$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/240f3b0b-3813-3db6-9658-56c128b51a7f.roa File: 240f3b0b-3813-3db6-9658-56c128b51a7f.roa (raw, json) Hash identifier: 4fR0encj6lam/ay8QkXsNpTJ6UVBCgW1jC9s62h1B7g= Subject key identifier: 7F:9B:96:9B:80:B3:36:75:98:6B:1B:91:92:B1:2F:EA:D4:E4:5B:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A1027E8296B8AD20532180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/240f3b0b-3813-3db6-9658-56c128b51a7f.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:02:7e:82:96:b8:ad:20:53:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=185dcf43-2547-4c17-bf92-3bb903059de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:28:4e:a4:b2:97:7d:c6:12:b0:9e:90:ce:6b: df:9b:56:93:8d:73:74:5c:7f:47:4f:9e:51:36:b9: 9f:c5:66:73:26:bf:1d:20:a7:f4:88:20:52:7d:41: cd:d3:89:1d:38:94:dd:71:5c:a4:96:52:7b:4f:5e: 6e:94:2a:62:28:59:94:22:d9:26:dd:d8:34:ac:d5: a6:e7:76:a2:fc:aa:2a:7f:3a:f0:f3:af:06:d1:7b: 3c:58:f2:16:10:b2:89:88:c0:d8:cb:02:99:02:6a: c0:d0:57:65:16:e2:bd:4b:ed:bb:5f:a2:c5:96:8a: 8c:5e:07:1b:97:e5:fc:f8:29:73:a3:4c:95:c3:30: 4b:90:70:63:e2:3d:b0:ad:b7:56:93:26:69:e5:52: a2:9b:97:c4:d0:a4:59:89:8d:22:c6:bd:b7:06:a8: dc:75:ff:28:50:ff:ad:15:70:51:a1:c1:04:74:eb: 8b:6a:3d:a5:42:7a:d4:c8:ab:b8:e9:14:89:e9:47: 0f:34:a2:4a:45:ec:f9:fe:a6:2a:c4:c6:fc:d6:fa: 18:c6:48:08:5a:33:b5:8e:1c:cb:1d:17:32:f2:48: 1e:19:4b:3a:75:98:13:7e:1e:b7:75:86:a0:08:cc: a1:8e:b3:10:1d:77:59:50:4b:20:01:04:1a:77:44: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9B:96:9B:80:B3:36:75:98:6B:1B:91:92:B1:2F:EA:D4:E4:5B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/240f3b0b-3813-3db6-9658-56c128b51a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:48:71:3d:c9:8f:8a:76:7a:d4:5e:88:6f:41:63:d2:8a:87: 34:19:f2:0c:07:59:0d:f5:61:62:1c:d6:7a:84:1f:7f:6e:a2: 59:34:a5:f1:e0:5e:00:e0:50:42:e1:38:88:87:4b:65:ec:b2: ee:ed:2f:7c:6f:e8:86:3d:c6:f2:f6:d9:a6:2a:e3:a8:78:01: dd:84:70:e9:13:04:84:cf:f4:a7:42:ab:7c:f1:95:55:72:7b: 47:90:fd:9f:f8:2d:ab:11:5a:67:e2:60:46:f8:a1:e8:bd:c0: 79:4b:9b:fc:5b:61:67:ac:c0:d8:67:e7:8c:ad:16:0a:f4:3c: 09:e3:a0:fe:a8:b9:03:1b:a8:dd:c5:3d:34:20:49:48:aa:ad: 15:01:eb:50:e8:83:99:0c:49:01:83:74:92:26:fa:d9:67:5c: 76:46:c4:e8:ba:09:26:6e:09:f4:b5:90:29:83:4a:fb:f5:ac: c6:9a:da:f6:84:80:58:62:c5:75:15:b3:df:90:21:ed:df:90: 2c:12:64:5e:c1:94:8e:89:57:52:db:74:3b:b0:41:92:62:ab: eb:70:24:28:69:f2:27:b7:27:2a:21:f4:3d:a6:01:06:04:40: 15:2e:3f:44:48:27:d2:d5:dd:c9:5f:8c:50:9c:2c:b2:87:52: 26:ec:d2:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoQJ+gpa4rSBTIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MTg1ZGNmNDMtMjU0Ny00YzE3LWJmOTItM2JiOTAzMDU5ZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmChOpLKXfcYSsJ6Qzmvfm1aTjXN0XH9HT55R NrmfxWZzJr8dIKf0iCBSfUHN04kdOJTdcVykllJ7T15ulCpiKFmUItkm3dg0rNWm 53ai/Koqfzrw868G0Xs8WPIWELKJiMDYywKZAmrA0FdlFuK9S+27X6LFloqMXgcb l+X8+Clzo0yVwzBLkHBj4j2wrbdWkyZp5VKim5fE0KRZiY0ixr23Bqjcdf8oUP+t FXBRocEEdOuLaj2lQnrUyKu46RSJ6UcPNKJKRez5/qYqxMb81voYxkgIWjO1jhzL HRcy8kgeGUs6dZgTfh63dYagCMyhjrMQHXdZUEsgAQQad0RJ7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH+blpuAszZ1mGsbkZKxL+rU5FvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQwZjNiMGItMzgxMy0z ZGI2LTk2NTgtNTZjMTI4YjUxYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACdIcT3Jj4p2etReiG9BY9KKhzQZ8gwHWQ31YWIc1nqEH39uolk0 pfHgXgDgUELhOIiHS2Xssu7tL3xv6IY9xvL22aYq46h4Ad2EcOkTBITP9KdCq3zx lVVye0eQ/Z/4LasRWmfiYEb4oei9wHlLm/xbYWeswNhn54ytFgr0PAnjoP6ouQMb qN3FPTQgSUiqrRUB61Dog5kMSQGDdJIm+tlnXHZGxOi6CSZuCfS1kCmDSvv1rMaa 2vaEgFhixXUVs9+QIe3fkCwSZF7BlI6JV1LbdDuwQZJiq+twJChp8ie3Jyoh9D2m AQYEQBUuP0RIJ9LV3clfjFCcLLKHUibs0pA= -----END CERTIFICATE-----Generated at Mon Aug 4 18:36:37 2025 by rpki-client