$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa File: f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa (raw, json) Hash identifier: h8FoQ7/xxiX2wideY3G97Ej18FOihJb1C9budifFgFg= Subject key identifier: 90:F8:81:2B:7B:AC:8B:DD:7A:24:BD:53:14:35:59:38:C9:18:A4:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FCB9B4A83DF8588B0370 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fc:b9:b4:a8:3d:f8:58:8b:03:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=2c26aca9-2df8-45b2-b9fa-00845fe862db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:18:e7:ec:5c:d5:8f:32:fc:5f:f4:96:57: 05:09:e1:af:2e:f9:8f:36:32:67:e0:f1:6f:75:79: 6d:d3:5a:de:e5:d0:e9:6c:fc:77:51:f6:fc:fa:da: 94:70:e4:74:9d:57:69:5e:7c:7a:57:db:3e:18:58: eb:aa:0d:b8:c5:cd:21:b0:36:04:39:a0:11:06:64: 56:5b:38:a0:37:69:58:d4:50:c4:33:d0:16:e5:00: 61:56:d8:3d:fd:8f:bd:86:55:0b:bd:98:08:65:b9: e9:6e:bd:5c:dc:4e:b3:6b:0a:c2:03:ae:34:45:65: 48:0b:ab:62:85:77:72:54:38:73:35:a9:d1:d7:56: 9b:be:3c:4d:00:90:57:30:e7:f9:c4:39:de:99:6e: f0:28:9c:22:27:68:6d:f0:15:6f:9d:71:2a:54:6b: 31:6d:93:35:13:6a:d7:26:69:8d:c0:56:6e:6d:e4: d2:10:80:e4:54:67:dc:69:bd:5a:ae:6a:06:67:8c: 7d:ba:e9:91:80:8e:59:65:8c:fb:3d:ba:9e:ba:4e: fc:8e:99:a6:b5:42:2a:26:7f:ee:87:c6:c1:ac:ff: 31:f1:78:70:ef:bf:50:15:d4:cc:7d:5c:06:73:9d: 8c:22:ac:86:2c:e8:ac:18:b1:1f:59:15:a8:40:de: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F8:81:2B:7B:AC:8B:DD:7A:24:BD:53:14:35:59:38:C9:18:A4:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f147ab9a-71fc-3b03-8cd7-c8d573629a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:82:08:91:d5:49:7f:20:2e:27:a7:02:55:fe:e8:fb:70:81: 96:18:64:86:f6:6c:69:ff:3d:1c:35:48:8d:da:fa:df:d3:fe: 2e:b6:40:aa:a6:ef:4d:37:17:12:60:e6:84:1e:ec:e9:3d:87: f1:e4:fe:b7:47:a3:76:ca:cf:4c:d6:93:fc:63:c3:c4:94:6e: eb:3f:a5:d9:78:10:bc:7a:bd:a3:d3:40:a4:08:f5:da:2a:55: 1b:f4:43:cd:39:cb:75:c2:c5:ab:ca:dc:f1:c9:40:ca:a2:d8: 86:44:df:20:99:cd:0e:a5:df:80:58:cd:02:55:0c:d5:4d:23: fa:39:46:f3:ab:0f:99:9d:bb:ef:37:a0:b2:22:a6:e1:22:c0: 90:61:c6:e0:4d:13:8f:f7:c8:5d:60:c6:e7:f8:59:1a:71:c7: 67:ea:b1:c8:4a:27:9a:76:de:fb:77:cb:4e:60:fa:73:fb:64: 2f:88:f9:6b:5b:83:07:f1:d2:14:e9:c2:90:86:c7:69:5c:dd: bc:e2:5c:c0:94:e2:56:b8:40:94:6b:25:f9:96:7d:c5:bc:14: e5:eb:fd:be:2a:88:48:82:bf:82:ff:36:7e:bc:2e:23:c2:1d: 2c:4b:4b:2f:82:c3:88:c3:d2:7b:bf:f5:a3:9f:17:ca:93:2a: b6:c8:8e:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEPy5tKg9+FiLA3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MmMyNmFjYTktMmRmOC00NWIyLWI5ZmEtMDA4NDVmZTg2MmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8wY5+xc1Y8y/F/0llcFCeGvLvmPNjJn4PFv dXlt01re5dDpbPx3Ufb8+tqUcOR0nVdpXnx6V9s+GFjrqg24xc0hsDYEOaARBmRW WzigN2lY1FDEM9AW5QBhVtg9/Y+9hlULvZgIZbnpbr1c3E6zawrCA640RWVIC6ti hXdyVDhzNanR11abvjxNAJBXMOf5xDnemW7wKJwiJ2ht8BVvnXEqVGsxbZM1E2rX JmmNwFZubeTSEIDkVGfcab1armoGZ4x9uumRgI5ZZYz7Pbqeuk78jpmmtUIqJn/u h8bBrP8x8Xhw779QFdTMfVwGc52MIqyGLOisGLEfWRWoQN6mAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJD4gSt7rIvdeiS9UxQ1WTjJGKR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjE0N2FiOWEtNzFmYy0z YjAzLThjZDctYzhkNTczNjI5YTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABCCCJHVSX8gLienAlX+6PtwgZYYZIb2bGn/PRw1SI3a+t/T/i62 QKqm7003FxJg5oQe7Ok9h/Hk/rdHo3bKz0zWk/xjw8SUbus/pdl4ELx6vaPTQKQI 9doqVRv0Q805y3XCxavK3PHJQMqi2IZE3yCZzQ6l34BYzQJVDNVNI/o5RvOrD5md u+83oLIipuEiwJBhxuBNE4/3yF1gxuf4WRpxx2fqschKJ5p23vt3y05g+nP7ZC+I +Wtbgwfx0hTpwpCGx2lc3bziXMCU4la4QJRrJfmWfcW8FOXr/b4qiEiCv4L/Nn68 LiPCHSxLSy+Cw4jD0nu/9aOfF8qTKrbIjr8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:27 2025 by rpki-client