$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa File: e872bf65-3c44-37d5-974f-d352d3753c1e.roa (raw, json) Hash identifier: GKijbSRM/bQOlhbjs6FzODiD+fG8EmctZUlG6ETeyN8= Subject key identifier: 3F:4B:64:AD:6F:3E:DF:29:F7:D3:81:12:67:61:DF:1F:DA:98:8A:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FF125F6B895C71697800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ff:12:5f:6b:89:5c:71:69:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=45ea3e4d-6541-47eb-896a-9c1540b9685c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:e8:b3:41:36:2e:24:ed:b9:b7:2c:bc:dd: 46:f5:e7:81:4b:98:01:08:08:c7:88:a9:65:5c:93: ad:b0:23:ab:51:b8:bf:5b:1c:74:de:f5:4a:38:16: c6:0e:1b:e0:f9:50:0c:ee:90:63:14:24:d4:e4:69: 21:95:f5:98:20:be:ff:d8:60:ef:e3:c1:7f:e9:72: 2e:ad:ad:6c:2c:6b:10:c0:cb:d3:87:45:32:50:49: 0c:50:2d:99:75:b3:68:dd:12:7f:e7:0d:f0:ca:e1: 01:5c:10:20:ee:7c:76:f4:97:d8:f8:a9:36:7d:9f: 3b:d0:9a:57:7a:cc:a8:1e:e1:55:40:ac:56:25:7f: ff:22:4a:c4:5c:88:03:cb:06:24:5d:a7:3f:8e:d1: 9b:93:04:c1:74:78:70:b1:f9:06:56:7c:49:a4:f7: 65:18:a7:48:6c:ca:c5:77:e6:ee:f7:53:ca:41:31: fe:b2:d2:6f:11:6d:ac:71:49:56:dc:5d:b8:67:86: 11:96:0f:1f:04:ca:03:72:67:1d:8b:2a:71:e1:71: 9e:41:d2:c3:95:ae:15:b7:ca:46:5b:7b:57:d9:94: 5b:87:30:2a:b4:95:10:fe:41:c6:1d:32:d8:ac:2e: a5:4c:e3:94:95:42:20:bf:95:37:33:ad:39:3a:e0: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4B:64:AD:6F:3E:DF:29:F7:D3:81:12:67:61:DF:1F:DA:98:8A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e872bf65-3c44-37d5-974f-d352d3753c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ff:42:e7:56:83:72:c2:ac:b5:f8:6e:2e:6d:66:e8:c9:f6: 66:e3:f3:c2:f9:d0:80:35:a0:d7:4b:87:bb:08:26:9c:ea:b0: e9:88:7f:db:43:53:55:5d:89:d3:2d:a5:5b:ff:1a:4a:cf:66: f0:91:04:2f:c3:9d:8e:dd:c6:ab:d2:cb:66:62:a3:7f:51:be: d1:ef:63:65:f8:8d:9f:21:f8:ab:10:c5:39:63:76:f6:ff:a7: 60:ee:55:62:c2:f8:1a:82:89:e5:45:5f:13:a2:38:ec:04:6a: 7e:85:83:bf:92:89:c4:6e:ed:ea:61:ea:f0:85:6e:1e:8a:7a: ec:06:b5:eb:a4:13:8f:5e:23:04:64:f6:39:3a:6e:94:b2:a1: e7:a0:94:1c:b5:ac:65:07:fc:a1:28:96:f0:61:b2:0a:f8:b0: bc:23:cc:5b:88:9d:8e:cd:31:47:fb:dd:a9:c0:f9:19:51:46: 8e:e6:2d:01:9b:46:d6:ef:09:a4:80:1f:17:8c:6f:73:74:0c: f9:a1:24:3a:b4:2f:a6:37:ca:09:18:6e:8f:98:1b:e6:db:cf: 61:9b:3e:dc:61:ca:63:6c:89:65:23:d3:3a:9e:6a:d1:74:a9: 8b:9b:7f:68:22:ff:8e:72:85:ab:96:5f:0f:3e:d4:1d:b7:09: 0b:80:93:9f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSEP8SX2uJXHFpeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NDVlYTNlNGQtNjU0MS00N2ViLTg5NmEtOWMxNTQwYjk2ODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMXos0E2LiTtubcsvN1G9eeBS5gBCAjHiKll XJOtsCOrUbi/Wxx03vVKOBbGDhvg+VAM7pBjFCTU5GkhlfWYIL7/2GDv48F/6XIu ra1sLGsQwMvTh0UyUEkMUC2ZdbNo3RJ/5w3wyuEBXBAg7nx29JfY+Kk2fZ870JpX esyoHuFVQKxWJX//IkrEXIgDywYkXac/jtGbkwTBdHhwsfkGVnxJpPdlGKdIbMrF d+bu91PKQTH+stJvEW2scUlW3F24Z4YRlg8fBMoDcmcdiypx4XGeQdLDla4Vt8pG W3tX2ZRbhzAqtJUQ/kHGHTLYrC6lTOOUlUIgv5U3M605OuCcjQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD9LZK1vPt8p99OBEmdh3x/amIrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTg3MmJmNjUtM2M0NC0z N2Q1LTk3NGYtZDM1MmQzNzUzYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAX/9C51aDcsKstfhuLm1m6Mn2ZuPzwvnQgDWg10uHuwgmnOqw6Yh/ 20NTVV2J0y2lW/8aSs9m8JEEL8Odjt3Gq9LLZmKjf1G+0e9jZfiNnyH4qxDFOWN2 9v+nYO5VYsL4GoKJ5UVfE6I47ARqfoWDv5KJxG7t6mHq8IVuHop67Aa166QTj14j BGT2OTpulLKh56CUHLWsZQf8oSiW8GGyCviwvCPMW4idjs0xR/vdqcD5GVFGjuYt AZtG1u8JpIAfF4xvc3QM+aEkOrQvpjfKCRhuj5gb5tvPYZs+3GHKY2yJZSPTOp5q 0XSpi5t/aCL/jnKFq5ZfDz7UHbcJC4CTnw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:03:32 2025 by rpki-client