$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa File: f56e512a-4f4f-3e4f-8537-0609c0041e23.roa (raw, json) Hash identifier: AYh52+groJJ5xccW9nb/0lUE4BX7hOJ1/krdCWZ0taQ= Subject key identifier: 4C:D0:AC:F1:C0:49:08:07:29:FD:97:48:3A:74:CD:EB:42:5C:89:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112BD3288010D7DB41C400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2607:f690::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2b:d3:28:80:10:d7:db:41:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=31dcb4b2-b413-4cd6-b232-3ab60d0c3e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:94:2c:10:fa:e0:24:dc:08:75:2a:25:dd: 5e:1f:0a:c6:65:6f:fb:47:f1:63:54:1d:ef:1e:8d: 5d:a7:51:d6:d3:ed:a1:fc:51:32:b0:71:eb:0c:35: 97:ad:60:b5:bb:fe:3c:39:ba:30:41:57:90:07:b9: 3f:f0:1e:68:25:62:33:30:26:8f:11:31:19:b1:a9: 8c:88:d5:a9:c9:24:94:c3:eb:7d:98:a6:2a:2b:3c: 70:16:8c:d2:26:a8:c4:1c:07:4e:43:ef:07:89:1c: 6b:56:9f:56:86:e6:f9:7c:79:bb:a8:93:7e:c1:8b: 24:4d:6a:a3:cb:a7:02:3d:b5:a2:9b:e5:b0:45:ab: 2c:66:1a:5e:8f:d4:c0:36:b0:de:37:ed:10:d4:ac: 09:f0:d2:04:87:f9:1c:c2:57:9e:4c:61:47:0c:e8: cb:58:a8:41:07:a9:4e:19:33:51:7d:d0:b2:88:eb: b9:ff:82:d8:01:1f:ae:87:5a:be:bc:9e:b1:26:2e: 09:4b:46:fb:34:f2:28:41:f4:c1:c9:8f:53:e2:ed: 7c:1b:e3:66:01:2b:40:7b:1b:6f:b7:aa:1a:2e:73: f2:21:b2:26:90:44:7c:8a:8f:25:a1:71:58:d6:bb: 38:48:ae:75:32:61:db:cd:13:b6:00:7b:d6:5f:d1: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D0:AC:F1:C0:49:08:07:29:FD:97:48:3A:74:CD:EB:42:5C:89:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f56e512a-4f4f-3e4f-8537-0609c0041e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f690::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:72:8b:30:f5:ff:a9:92:f0:3f:54:58:42:ea:7b:01:30:f3: 70:31:46:b4:21:cc:1c:a8:e7:d7:1a:8c:84:f9:ec:d0:f6:c3: 4b:09:7e:ed:0f:b6:5c:f7:74:bf:a2:18:7d:8f:02:05:81:c2: 14:63:02:29:bd:b8:05:57:fa:4f:2a:75:7f:cb:f8:5a:8c:d6: 4b:fb:23:08:7d:24:94:8e:d2:a1:68:a8:db:a9:42:73:1f:d3: 57:0e:92:e9:37:b6:cb:95:c3:45:10:28:8c:fa:31:62:dd:af: d9:26:05:d5:25:a8:fd:a8:5e:34:78:b0:d2:a5:e3:b7:3b:a3: 4b:58:9c:c3:bd:db:f7:54:54:97:15:3b:e4:43:9f:c3:51:40: 60:f9:2e:a9:44:59:ec:15:66:e5:73:6c:0a:74:8f:ce:cd:f9: f7:74:be:35:d0:23:58:97:70:f8:fd:e1:c6:bc:5f:38:7d:1d: a8:19:35:38:63:02:af:c0:24:db:f9:32:81:5e:b1:de:88:19: 61:36:6a:3d:7d:bd:b3:eb:d6:23:b9:3a:2d:6a:82:e1:5d:8c: f7:42:47:26:b2:bd:ce:51:bb:2e:c9:40:99:00:c4:02:ab:6c: c8:56:46:6a:08:d6:c7:19:eb:d7:be:98:2d:b2:13:92:6d:d4: 63:56:12:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjSESvTKIAQ19tBxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MzFkY2I0YjItYjQxMy00Y2Q2LWIyMzItM2FiNjBkMGMzZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNmULBD64CTcCHUqJd1eHwrGZW/7R/FjVB3v Ho1dp1HW0+2h/FEysHHrDDWXrWC1u/48ObowQVeQB7k/8B5oJWIzMCaPETEZsamM iNWpySSUw+t9mKYqKzxwFozSJqjEHAdOQ+8HiRxrVp9Whub5fHm7qJN+wYskTWqj y6cCPbWim+WwRassZhpej9TANrDeN+0Q1KwJ8NIEh/kcwleeTGFHDOjLWKhBB6lO GTNRfdCyiOu5/4LYAR+uh1q+vJ6xJi4JS0b7NPIoQfTByY9T4u18G+NmAStAextv t6oaLnPyIbImkER8io8loXFY1rs4SK51MmHbzRO2AHvWX9EEJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEzQrPHASQgHKf2XSDp0zetCXInfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjU2ZTUxMmEtNGY0Zi0z ZTRmLTg1MzctMDYwOWMwMDQxZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf2kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBLcosw9f+pkvA/VFhC6nsBMPNwMUa0IcwcqOfXGoyE+ezQ9sNLCX7t D7Zc93S/ohh9jwIFgcIUYwIpvbgFV/pPKnV/y/hajNZL+yMIfSSUjtKhaKjbqUJz H9NXDpLpN7bLlcNFECiM+jFi3a/ZJgXVJaj9qF40eLDSpeO3O6NLWJzDvdv3VFSX FTvkQ5/DUUBg+S6pRFnsFWblc2wKdI/Ozfn3dL410CNYl3D4/eHGvF84fR2oGTU4 YwKvwCTb+TKBXrHeiBlhNmo9fb2z69YjuTotaoLhXYz3Qkcmsr3OUbsuyUCZAMQC q2zIVkZqCNbHGevXvpgtshOSbdRjVhJU -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:41 2025 by rpki-client