$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/296f271d-7bc6-3b3d-9d88-b80fded595ce.roa File: 296f271d-7bc6-3b3d-9d88-b80fded595ce.roa (raw, json) Hash identifier: FMWouCTpnMgmjrPOmnvhVX21Gj6ZK7K7Ce8EZot7Dxs= Subject key identifier: B0:88:8F:51:2C:A5:09:F8:74:01:DB:74:62:F1:FD:B1:3D:03:5E:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A104477C1E9596DA1D76C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/296f271d-7bc6-3b3d-9d88-b80fded595ce.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:1400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:04:47:7c:1e:95:96:da:1d:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=3081c7b0-163a-4193-a25e-0bd9a44fd3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:9b:8a:7b:75:99:b7:46:71:d8:e9:eb:8d: da:be:14:16:82:7f:10:46:ed:44:90:c0:0f:4f:a6: 05:f4:7c:5e:49:31:b5:87:74:e8:f8:07:6a:e9:7f: b1:2c:85:45:db:11:a7:0f:48:84:cc:59:e2:77:0f: 0d:e0:18:2d:19:81:48:65:43:30:52:3e:d6:6a:47: f1:8c:ec:6b:62:58:fb:9f:38:0a:59:06:e2:06:84: 9b:eb:8e:8d:10:2a:92:08:f7:49:13:1e:4d:5e:ca: 8d:e0:f2:33:38:d1:54:b6:81:67:e8:21:90:d3:e6: 87:61:51:b1:b4:db:9c:76:ac:d3:24:37:42:62:ea: 96:93:72:46:04:b4:f4:56:38:20:04:ff:92:64:bf: f8:c3:f0:ce:a8:9b:a3:8b:f8:68:8f:bb:56:bf:83: ef:43:78:7b:cc:48:25:58:6c:25:18:81:0b:02:c3: 3b:22:29:ef:54:79:91:c6:a9:93:ee:0f:91:8c:0e: 0c:17:8f:73:59:af:86:d9:c8:55:0d:68:b5:77:a0: 91:d3:82:f8:ec:a6:b4:de:40:03:25:1c:cd:a5:84: 50:dc:96:78:2f:d9:0b:27:86:01:fe:e4:f0:09:37: 64:60:f1:36:19:e6:94:cc:7c:77:08:7f:fe:74:27: 23:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:88:8F:51:2C:A5:09:F8:74:01:DB:74:62:F1:FD:B1:3D:03:5E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/296f271d-7bc6-3b3d-9d88-b80fded595ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4d:44:18:8f:b4:b1:fb:18:e5:a6:50:f4:19:cd:79:af:d2: 91:ce:1b:54:a1:21:4a:fc:28:0c:c5:35:16:60:a8:1c:59:53: be:0e:d2:b3:a3:30:95:fb:a2:5c:bf:81:00:74:de:9f:f1:e3: 65:bd:be:01:9a:55:7e:83:48:a8:e0:d3:8f:b4:45:41:5c:51: e5:e1:a1:d8:9f:39:0b:ec:04:90:1b:2b:da:c4:b7:69:5c:95: 36:cc:3e:45:3e:70:53:f4:85:c1:ef:51:48:06:d7:02:83:f2: a2:25:6a:24:0d:27:1f:81:33:f5:c5:26:51:8e:71:83:3f:0d: b7:7c:3b:b0:36:9d:3e:20:03:e4:91:d2:a5:22:22:3f:b7:9f: 5c:aa:64:75:45:69:3d:24:29:c4:ba:50:0d:66:fb:0b:db:55: f1:ab:b4:0d:1f:73:92:ad:c9:d8:9d:5c:6c:01:e6:8a:b2:f0: b4:4e:6b:ec:6c:42:02:68:cc:3f:32:3f:4c:68:0c:b8:89:9f: 66:11:96:b3:23:99:cf:e2:82:f5:2f:01:88:56:8c:61:00:18: f6:47:57:d1:33:64:40:d5:f6:5c:d5:fc:f8:fb:10:bf:f8:73: a9:e8:c0:31:8f:40:ba:85:32:3c:2c:87:ab:0b:fb:db:92:b4: 44:ae:2b:d1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoQRHfB6VltoddsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MzA4MWM3YjAtMTYzYS00MTkzLWEyNWUtMGJkOWE0NGZkM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBebint1mbdGcdjp643avhQWgn8QRu1EkMAP T6YF9HxeSTG1h3To+Adq6X+xLIVF2xGnD0iEzFnidw8N4BgtGYFIZUMwUj7Wakfx jOxrYlj7nzgKWQbiBoSb646NECqSCPdJEx5NXsqN4PIzONFUtoFn6CGQ0+aHYVGx tNucdqzTJDdCYuqWk3JGBLT0VjggBP+SZL/4w/DOqJuji/hoj7tWv4PvQ3h7zEgl WGwlGIELAsM7IinvVHmRxqmT7g+RjA4MF49zWa+G2chVDWi1d6CR04L47Ka03kAD JRzNpYRQ3JZ4L9kLJ4YB/uTwCTdkYPE2GeaUzHx3CH/+dCcj1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLCIj1EspQn4dAHbdGLx/bE9A15HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjk2ZjI3MWQtN2JjNi0z YjNkLTlkODgtYjgwZmRlZDU5NWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZU1EGI+0sfsY5aZQ9BnNea/Skc4bVKEhSvwoDMU1FmCoHFlTvg7S s6MwlfuiXL+BAHTen/HjZb2+AZpVfoNIqODTj7RFQVxR5eGh2J85C+wEkBsr2sS3 aVyVNsw+RT5wU/SFwe9RSAbXAoPyoiVqJA0nH4Ez9cUmUY5xgz8Nt3w7sDadPiAD 5JHSpSIiP7efXKpkdUVpPSQpxLpQDWb7C9tV8au0DR9zkq3J2J1cbAHmirLwtE5r 7GxCAmjMPzI/TGgMuImfZhGWsyOZz+KC9S8BiFaMYQAY9kdX0TNkQNX2XNX8+PsQ v/hzqejAMY9AuoUyPCyHqwv725K0RK4r0Q== -----END CERTIFICATE-----Generated at Wed Aug 6 06:00:28 2025 by rpki-client