiM2I4ZDQtNzJkNS0z ODI2LWFiMjktNjkyZmFjZjQ2YThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1SGVecOWgCWDXjOy/yhxh8CvhY7HvQd+Se70cRdfz1ITtn6Jzz CV1mqbNNDNO9gspV9Jw8xIKTNSHNnYyjx8LMR02GXEDJxWEMKPaMdd/0m6/EFkAq 4llL81URJtpJS0e9TCkgc9z6A3p+gYy8QKkDgGlDqSn3twOAg4Xm+Z/A3TyKyFff flYcEbJzTHD48/87KT+Tiqa3p95yMbROoZ4oyPulxpF7Wdb9L6+WlaiV46NYnRlI NokqSOcpgtHD8EtbU6pMjKg9KfOW7irXta5f8YRPdXyM8LzcohFKKo2Ve9Lh3df/ qxa5j9qLiP9YzxmXYO3tYZA75qXTMovHFEo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:29 2025 by rpki-client