$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa File: 2d21dbca-2657-35c0-8519-24ed1492a5e2.roa (raw, json) Hash identifier: WNrRgE/XN5hbPOM4u1/h60ZlVSxTjjNISw7j51rFVE8= Subject key identifier: 5F:6D:14:5B:77:A2:31:F5:1F:C3:98:0E:C4:6D:F4:21:1F:6E:3D:6F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D648004A2DC17B5A0200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:2a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d6:48:00:4a:2d:c1:7b:5a:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=2549d7ef-cb3f-4195-aad9-1ff1f8454de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:37:97:ae:d1:87:e6:9c:76:63:9a:b2:c7: ad:0a:b5:6f:20:89:90:4b:0c:ae:e8:d2:43:9b:c1: e5:92:59:64:b8:42:7f:2f:25:00:d9:20:05:14:8e: 14:25:e8:bf:4a:f2:61:50:3d:4a:a7:cb:ad:e9:b1: 76:4e:3c:13:af:71:eb:c5:68:d4:23:c6:a0:48:d0: 6b:1a:d7:b2:31:8f:36:97:e7:b6:25:a6:39:96:29: 9b:6a:a5:19:6f:73:63:53:f4:77:e6:ce:fe:3f:60: 7b:c4:1b:18:71:52:b2:65:1f:9f:46:4a:a7:e1:ca: b9:52:f4:7c:d7:b6:b5:cb:b5:01:5c:57:ef:9c:03: 5d:9d:9d:18:09:e5:66:46:2e:84:5e:6b:ec:ae:cd: 84:6e:b0:f0:23:4a:3e:80:6e:30:9f:91:e8:a3:d3: d0:9f:72:90:db:65:56:6f:0a:b9:a4:d0:83:24:24: 06:f6:af:f2:c7:6d:11:37:a9:66:fd:b1:96:be:95: 8e:f6:68:6d:c3:3a:0c:5e:18:50:0d:af:2d:d4:a8: 7a:e7:4a:bf:f7:86:2a:f5:c1:bf:8d:50:d4:c0:e8: ce:b8:66:c5:69:50:fa:c2:97:60:19:07:9a:d3:8c: 84:b3:d6:02:4f:12:bf:ea:fe:4b:c6:ab:77:c7:53: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6D:14:5B:77:A2:31:F5:1F:C3:98:0E:C4:6D:F4:21:1F:6E:3D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d21dbca-2657-35c0-8519-24ed1492a5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9c:41:15:f4:49:d7:67:8c:89:64:38:f4:ea:39:61:a3:22: 06:d9:67:af:bf:ca:24:f6:55:6e:1b:92:bf:71:7e:c1:04:b8: df:6a:36:e0:9c:69:4c:6b:d1:b2:ac:51:9d:d7:d0:8f:16:7b: 69:92:8b:e9:3d:15:f8:43:a9:14:15:3e:f0:01:46:28:c5:d1: 52:8c:04:76:93:08:c9:40:40:37:92:69:23:11:32:d9:ae:cd: 78:d6:bb:a5:d8:b6:ea:1a:6c:78:ec:23:29:2c:39:19:1a:a6: 44:7a:2e:9b:ff:31:41:62:9b:b0:5c:a9:5e:14:25:ea:ab:50: 6b:d4:dc:67:7a:44:c7:1d:4c:18:bd:44:40:5d:3b:a3:5a:b2: 41:2d:58:cd:f7:f0:09:8f:14:b5:aa:45:d0:09:8f:aa:82:84: 01:fd:f2:a6:8c:3f:3b:ff:59:f0:91:6f:96:e3:a4:fb:92:d7: 7e:32:a3:15:13:c8:d8:90:57:76:b5:2c:7c:37:e6:dd:85:68: d1:09:19:5a:9e:11:39:be:bc:84:24:99:87:d7:9c:bf:a1:65: 65:0c:b1:71:2a:42:51:f4:13:53:c3:23:ce:27:fd:41:1e:8c: b9:46:ba:21:79:8c:5e:76:51:da:9f:a9:5f:35:06:2f:58:c4: fa:b5:ec:49 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoNZIAEotwXtaAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MjU0OWQ3ZWYtY2IzZi00MTk1LWFhZDktMWZmMWY4NDU0ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrE3l67Rh+acdmOassetCrVvIImQSwyu6NJD m8HlkllkuEJ/LyUA2SAFFI4UJei/SvJhUD1Kp8ut6bF2TjwTr3HrxWjUI8agSNBr GteyMY82l+e2JaY5limbaqUZb3NjU/R35s7+P2B7xBsYcVKyZR+fRkqn4cq5UvR8 17a1y7UBXFfvnANdnZ0YCeVmRi6EXmvsrs2EbrDwI0o+gG4wn5Hoo9PQn3KQ22VW bwq5pNCDJCQG9q/yx20RN6lm/bGWvpWO9mhtwzoMXhhQDa8t1Kh650q/94Yq9cG/ jVDUwOjOuGbFaVD6wpdgGQea04yEs9YCTxK/6v5Lxqt3x1NMVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF9tFFt3ojH1H8OYDsRt9CEfbj1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQyMWRiY2EtMjY1Ny0z NWMwLTg1MTktMjRlZDE0OTJhNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAApxBFfRJ12eMiWQ49Oo5YaMiBtlnr7/KJPZVbhuSv3F+wQS432o2 4JxpTGvRsqxRndfQjxZ7aZKL6T0V+EOpFBU+8AFGKMXRUowEdpMIyUBAN5JpIxEy 2a7NeNa7pdi26hpseOwjKSw5GRqmRHoum/8xQWKbsFypXhQl6qtQa9TcZ3pExx1M GL1EQF07o1qyQS1YzffwCY8UtapF0AmPqoKEAf3ypow/O/9Z8JFvluOk+5LXfjKj FRPI2JBXdrUsfDfm3YVo0QkZWp4ROb68hCSZh9ecv6FlZQyxcSpCUfQTU8Mjzif9 QR6MuUa6IXmMXnZR2p+pXzUGL1jE+rXsSQ== -----END CERTIFICATE-----Generated at Wed Aug 6 14:23:37 2025 by rpki-client