$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa File: e81ede32-402d-39a2-ac55-2465ea2716a5.roa (raw, json) Hash identifier: 40AXZXUzxReWa9Vs25Q7swK/z57vdUe629xeLbTs3+I= Subject key identifier: 22:9C:45:45:DF:3A:A2:85:82:4A:0B:13:84:7E:A2:3F:7E:05:D1:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112A346C674BDA888EE040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2a:34:6c:67:4b:da:88:8e:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=f4a438ec-00c9-4257-8f65-24b52c7eee0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:09:f9:40:3a:43:61:83:cd:83:a7:22:82:07: f5:42:d9:5e:f0:e2:0a:72:19:a0:aa:3a:be:f8:2d: f4:29:0e:52:47:d4:01:a4:07:38:05:91:bf:0a:f3: d5:a3:a7:54:f5:48:fc:41:93:1f:9c:89:e9:75:fc: e1:6b:35:d7:89:8f:af:9f:69:bb:f3:74:8c:13:6c: 6f:22:3f:19:76:a6:58:19:dd:50:d1:20:72:9e:ab: ae:20:3b:45:08:f6:26:b6:ef:77:b7:0b:3c:24:fd: 5f:24:3a:d6:38:4c:34:51:e2:9f:8f:57:be:4a:9c: f5:f6:ec:be:07:a8:42:ce:ec:26:74:5e:27:e4:af: 44:eb:66:f4:3e:33:62:15:31:a0:15:e5:d7:8c:74: cd:1f:9c:98:3c:72:05:e9:ed:e8:f6:ca:a6:2e:d9: e5:f2:96:a9:8b:ce:be:a2:a6:e0:d6:03:e0:be:93: 5c:c9:ba:da:27:42:9a:79:4c:03:d1:5e:a1:63:f2: a6:40:7f:3e:76:cb:3f:0b:14:9e:2d:b1:c1:59:91: 7f:c7:e1:1c:71:a5:97:76:44:58:7a:5c:49:36:49: 38:0b:63:4f:6a:58:de:a3:a8:e0:08:7f:58:86:e9: 7a:e9:cf:9e:1f:fe:36:cd:7a:ca:92:9d:db:11:30: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9C:45:45:DF:3A:A2:85:82:4A:0B:13:84:7E:A2:3F:7E:05:D1:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e81ede32-402d-39a2-ac55-2465ea2716a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d5:82:07:45:94:9a:a1:3e:25:84:1a:ab:1e:1d:fa:c9:7d: e9:7b:86:9d:41:63:91:76:56:ab:cf:30:cd:20:d6:2a:bb:47: eb:58:1d:99:1f:46:06:f1:4f:f7:02:b9:f5:d4:fc:57:06:80: 73:0b:30:03:3d:bd:6a:de:35:cb:3a:c2:37:d7:85:56:79:6c: 61:51:f3:47:e8:97:06:42:51:3b:1b:6a:59:66:51:75:4b:8e: 0c:0e:dc:c5:27:b5:1a:09:64:83:71:16:3c:eb:44:f0:60:79: 67:ab:cb:2e:5f:75:2e:c0:c0:e5:77:aa:0e:97:59:85:a5:e1: 6f:1f:a3:7c:1f:d3:96:b9:eb:aa:88:56:0b:19:de:12:18:ed: 69:86:f4:1a:70:d3:55:66:95:86:68:8d:20:d2:8a:5b:6c:62: 0c:ef:76:aa:14:3f:60:1c:28:07:73:29:c8:39:32:9d:dd:c5: 41:08:a4:ff:a2:1b:ec:0e:51:4b:be:8e:40:cd:42:3f:7c:6b: ae:35:f6:62:04:10:b0:19:1b:92:5c:6b:65:e7:4b:cd:1d:1b: ec:da:9a:41:cc:18:03:8e:2c:b4:55:b6:2c:9c:8e:35:6e:66: ed:21:39:2e:49:e2:64:00:de:39:8e:72:d8:70:8d:7d:d3:3e: 8b:99:97:21 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSESo0bGdL2oiO4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjRhNDM4ZWMtMDBjOS00MjU3LThmNjUtMjRiNTJjN2VlZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAn5QDpDYYPNg6ciggf1Qtle8OIKchmgqjq+ +C30KQ5SR9QBpAc4BZG/CvPVo6dU9Uj8QZMfnInpdfzhazXXiY+vn2m783SME2xv Ij8ZdqZYGd1Q0SBynquuIDtFCPYmtu93tws8JP1fJDrWOEw0UeKfj1e+Spz19uy+ B6hCzuwmdF4n5K9E62b0PjNiFTGgFeXXjHTNH5yYPHIF6e3o9sqmLtnl8papi86+ oqbg1gPgvpNcybraJ0KaeUwD0V6hY/KmQH8+dss/CxSeLbHBWZF/x+EccaWXdkRY elxJNkk4C2NPaljeo6jgCH9Yhul66c+eH/42zXrKkp3bETDcUQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCKcRUXfOqKFgkoLE4R+oj9+BdF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgxZWRlMzItNDAyZC0z OWEyLWFjNTUtMjQ2NWVhMjcxNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACtWCB0WUmqE+JYQaqx4d+sl96XuGnUFjkXZWq88wzSDWKrtH61gd mR9GBvFP9wK59dT8VwaAcwswAz29at41yzrCN9eFVnlsYVHzR+iXBkJROxtqWWZR dUuODA7cxSe1Gglkg3EWPOtE8GB5Z6vLLl91LsDA5XeqDpdZhaXhbx+jfB/Tlrnr qohWCxneEhjtaYb0GnDTVWaVhmiNINKKW2xiDO92qhQ/YBwoB3MpyDkynd3FQQik /6Ib7A5RS76OQM1CP3xrrjX2YgQQsBkbklxrZedLzR0b7NqaQcwYA44stFW2LJyO NW5m7SE5LkniZADeOY5y2HCNfdM+i5mXIQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:48 2025 by rpki-client