$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa File: 2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa (raw, json) Hash identifier: zX7CvZ361Wk2c62g5d1X8x7lxs/JCrOOkh/FY6kQvgE= Subject key identifier: 00:FF:91:87:30:FF:37:DA:A8:46:21:AA:12:E9:0C:1A:26:4D:07:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A103EE10A2A1BEF65E1400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:03:ee:10:a2:a1:be:f6:5e:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=3e76ce09-39fe-4f91-95ee-24a983eb4d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:8c:ca:1d:a7:73:1b:e6:b2:a5:1a:cd:52: 74:24:f5:c0:bf:fc:9a:82:7c:c4:e1:de:0f:a3:c5: b2:1e:ea:18:84:b0:6e:ae:d9:fa:49:84:2d:35:5d: 46:83:9d:74:6b:33:91:c5:84:e1:f3:77:24:02:ca: 72:81:7d:ec:74:82:5c:ac:d6:a0:22:30:78:b7:10: 97:d2:20:5a:eb:b2:78:c3:fc:cd:e5:44:e7:51:f8: 9f:bd:3e:8e:57:94:4a:c2:fa:e4:c6:3c:be:ef:ed: 51:bb:2b:e7:24:11:22:08:5b:96:9d:9a:4f:ed:ec: 62:52:a0:da:9a:6a:9b:e9:62:82:2c:15:38:89:0e: b1:d6:71:bf:51:71:79:8d:a8:36:0b:d8:c9:7c:e4: bc:a9:fc:92:15:89:3e:58:06:6f:21:e8:2e:d1:d2: 26:5e:34:ae:f1:04:60:15:53:41:50:60:26:fc:7d: 91:2d:64:9f:b8:31:22:bc:89:43:9d:f0:77:39:cd: 9a:52:9b:c5:f9:35:85:0a:1b:94:e3:4f:4b:35:22: e4:dc:6f:65:21:e6:fe:63:40:a5:60:73:38:9c:04: e5:95:68:a2:f6:ac:ca:21:9e:f6:78:a6:b4:dd:15: a7:6f:01:6f:be:08:18:10:eb:85:30:5b:62:f4:e2: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FF:91:87:30:FF:37:DA:A8:46:21:AA:12:E9:0C:1A:26:4D:07:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e90e09f-f487-3ce3-b9bd-5263c938e0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:27:fe:6d:8b:87:f9:51:2d:fa:f2:51:ea:f3:e8:b0:e8:97: 26:a3:97:9a:0d:5c:48:a5:9a:d0:08:02:5c:7a:ff:3d:ba:ef: 56:e1:f9:82:99:06:8c:56:b1:23:ee:b3:d3:39:ae:32:24:91: 4c:6f:1a:5f:23:74:c0:69:89:35:a1:09:3e:d3:43:b1:3d:e4: 39:95:11:38:45:fa:fe:56:21:1f:b0:f0:ea:fd:b1:2f:0c:6f: 2f:7b:bd:f6:48:33:21:6d:57:58:b5:0a:3d:62:92:1f:ca:a2: 08:6e:9c:65:49:40:9b:fe:9d:4f:8f:0f:1a:08:84:f7:b8:48: a8:ee:16:da:a6:f0:78:1c:82:88:c5:41:7b:90:9d:c8:ca:e0: ca:81:25:aa:a7:01:f3:0d:e3:aa:24:2d:2c:3a:b5:3b:6f:11: 5c:a0:e8:da:6b:63:68:df:2e:34:d5:23:15:f5:af:3a:74:55: 86:89:74:8b:c7:12:b3:2d:46:ad:fb:b2:d0:f0:dd:49:3f:b6: cb:50:a8:2f:74:a8:8c:ab:41:2a:92:59:cd:5d:e3:1a:37:58: 6d:9b:e4:9d:f3:41:7e:7e:fc:04:ac:92:93:d3:bc:8f:cf:b4: dd:0d:af:c8:11:a5:d9:8a:6e:ec:bb:76:c3:d5:0b:d3:7e:67: 6e:de:81:41 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoQPuEKKhvvZeFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk M2U3NmNlMDktMzlmZS00ZjkxLTk1ZWUtMjRhOTgzZWI0ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9SMyh2ncxvmsqUazVJ0JPXAv/yagnzE4d4P o8WyHuoYhLBurtn6SYQtNV1Gg510azORxYTh83ckAspygX3sdIJcrNagIjB4txCX 0iBa67J4w/zN5UTnUfifvT6OV5RKwvrkxjy+7+1RuyvnJBEiCFuWnZpP7exiUqDa mmqb6WKCLBU4iQ6x1nG/UXF5jag2C9jJfOS8qfySFYk+WAZvIegu0dImXjSu8QRg FVNBUGAm/H2RLWSfuDEivIlDnfB3Oc2aUpvF+TWFChuU409LNSLk3G9lIeb+Y0Cl YHM4nATllWii9qzKIZ72eKa03RWnbwFvvggYEOuFMFti9OK6OQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAD/kYcw/zfaqEYhqhLpDBomTQdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmU5MGUwOWYtZjQ4Ny0z Y2UzLWI5YmQtNTI2M2M5MzhlMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIif+bYuH+VEt+vJR6vPosOiXJqOXmg1cSKWa0AgCXHr/PbrvVuH5 gpkGjFaxI+6z0zmuMiSRTG8aXyN0wGmJNaEJPtNDsT3kOZUROEX6/lYhH7Dw6v2x LwxvL3u99kgzIW1XWLUKPWKSH8qiCG6cZUlAm/6dT48PGgiE97hIqO4W2qbweByC iMVBe5CdyMrgyoElqqcB8w3jqiQtLDq1O28RXKDo2mtjaN8uNNUjFfWvOnRVhol0 i8cSsy1Grfuy0PDdST+2y1CoL3SojKtBKpJZzV3jGjdYbZvknfNBfn78BKySk9O8 j8+03Q2vyBGl2Ypu7Lt2w9UL035nbt6BQQ== -----END CERTIFICATE-----Generated at Wed Aug 6 05:15:27 2025 by rpki-client