$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa File: 2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa (raw, json) Hash identifier: aKrlPzgFZo+JNZQYwjSszOhA7j9KdGCy8qRZXe5E5vs= Subject key identifier: 92:5C:0D:68:CF:57:62:C4:C3:55:34:C7:30:6C:45:46:1E:2F:10:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A102A724B48AC664332420 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:02:a7:24:b4:8a:c6:64:33:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a8e45514-e291-4bd0-9ba0-e858b321aa95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:41:3d:85:77:4b:26:c3:91:b7:7f:63:11: f8:5e:5c:6d:86:4b:79:c7:64:e1:bd:9c:11:5d:f3: e1:93:b2:75:eb:c7:82:01:84:9f:ca:cc:2d:25:a9: 03:59:b4:59:99:2b:d1:64:1d:07:52:c1:17:df:e2: fd:b5:d1:03:de:9b:37:db:19:96:1d:35:51:8f:6e: 90:44:6a:1f:0c:a9:9f:23:fa:39:4a:0d:89:c1:18: 7e:9e:fe:82:a5:83:d0:a9:2e:e8:a9:5a:09:52:4b: f9:a2:48:3e:cc:64:b2:a7:32:a9:75:55:3b:9c:2f: fb:25:f7:b5:58:d4:e1:40:27:8f:aa:13:23:fa:69: 12:0c:31:dc:aa:ed:e2:56:c8:bf:d4:70:e3:d0:85: 90:75:db:b4:a4:ff:3f:f1:cf:3f:6c:a0:55:3d:82: 2b:8c:52:7f:f4:d9:5b:36:ea:2e:b5:cf:8d:b7:77: e6:0f:c0:44:f5:37:99:a1:6d:e0:54:89:b7:eb:9e: e4:38:46:18:82:31:a3:24:fe:99:b3:af:70:46:7a: 9a:da:9a:5b:ab:c2:8f:13:d5:60:13:e6:07:b1:00: a9:81:db:8d:d9:1a:0b:7d:0d:f9:ac:49:77:0f:28: 82:b3:4e:4a:c7:84:f5:7f:eb:d9:3f:42:76:27:f5: 54:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5C:0D:68:CF:57:62:C4:C3:55:34:C7:30:6C:45:46:1E:2F:10:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:de:3d:c3:0c:03:dc:c2:a4:bf:6c:a9:88:fa:d7:59:af:69: b5:30:34:ea:a5:f7:e1:21:71:cd:e6:67:92:38:f3:c5:03:f0: 9c:85:be:d7:dc:7f:3b:37:5e:fc:53:da:a4:7d:e7:64:f7:14: 5d:83:79:22:84:17:90:31:34:dc:a6:4f:e7:83:69:a2:aa:3e: 2b:14:43:d1:1f:04:0e:92:57:ca:1c:75:31:3c:3f:ad:29:9f: f6:78:43:12:ff:aa:96:35:03:09:28:bb:96:51:09:3d:2e:66: 16:d8:17:8e:6a:54:b8:26:0e:32:d0:92:98:10:ce:46:ef:be: 2c:0b:40:52:36:eb:c9:f7:44:c9:1c:1e:60:a5:75:1c:ab:99: ee:76:95:b1:65:9f:cb:a7:b3:2a:fa:01:34:ab:34:50:86:76: 1b:89:f7:b6:af:e9:a6:51:7a:cf:88:ca:08:8b:b0:5d:16:45: f8:49:9a:25:d6:b4:92:34:b2:82:cc:a9:52:dc:71:a2:cf:60: 24:3d:80:3e:cd:32:bf:2d:b7:5b:d3:86:43:d5:d8:d8:dc:7c: fa:ee:a8:4a:04:3b:26:db:55:72:af:18:f3:3f:e9:d1:03:70: ec:d8:aa:76:86:1b:49:de:f5:fa:9e:c2:e4:09:16:03:c0:09: 7f:e8:b9:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoQKnJLSKxmQzJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YThlNDU1MTQtZTI5MS00YmQwLTliYTAtZTg1OGIzMjFhYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ5BPYV3SybDkbd/YxH4Xlxthkt5x2ThvZwR XfPhk7J168eCAYSfyswtJakDWbRZmSvRZB0HUsEX3+L9tdED3ps32xmWHTVRj26Q RGofDKmfI/o5Sg2JwRh+nv6CpYPQqS7oqVoJUkv5okg+zGSypzKpdVU7nC/7Jfe1 WNThQCePqhMj+mkSDDHcqu3iVsi/1HDj0IWQddu0pP8/8c8/bKBVPYIrjFJ/9Nlb Nuoutc+Nt3fmD8BE9TeZoW3gVIm3657kOEYYgjGjJP6Zs69wRnqa2ppbq8KPE9Vg E+YHsQCpgduN2RoLfQ35rEl3DyiCs05Kx4T1f+vZP0J2J/VU7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJJcDWjPV2LEw1U0xzBsRUYeLxB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmJmMGM0YzYtYjgwYy0z YzQwLWI4YzgtMmE0ZDBlZjljM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAELePcMMA9zCpL9sqYj611mvabUwNOql9+Ehcc3mZ5I488UD8JyF vtfcfzs3XvxT2qR952T3FF2DeSKEF5AxNNymT+eDaaKqPisUQ9EfBA6SV8ocdTE8 P60pn/Z4QxL/qpY1Awkou5ZRCT0uZhbYF45qVLgmDjLQkpgQzkbvviwLQFI268n3 RMkcHmCldRyrme52lbFln8unsyr6ATSrNFCGdhuJ97av6aZRes+IygiLsF0WRfhJ miXWtJI0soLMqVLccaLPYCQ9gD7NMr8tt1vThkPV2NjcfPruqEoEOybbVXKvGPM/ 6dEDcOzYqnaGG0ne9fqewuQJFgPACX/ouZw= -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:31 2025 by rpki-client