$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa File: 35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa (raw, json) Hash identifier: R21VCS+crnUuFS4ol3wnLpyCWaLwChMmPpkCWCIgeuE= Subject key identifier: 5A:6E:E7:EF:E3:86:BB:CA:55:4D:78:F4:D3:D6:83:32:D0:0C:B3:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FEB3138927695AA79E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2001:4988::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fe:b3:13:89:27:69:5a:a7:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a8061cf2-4599-4ccd-8860-68784ec33366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:5b:c5:5d:a7:c0:52:8c:20:ce:02:96:ab: a7:05:6a:a7:53:b2:d6:15:3c:0c:0d:20:41:aa:b5: dd:fd:42:4a:aa:17:06:4d:f9:64:b4:a0:81:88:a4: 0f:0e:26:0f:41:94:1f:fe:03:a0:c3:0b:f8:8f:9c: f3:69:ec:0d:d3:a4:0c:d2:0b:30:e8:15:0b:76:9c: 89:3e:81:94:3e:9a:ac:38:34:ba:52:5c:a1:48:d0: e4:5b:94:d2:b8:ab:3d:d9:3d:02:de:87:cc:e0:46: ad:5d:7f:42:36:d6:e4:8c:5e:e1:e4:c6:53:1c:e1: a7:d7:14:18:7f:4b:35:ff:d1:f9:76:94:91:85:4a: 11:09:02:e2:fe:5f:9f:e2:45:ed:27:ad:6f:02:4c: 8d:2e:ce:19:60:c5:bd:50:41:1d:60:a3:cd:fb:da: fe:1a:4c:d3:35:37:df:1c:02:72:56:4f:b6:ab:44: c8:05:af:5d:c1:78:06:46:62:d6:e3:a2:1c:84:57: a2:b6:5e:38:05:ec:fc:53:b6:97:25:70:93:06:4d: de:4a:2e:8d:af:e4:66:9f:22:88:2e:47:23:af:d8: 4e:11:ed:45:99:96:ed:48:ac:35:f9:41:1d:4e:f6: 73:b6:e7:92:4e:1d:c3:04:5d:18:eb:4e:41:b6:68: 76:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6E:E7:EF:E3:86:BB:CA:55:4D:78:F4:D3:D6:83:32:D0:0C:B3:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35e5c53e-c536-3f70-8f4d-19ae8a2886fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:4988::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d1:eb:1a:5c:69:23:39:fc:91:fc:4e:a6:19:6c:71:fc:e1: 3f:95:fe:26:0c:4e:0a:1f:2e:4b:aa:0e:0f:88:90:f0:f4:0f: 68:4d:69:f4:bf:12:8d:21:ea:c5:10:2f:bc:42:4e:84:43:6e: 81:cb:bc:bc:65:b1:bb:70:cc:71:0c:39:f9:88:94:5c:a7:56: cc:9c:c9:a3:68:6e:37:78:f8:d3:d4:83:87:c6:75:a8:08:b2: f9:ce:78:77:d3:35:a8:8b:db:c6:36:1c:c5:cd:34:f7:d2:8e: a8:4a:1e:2d:1a:64:1d:01:70:60:a1:22:34:22:f8:26:2a:37: 67:47:d2:72:3b:79:f2:da:e5:50:47:70:fb:b3:96:b0:55:be: 03:84:0a:b2:e8:7d:fe:d2:89:1d:25:ca:be:08:a8:cd:52:11: cb:d1:fd:dd:ab:53:5b:e9:85:95:c2:e0:c7:0f:f2:c6:78:46: 85:91:2f:7e:a2:59:4d:69:fe:6e:4a:0c:c9:02:e5:3d:04:ca: 83:b9:f4:86:bc:c8:0f:7a:00:60:9d:4c:60:79:0e:e4:4c:eb: a0:6c:9b:b9:fc:41:cc:4a:aa:1a:f3:32:74:11:22:dd:52:e2: 11:ea:56:96:a4:59:f1:0e:75:92:02:bb:28:25:46:86:e0:85: 75:a1:15:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqQoP6zE4knaVqnngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTgwNjFjZjItNDU5OS00Y2NkLTg4NjAtNjg3ODRlYzMzMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+lbxV2nwFKMIM4ClqunBWqnU7LWFTwMDSBB qrXd/UJKqhcGTflktKCBiKQPDiYPQZQf/gOgwwv4j5zzaewN06QM0gsw6BULdpyJ PoGUPpqsODS6UlyhSNDkW5TSuKs92T0C3ofM4EatXX9CNtbkjF7h5MZTHOGn1xQY f0s1/9H5dpSRhUoRCQLi/l+f4kXtJ61vAkyNLs4ZYMW9UEEdYKPN+9r+GkzTNTff HAJyVk+2q0TIBa9dwXgGRmLW46IchFeitl44Bez8U7aXJXCTBk3eSi6Nr+RmnyKI Lkcjr9hOEe1FmZbtSKw1+UEdTvZztueSTh3DBF0Y605Btmh2XwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFpu5+/jhrvKVU149NPWgzLQDLM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzVlNWM1M2UtYzUzNi0z ZjcwLThmNGQtMTlhZThhMjg4NmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFJiDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA50esaXGkjOfyR/E6mGWxx/OE/lf4mDE4KHy5Lqg4PiJDw9A9oTWn0 vxKNIerFEC+8Qk6EQ26By7y8ZbG7cMxxDDn5iJRcp1bMnMmjaG43ePjT1IOHxnWo CLL5znh30zWoi9vGNhzFzTT30o6oSh4tGmQdAXBgoSI0IvgmKjdnR9JyO3ny2uVQ R3D7s5awVb4DhAqy6H3+0okdJcq+CKjNUhHL0f3dq1Nb6YWVwuDHD/LGeEaFkS9+ ollNaf5uSgzJAuU9BMqDufSGvMgPegBgnUxgeQ7kTOugbJu5/EHMSqoa8zJ0ESLd UuIR6laWpFnxDnWSArsoJUaG4IV1oRVS -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:51 2025 by rpki-client