$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa File: f9f48e7f-17f5-303e-8734-cee27411d59a.roa (raw, json) Hash identifier: PNUASBKSmntz06KDdrc/KMo2PPSQxRiy6SHiYawMS3w= Subject key identifier: 76:38:F9:2F:D3:9C:13:6F:B7:4F:9D:7C:E1:AC:7C:62:96:92:99:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584917DC03D489A8E81462165B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:4200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:03:d4:89:a8:e8:14:62:16:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=79c09246-e1ef-43ae-a1e3-a42eb6995966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:f0:85:4c:94:60:17:b1:3e:58:89:63:8e: 71:aa:31:74:b8:38:00:77:7a:54:3d:bd:65:39:de: 47:6c:f0:3b:1d:8a:77:60:fb:a3:3b:c8:39:79:45: 70:74:26:5f:2c:d0:fd:fd:29:c2:4e:9c:fe:cb:81: 6a:62:d2:61:d3:dd:fc:bb:3a:97:8d:7f:07:6d:bc: 27:54:ec:f9:42:5a:ad:b3:cc:15:c1:d2:58:25:dd: 65:e7:f4:c4:bd:50:15:bd:0b:86:9a:bb:c8:ac:66: 70:2c:d1:34:05:6f:b1:ef:09:77:55:87:23:b8:fe: 08:5b:ec:6d:b6:dd:2a:20:cc:83:06:f8:b0:4c:59: 49:f8:99:62:43:c0:6a:2d:c4:24:44:9e:99:ed:8e: 13:bb:42:d7:83:39:8f:02:d7:3f:aa:72:6d:28:b3: ab:78:0b:44:8e:8b:1a:5e:13:e1:6c:db:f1:bb:2f: 8e:6a:d3:d7:44:83:de:fa:2c:47:0c:f3:2a:3f:5f: f6:a7:ec:0e:ed:e6:e5:26:65:a8:29:96:e3:f4:0b: be:c1:eb:ac:dc:b3:21:f7:c4:b1:cc:db:f3:0a:6d: 00:4c:13:6b:55:47:d4:59:45:35:09:3a:c2:28:bf: 3a:ed:14:c5:e3:52:3c:72:5e:3f:2a:61:df:2f:f1: e5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:38:F9:2F:D3:9C:13:6F:B7:4F:9D:7C:E1:AC:7C:62:96:92:99:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9f48e7f-17f5-303e-8734-cee27411d59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:4200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:57:b2:22:22:5b:ba:69:08:e3:8a:a5:8e:ec:02:65:17:51: 81:34:d9:9b:4b:b0:10:26:aa:61:ec:71:b7:aa:2a:78:8b:f6: a2:d3:6d:46:b4:99:af:a6:0f:67:a7:20:1d:5d:c5:8d:79:82: 3b:ec:bf:6d:fe:b0:60:59:09:96:ac:a9:92:10:50:b6:18:60: c6:fd:9b:1f:70:db:94:c3:86:15:31:08:54:6f:1c:76:a3:4f: 08:44:2d:2b:20:4a:fc:73:a4:19:19:81:a6:2c:bd:62:0a:5b: 72:7e:a6:56:1d:4d:3c:51:1e:9e:dc:80:06:ed:ea:ac:fd:48: ed:31:c0:e8:8d:c4:a3:cb:31:fc:73:49:db:70:db:a7:0f:74: 53:cb:29:55:31:0c:93:ba:e3:56:a5:bc:61:44:e5:d1:d1:33: 1a:20:32:6c:d0:34:b0:d7:5d:ac:45:d9:77:3e:20:1d:db:b5: 85:e5:d3:31:22:a0:ec:bf:3e:93:e3:6a:b4:ef:40:15:c6:16: 90:cf:ff:b8:08:c7:c6:d3:48:0d:cc:8a:e4:0e:e5:43:01:28: 06:69:3e:59:1b:1d:e4:63:fd:28:cd:db:59:5b:36:72:db:2b: 2f:73:ce:43:ec:7f:1e:68:b4:57:49:d3:a5:20:60:f2:04:bc: 3b:8a:fb:07 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkX3APUiajoFGIWWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NzljMDkyNDYtZTFlZi00M2FlLWExZTMtYTQyZWI2OTk1OTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv/whUyUYBexPliJY45xqjF0uDgAd3pUPb1l Od5HbPA7HYp3YPujO8g5eUVwdCZfLND9/SnCTpz+y4FqYtJh0938uzqXjX8Hbbwn VOz5Qlqts8wVwdJYJd1l5/TEvVAVvQuGmrvIrGZwLNE0BW+x7wl3VYcjuP4IW+xt tt0qIMyDBviwTFlJ+JliQ8BqLcQkRJ6Z7Y4Tu0LXgzmPAtc/qnJtKLOreAtEjosa XhPhbNvxuy+OatPXRIPe+ixHDPMqP1/2p+wO7eblJmWoKZbj9Au+weus3LMh98Sx zNvzCm0ATBNrVUfUWUU1CTrCKL867RTF41I8cl4/KmHfL/HllwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHY4+S/TnBNvt0+dfOGsfGKWkplMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjlmNDhlN2YtMTdmNS0z MDNlLTg3MzQtY2VlMjc0MTFkNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAEIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjFeyIiJbumkI44qljuwCZRdRgTTZm0uwECaqYexxt6oqeIv2otNt RrSZr6YPZ6cgHV3FjXmCO+y/bf6wYFkJlqypkhBQthhgxv2bH3DblMOGFTEIVG8c dqNPCEQtKyBK/HOkGRmBpiy9Ygpbcn6mVh1NPFEentyABu3qrP1I7THA6I3Eo8sx /HNJ23Dbpw90U8spVTEMk7rjVqW8YUTl0dEzGiAybNA0sNddrEXZdz4gHdu1heXT MSKg7L8+k+NqtO9AFcYWkM//uAjHxtNIDcyK5A7lQwEoBmk+WRsd5GP9KM3bWVs2 ctsrL3POQ+x/Hmi0V0nTpSBg8gS8O4r7Bw== -----END CERTIFICATE-----Generated at Sun Apr 6 08:27:54 2025 by rpki-client