$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f83c3091-a313-3407-a2fc-90b0bbc8e359.roa File: f83c3091-a313-3407-a2fc-90b0bbc8e359.roa (raw, json) Hash identifier: K5ZScYCsj5xVYvK5ED6RtiFxLIX/2fIUWqJH+VJ13CE= Subject key identifier: A2:56:D8:5F:D4:C6:D1:7E:37:AA:98:A2:6F:A6:CA:EE:7E:E8:9C:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112B54474DB0004B5C1340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f83c3091-a313-3407-a2fc-90b0bbc8e359.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:2f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2b:54:47:4d:b0:00:4b:5c:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=e151c137-225d-4435-9efc-bd00923655db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:22:f6:0e:77:5d:ee:e3:c6:43:7c:bc:17: 02:fc:d4:52:51:3b:1f:f9:66:f8:ce:a0:14:4a:08: 19:31:79:b6:d6:e0:90:db:1b:04:22:c6:d5:fe:66: 41:58:d5:fa:1d:94:07:97:3b:69:e6:93:52:80:27: fa:6e:ed:8f:9e:f9:4e:a0:20:01:5a:e3:47:30:cd: ed:b3:18:f8:c2:3e:7e:8f:c1:78:f0:cd:26:c3:87: 2a:89:fe:e5:46:85:e6:de:a7:70:27:d3:34:e9:29: cd:7d:2b:88:3c:83:26:74:b4:45:dd:f2:52:70:e6: fe:93:15:8d:7d:ff:d4:33:f9:cd:43:95:3b:04:eb: 48:d3:7b:1b:97:c3:7a:d5:12:64:42:21:7b:84:03: a7:86:2c:09:7b:e7:85:ce:54:ef:52:20:46:c3:57: 9c:55:0b:b4:a0:1e:0a:bf:7c:72:7e:61:73:a5:4d: 33:23:09:56:81:f1:a1:de:5a:cd:5e:7e:51:10:33: 8f:e6:d9:23:a1:e9:1e:50:f2:a5:1d:22:cc:6f:fd: 52:98:1f:4c:b8:54:cb:18:74:c0:28:41:f2:c4:9a: 36:11:58:f9:87:f4:29:df:4e:1f:56:c5:3b:18:15: 25:ea:9d:55:48:f7:01:3b:a5:bd:78:6b:bf:a0:09: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:56:D8:5F:D4:C6:D1:7E:37:AA:98:A2:6F:A6:CA:EE:7E:E8:9C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f83c3091-a313-3407-a2fc-90b0bbc8e359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2f00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:aa:4c:05:e8:9c:bd:3a:72:ac:82:3e:6f:59:8d:21:97:b3: f4:86:99:4e:0a:5c:e3:03:76:2d:a8:17:69:86:5b:c6:fa:4a: 8f:21:a2:1d:2c:c2:79:79:14:39:10:3b:eb:82:06:65:47:49: 6e:b1:5f:0f:3e:35:03:6f:06:5a:68:83:0d:b4:81:8d:7d:41: 68:b6:82:53:f1:95:bb:e0:6a:31:17:b5:ca:88:f0:77:4d:62: 93:b2:26:1b:50:3a:9c:4c:8c:01:8f:c5:94:3b:a3:28:97:da: 04:b0:c5:48:c0:84:fb:cc:b1:25:cd:aa:b7:8d:4a:9d:fb:7f: 39:16:69:53:be:36:4e:60:45:0a:8d:bb:b9:e8:91:99:17:bd: 4b:99:c8:13:86:fb:59:c6:51:a0:16:06:fa:43:b7:4c:2c:86: 9c:e7:14:5e:b1:0f:be:35:e5:b2:e9:3e:e7:36:24:f3:b7:e6: 47:88:07:98:34:17:12:59:95:41:fe:3f:cd:db:94:1a:3b:f3: f6:73:16:b9:e8:6d:d6:9b:50:15:97:be:f1:05:89:1f:9b:c0: 26:ca:5c:e5:94:a5:ce:5c:fd:4d:bc:bc:1e:e3:09:3f:26:fd: 34:cd:c0:1c:01:d2:e3:a4:6e:ba:1b:8d:74:69:c4:33:b6:ce: 9f:18:41:6c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjSEStUR02wAEtcE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZTE1MWMxMzctMjI1ZC00NDM1LTllZmMtYmQwMDkyMzY1NWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfAi9g53Xe7jxkN8vBcC/NRSUTsf+Wb4zqAU SggZMXm21uCQ2xsEIsbV/mZBWNX6HZQHlztp5pNSgCf6bu2PnvlOoCABWuNHMM3t sxj4wj5+j8F48M0mw4cqif7lRoXm3qdwJ9M06SnNfSuIPIMmdLRF3fJScOb+kxWN ff/UM/nNQ5U7BOtI03sbl8N61RJkQiF7hAOnhiwJe+eFzlTvUiBGw1ecVQu0oB4K v3xyfmFzpU0zIwlWgfGh3lrNXn5REDOP5tkjoekeUPKlHSLMb/1SmB9MuFTLGHTA KEHyxJo2EVj5h/Qp304fVsU7GBUl6p1VSPcBO6W9eGu/oAkQ/QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKJW2F/UxtF+N6qYom+myu5+6JyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjgzYzMwOTEtYTMxMy0z NDA3LWEyZmMtOTBiMGJiYzhlMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAC8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd6pMBeicvTpyrII+b1mNIZez9IaZTgpc4wN2LagXaYZbxvpKjyGi HSzCeXkUORA764IGZUdJbrFfDz41A28GWmiDDbSBjX1BaLaCU/GVu+BqMRe1yojw d01ik7ImG1A6nEyMAY/FlDujKJfaBLDFSMCE+8yxJc2qt41Knft/ORZpU742TmBF Co27ueiRmRe9S5nIE4b7WcZRoBYG+kO3TCyGnOcUXrEPvjXlsuk+5zYk87fmR4gH mDQXElmVQf4/zduUGjvz9nMWueht1ptQFZe+8QWJH5vAJspc5ZSlzlz9Tby8HuMJ Pyb9NM3AHAHS46RuuhuNdGnEM7bOnxhBbA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:33 2025 by rpki-client