$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa File: 219bc4aa-8142-3f5e-a469-4a615b68d218.roa (raw, json) Hash identifier: K7bS4dtiCFKTF3DPE3zcGHA8oRvimxZEyGr80SishIg= Subject key identifier: D3:31:8D:F5:E0:85:4C:3C:14:5A:97:E1:32:78:82:E5:AD:24:81:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D62183236628098C1180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:2300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d6:21:83:23:66:28:09:8c:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=75de732d-879e-4fbf-b2ff-c27da5843f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:ec:99:31:c0:c3:7e:73:da:38:54:3f:c0: a1:e9:ad:f4:0c:7f:07:75:9e:cd:ed:c8:63:74:32: 80:6e:5b:93:78:3e:be:89:fc:e6:27:2d:1b:ef:07: f3:10:03:10:e0:ec:31:a8:01:a8:f4:70:13:23:c7: 69:91:a3:45:a3:4c:80:6d:67:fa:6e:5c:53:fc:b9: 1d:2b:ff:a5:ee:6f:af:a3:17:3c:10:8f:1c:6f:0f: da:cc:a9:d4:f7:36:88:4c:7e:bc:40:34:30:2f:f5: 60:64:22:36:d0:e2:64:22:a0:cf:53:a8:6d:db:d3: da:45:58:a9:8b:ab:7a:ca:82:19:ff:d1:83:51:0c: 2d:db:f5:28:43:d4:71:62:62:12:8f:04:e5:a9:b1: 81:88:3e:2c:03:79:60:75:f3:9b:68:85:f0:0f:b2: aa:e6:e9:79:06:dd:92:83:ea:78:e0:17:97:20:67: 3d:48:70:4f:e9:66:7d:2b:3b:fa:e2:77:0b:73:78: ed:ac:b5:7c:5b:70:19:2c:54:b3:fe:48:83:93:01: 64:a9:82:a5:da:9f:5c:99:0d:41:d9:c9:31:d4:a0: a6:c9:48:3b:ac:49:dc:b6:c9:94:70:61:29:a4:74: a7:84:f8:f2:19:77:af:02:55:35:47:e0:26:f1:57: 8e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:31:8D:F5:E0:85:4C:3C:14:5A:97:E1:32:78:82:E5:AD:24:81:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219bc4aa-8142-3f5e-a469-4a615b68d218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d6:7c:82:23:e5:30:c3:c3:47:2b:f9:f6:30:fc:f7:9f:f1: f6:45:80:80:87:70:35:49:0f:52:ae:1b:fc:74:cb:93:10:85: 3f:a6:c5:a5:57:b1:10:97:68:81:86:fa:7e:b2:ef:5d:b7:f8: aa:39:fd:e9:5b:0a:df:9f:99:60:7f:33:69:80:cf:db:e1:01: ef:02:f0:f8:51:00:bb:40:22:f4:72:38:90:f4:0d:56:2a:30: e9:eb:dc:ed:f8:65:2e:2d:68:2d:94:ab:c8:27:ab:93:94:70: 3a:c1:ca:27:72:7c:1c:74:af:ed:7e:d4:cd:35:5c:ae:d2:8f: 9d:2d:33:65:a5:c4:15:ca:02:f2:64:83:e4:83:a0:5e:b0:db: 74:a9:83:78:99:26:be:0d:54:a5:61:0d:5f:80:48:da:eb:c6: 4a:9b:11:a0:c1:0e:0e:49:f3:84:4c:c7:a3:8c:e3:bf:f2:aa: f3:fa:6f:f7:a0:86:df:c7:53:85:ee:96:99:19:c0:b2:3d:17: 06:a8:b3:67:f9:5d:9c:0c:2c:1c:a2:9d:aa:ef:68:9f:f1:58: 14:b7:5c:4a:d0:ba:4e:b8:a8:45:0f:e2:87:7d:7f:24:4d:bb: 1e:87:b3:94:bd:49:47:a3:96:3a:fb:1f:59:02:f8:02:95:16: 6f:75:79:33 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoNYhgyNmKAmMEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NzVkZTczMmQtODc5ZS00ZmJmLWIyZmYtYzI3ZGE1ODQzZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOzsmTHAw35z2jhUP8Ch6a30DH8HdZ7N7chj dDKAbluTeD6+ifzmJy0b7wfzEAMQ4OwxqAGo9HATI8dpkaNFo0yAbWf6blxT/Lkd K/+l7m+voxc8EI8cbw/azKnU9zaITH68QDQwL/VgZCI20OJkIqDPU6ht29PaRVip i6t6yoIZ/9GDUQwt2/UoQ9RxYmISjwTlqbGBiD4sA3lgdfObaIXwD7Kq5ul5Bt2S g+p44BeXIGc9SHBP6WZ9Kzv64ncLc3jtrLV8W3AZLFSz/kiDkwFkqYKl2p9cmQ1B 2ckx1KCmyUg7rEnctsmUcGEppHSnhPjyGXevAlU1R+Am8VeOmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNMxjfXghUw8FFqX4TJ4guWtJIHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE5YmM0YWEtODE0Mi0z ZjVlLWE0NjktNGE2MTViNjhkMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMtZ8giPlMMPDRyv59jD895/x9kWAgIdwNUkPUq4b/HTLkxCFP6bF pVexEJdogYb6frLvXbf4qjn96VsK35+ZYH8zaYDP2+EB7wLw+FEAu0Ai9HI4kPQN Viow6evc7fhlLi1oLZSryCerk5RwOsHKJ3J8HHSv7X7UzTVcrtKPnS0zZaXEFcoC 8mSD5IOgXrDbdKmDeJkmvg1UpWENX4BI2uvGSpsRoMEODknzhEzHo4zjv/Kq8/pv 96CG38dThe6WmRnAsj0XBqizZ/ldnAwsHKKdqu9on/FYFLdcStC6TrioRQ/ih31/ JE27HoezlL1JR6OWOvsfWQL4ApUWb3V5Mw== -----END CERTIFICATE-----Generated at Wed Aug 6 05:23:11 2025 by rpki-client