$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc5779c5-99d3-34c3-9ebb-310e16731a98.roa File: fc5779c5-99d3-34c3-9ebb-310e16731a98.roa (raw, json) Hash identifier: zYvZ8zXEwC88UvBhXlEQt2hji5lve8ydqlY25u7R2aE= Subject key identifier: FB:8C:90:3A:F2:BE:73:65:E5:80:03:06:CA:44:1F:75:AD:55:31:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FC20578B3D5B15084600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc5779c5-99d3-34c3-9ebb-310e16731a98.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2604:cb00:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fc:20:57:8b:3d:5b:15:08:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=d52cfd46-be7d-4db7-9fef-e2e392e711cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:83:fc:4a:53:07:e0:0b:eb:9f:3f:e9:9a: e6:35:fc:56:7c:f0:88:2a:fe:ab:2d:82:57:bc:21: bb:87:4a:3c:98:84:28:ed:65:d1:4f:75:f7:d9:7c: bf:b6:c0:0c:79:1a:d8:f1:ef:df:4f:1b:18:c9:4c: f6:5d:ae:89:a1:74:9a:39:bd:fe:77:42:e1:f1:2c: 0d:e0:ba:6c:5a:d5:49:c4:e4:e2:63:e4:17:28:20: f9:9b:38:f6:7c:8e:23:c9:66:e0:48:f6:cf:66:02: 3c:4e:48:9f:bc:3d:d3:5f:cf:dd:c1:11:47:6b:a3: 6e:39:f6:1a:3a:dc:63:ea:66:45:ee:ad:80:b6:ad: fb:a8:52:d3:50:08:f0:7a:66:eb:d8:64:84:2d:ee: de:f6:bc:34:09:19:aa:08:dd:84:83:91:61:04:f7: 8b:81:81:d6:48:3c:80:9a:bc:cb:a0:ed:ee:3e:fa: 10:96:0d:72:7d:4e:c1:bd:8b:0b:5b:15:f1:4d:69: 2e:74:f4:63:84:3a:bd:98:10:ee:37:0e:57:64:22: 6f:7a:60:33:3c:31:98:bb:00:0e:d4:13:0c:c6:57: d9:d6:8a:4b:4d:2c:7c:2b:e2:be:91:c0:3d:7f:49: a2:c4:29:47:ba:5c:db:06:42:27:e7:88:f7:6a:79: 32:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8C:90:3A:F2:BE:73:65:E5:80:03:06:CA:44:1F:75:AD:55:31:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc5779c5-99d3-34c3-9ebb-310e16731a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:26:3e:3d:9a:94:dd:a0:9d:f3:04:d1:6c:e9:49:43:77:d2: 2a:49:30:bc:af:c7:70:ef:6d:95:c0:9e:6e:24:6a:75:6a:50: fa:65:d8:b7:20:72:ef:42:bb:6f:2f:ae:08:f1:70:02:c5:fb: 3c:be:c2:c4:d6:7e:e1:9c:4a:0b:9e:f7:63:0d:5d:66:c6:23: 73:5b:39:2b:05:d3:db:0f:db:5c:ae:8b:6d:3b:d6:73:4e:cb: ec:93:7e:d9:45:b1:d3:97:5d:a0:16:f9:a2:73:fe:b7:ec:0a: bf:d1:6f:22:d7:5c:4b:51:1f:75:b2:f7:f4:17:e1:28:b3:39: f5:36:5e:fb:15:c9:64:9d:b6:fb:2e:40:55:f7:d7:52:17:00: 49:d6:4a:c8:cd:17:23:f3:43:45:b8:aa:fc:d6:74:73:57:03: bb:07:36:79:8b:73:fc:7c:5a:63:85:76:bc:bb:f4:96:21:6b: 31:07:4f:64:28:43:4f:b6:98:67:22:ed:b2:5c:8c:27:c6:a7: eb:47:2a:d2:2b:ef:76:5f:4a:b8:cc:75:ab:14:e6:d8:9d:ce: 40:1a:30:cd:33:a5:5a:f2:26:89:d0:74:4e:8d:35:15:b5:a9: 2d:ec:84:40:9f:4b:b8:80:9f:50:53:96:54:da:31:6c:94:fc: 2d:5c:0b:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSEPwgV4s9WxUIRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDUyY2ZkNDYtYmU3ZC00ZGI3LTlmZWYtZTJlMzkyZTcxMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/uD/EpTB+AL658/6ZrmNfxWfPCIKv6rLYJX vCG7h0o8mIQo7WXRT3X32Xy/tsAMeRrY8e/fTxsYyUz2Xa6JoXSaOb3+d0Lh8SwN 4LpsWtVJxOTiY+QXKCD5mzj2fI4jyWbgSPbPZgI8TkifvD3TX8/dwRFHa6NuOfYa Otxj6mZF7q2Atq37qFLTUAjwembr2GSELe7e9rw0CRmqCN2Eg5FhBPeLgYHWSDyA mrzLoO3uPvoQlg1yfU7BvYsLWxXxTWkudPRjhDq9mBDuNw5XZCJvemAzPDGYuwAO 1BMMxlfZ1opLTSx8K+K+kcA9f0mixClHulzbBkIn54j3ankyzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPuMkDryvnNl5YADBspEH3WtVTH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmM1Nzc5YzUtOTlkMy0z NGMzLTllYmItMzEwZTE2NzMxYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIwmPj2alN2gnfME0WzpSUN30ipJMLyvx3DvbZXAnm4kanVqUPpl 2Lcgcu9Cu28vrgjxcALF+zy+wsTWfuGcSgue92MNXWbGI3NbOSsF09sP21yui207 1nNOy+yTftlFsdOXXaAW+aJz/rfsCr/RbyLXXEtRH3Wy9/QX4SizOfU2XvsVyWSd tvsuQFX311IXAEnWSsjNFyPzQ0W4qvzWdHNXA7sHNnmLc/x8WmOFdry79JYhazEH T2QoQ0+2mGci7bJcjCfGp+tHKtIr73ZfSrjMdasU5tidzkAaMM0zpVryJonQdE6N NRW1qS3shECfS7iAn1BTllTaMWyU/C1cC8U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:40 2025 by rpki-client