$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f65324dc-ed6b-3265-a96a-9e1e83e91357.roa File: f65324dc-ed6b-3265-a96a-9e1e83e91357.roa (raw, json) Hash identifier: mMghRavaWO2FBp0p1AZz8qnB39pegpIOUS8ccnuG3CQ= Subject key identifier: 53:A2:7D:AE:A0:6B:CB:C4:8A:8A:2A:D5:1E:9F:E3:CB:4E:C5:79:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FE4A5C71B30AC0837000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f65324dc-ed6b-3265-a96a-9e1e83e91357.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:1600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fe:4a:5c:71:b3:0a:c0:83:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=1c4681b4-0d1f-4197-a442-2bf8f57f0a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:95:de:ba:a2:91:59:0b:12:f8:66:d5:7f: 9e:30:2b:d2:31:61:31:6f:a9:67:b4:24:72:e0:ec: 84:94:37:9f:b2:d6:af:22:9b:71:62:59:46:db:4a: 32:2a:27:b3:33:2d:e6:c8:cf:ef:6e:50:c7:f8:63: e3:61:77:2e:75:49:6c:08:d0:05:b2:ed:a7:c2:66: 4b:ce:cc:6a:23:79:5f:ff:29:c7:8c:36:28:72:36: bb:bb:b1:73:37:33:07:02:2e:90:6b:59:dc:82:9f: 1b:e3:00:68:2f:21:b3:2d:1f:1f:79:b8:0c:0a:24: 5b:4e:46:90:30:49:f8:95:2a:de:cf:1f:34:d0:60: a8:e5:2f:49:11:95:8c:72:f9:27:d5:b1:3d:cd:9e: 4f:6f:a7:ec:1d:f6:78:34:04:fe:c0:be:2d:3d:a7: 15:77:fe:a3:48:64:e9:1e:51:d9:db:02:c0:07:9f: 7c:7a:f3:14:e7:ed:4e:7c:0e:d2:a4:e7:9e:0e:54: e6:52:2e:40:d9:b9:af:cb:37:79:39:0b:2f:89:74: 46:d3:4b:3e:e3:63:a5:d8:4a:2d:c5:2a:c6:19:3e: 0c:31:34:00:ef:98:dd:bb:98:82:c4:22:b7:1a:4c: 1e:c5:e7:58:f0:01:47:b5:27:87:a9:fb:ae:50:16: ca:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A2:7D:AE:A0:6B:CB:C4:8A:8A:2A:D5:1E:9F:E3:CB:4E:C5:79:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f65324dc-ed6b-3265-a96a-9e1e83e91357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:46:48:5e:2e:b9:8f:1e:7f:d5:5d:e4:83:3a:6c:10:9e:cc: 8b:8c:c2:01:e1:53:8b:f2:65:ba:f7:e4:e5:c2:be:08:91:6d: 7f:86:15:db:ac:4f:2d:74:82:5e:63:ec:30:e0:60:92:37:d8: d5:0f:61:2b:1b:a8:35:ec:37:d1:b3:d2:59:de:ed:eb:cb:b1: 33:92:11:cf:d6:2b:cf:b7:c8:5e:74:65:f2:7f:8e:b1:a4:12: 61:68:a1:59:15:5c:91:20:4c:a6:fa:90:0b:40:7b:52:2d:b1: 17:d0:a5:db:d6:5c:50:5c:b4:c2:93:1b:c2:f9:c7:60:e1:ed: 39:58:27:43:0c:72:f8:8b:29:f3:6f:95:82:d5:9d:6a:c8:95: fb:b5:e4:58:31:45:00:1b:59:bb:fe:09:9c:d0:85:5e:b4:3d: 1b:8d:43:21:6e:ac:c0:42:f4:b3:71:cf:b0:15:f3:25:3e:92: be:73:c6:d9:87:bd:53:16:00:52:89:ce:4d:c7:0c:39:5c:4d: 17:bf:c9:f3:c1:38:08:99:bd:a1:fd:fe:35:a0:fe:b1:b5:dd: a9:e0:a7:ed:b5:93:4c:24:2c:08:b5:17:f3:82:5f:07:dc:e4: 1c:08:4a:69:20:09:7b:b6:ee:b3:9e:13:ef:9f:54:00:ff:d0: 36:5c:30:ea -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSEP5KXHGzCsCDcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MWM0NjgxYjQtMGQxZi00MTk3LWE0NDItMmJmOGY1N2YwYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPmV3rqikVkLEvhm1X+eMCvSMWExb6lntCRy 4OyElDefstavIptxYllG20oyKiezMy3myM/vblDH+GPjYXcudUlsCNAFsu2nwmZL zsxqI3lf/ynHjDYocja7u7FzNzMHAi6Qa1ncgp8b4wBoLyGzLR8febgMCiRbTkaQ MEn4lSrezx800GCo5S9JEZWMcvkn1bE9zZ5Pb6fsHfZ4NAT+wL4tPacVd/6jSGTp HlHZ2wLAB598evMU5+1OfA7SpOeeDlTmUi5A2bmvyzd5OQsviXRG00s+42Ol2Eot xSrGGT4MMTQA75jdu5iCxCK3GkwexedY8AFHtSeHqfuuUBbKEwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFOifa6ga8vEiooq1R6f48tOxXndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY1MzI0ZGMtZWQ2Yi0z MjY1LWE5NmEtOWUxZTgzZTkxMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANkZIXi65jx5/1V3kgzpsEJ7Mi4zCAeFTi/Jluvfk5cK+CJFtf4YV 26xPLXSCXmPsMOBgkjfY1Q9hKxuoNew30bPSWd7t68uxM5IRz9Yrz7fIXnRl8n+O saQSYWihWRVckSBMpvqQC0B7Ui2xF9Cl29ZcUFy0wpMbwvnHYOHtOVgnQwxy+Isp 82+VgtWdasiV+7XkWDFFABtZu/4JnNCFXrQ9G41DIW6swEL0s3HPsBXzJT6SvnPG 2Ye9UxYAUonOTccMOVxNF7/J88E4CJm9of3+NaD+sbXdqeCn7bWTTCQsCLUX84Jf B9zkHAhKaSAJe7bus54T759UAP/QNlww6g== -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:09 2025 by rpki-client