$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa File: 3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa (raw, json) Hash identifier: t8EB7GI9fgwWyCzrtc0EuP1hDkrYSbdRV/tArfe/jPE= Subject key identifier: 62:94:4C:07:ED:10:00:85:B4:A1:55:E8:CA:D1:99:A3:21:18:38:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A103BFF3E7C22384790DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:03:bf:f3:e7:c2:23:84:79:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=02bdfc4c-f022-4b8b-a72a-08cf04fa7989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:97:85:fb:2e:a5:f7:3f:31:27:0e:a4:c5:f9: 69:b4:09:95:82:9a:f2:c7:11:76:56:79:80:c7:8f: 30:df:ab:b4:89:d6:9c:34:ba:42:b6:ad:44:66:83: e8:54:43:f4:c8:20:4b:01:ac:c3:44:88:d5:f8:c3: 3d:ba:ea:da:89:14:71:57:2d:3d:8c:18:9b:6b:e4: 2c:2b:cb:30:d7:11:66:93:e6:bd:e0:aa:85:b4:f6: fa:d2:76:9a:fd:cd:31:5f:69:7f:8b:d1:61:fd:ec: 0f:c1:8c:0d:54:54:5a:28:dc:b6:19:cf:73:e4:29: 68:18:ff:bc:b5:df:97:10:ad:41:5c:ae:e6:42:56: 98:74:d8:b1:40:59:07:01:7f:44:8b:1d:ac:4e:0d: a5:1e:ef:e1:be:71:26:e4:02:2c:c4:b7:d8:36:e3: ca:89:3f:f6:54:26:b7:f2:f8:2f:e5:a5:87:bd:77: b3:93:c9:87:7f:da:24:27:a9:db:9f:3d:a4:16:4b: 2a:f2:fb:44:3b:ea:98:93:0e:cf:9e:33:02:a6:cd: 29:3e:4f:01:3c:0c:b0:88:5b:97:77:1a:ba:9b:67: dd:dd:09:c7:a8:b7:0a:4b:57:b0:bc:94:91:dd:9c: 36:92:54:36:36:48:01:fd:af:26:e2:53:49:43:63: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:94:4C:07:ED:10:00:85:B4:A1:55:E8:CA:D1:99:A3:21:18:38:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3cfb8853-2426-3b72-bd4e-3d1bc17d9f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fe:de:d2:e0:0b:da:58:a6:a5:36:75:4c:7d:09:e0:e9:f5: 44:a4:b7:cd:20:42:fa:b6:3b:9b:f2:65:01:46:77:a8:83:98: 19:de:83:7f:dc:cb:3a:35:03:14:09:01:43:92:13:f8:88:c8: 92:f1:78:32:81:70:73:4b:52:78:aa:66:ef:59:90:81:54:c5: 9e:87:ca:ca:d9:f5:11:6f:1d:e5:18:eb:d4:47:f7:42:3d:a5: 6b:91:33:ef:72:e5:08:89:92:d6:90:d6:74:31:0d:39:ff:b6: fc:eb:d8:ac:5e:8b:1d:50:39:01:f3:d9:63:ae:fb:ef:6e:ee: 78:4f:0d:70:d8:f5:67:1c:85:e6:8d:b3:36:0f:cf:93:fd:eb: 2b:5d:df:2b:da:52:2d:b9:5d:e4:cd:91:e8:ae:34:bf:dd:2c: c0:37:ef:c0:fd:32:aa:f1:9b:26:b8:ca:1b:58:b6:4a:9a:17: 76:74:66:24:77:95:0d:62:ed:67:e0:a2:ed:34:59:73:1d:35: 69:e8:8f:95:16:ec:57:45:51:df:f8:b1:d6:71:f8:04:db:11: 2c:28:c7:d7:46:91:46:1a:26:9f:2b:31:44:52:7d:27:b0:ec: ae:a3:07:2b:54:18:17:de:9d:22:e3:c4:fb:2b:df:47:23:53: 5d:15:00:0b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoQO/8+fCI4R5DcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDJiZGZjNGMtZjAyMi00YjhiLWE3MmEtMDhjZjA0ZmE3OTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpeF+y6l9z8xJw6kxflptAmVgpryxxF2VnmA x48w36u0idacNLpCtq1EZoPoVEP0yCBLAazDRIjV+MM9uuraiRRxVy09jBiba+Qs K8sw1xFmk+a94KqFtPb60naa/c0xX2l/i9Fh/ewPwYwNVFRaKNy2Gc9z5CloGP+8 td+XEK1BXK7mQlaYdNixQFkHAX9Eix2sTg2lHu/hvnEm5AIsxLfYNuPKiT/2VCa3 8vgv5aWHvXezk8mHf9okJ6nbnz2kFksq8vtEO+qYkw7PnjMCps0pPk8BPAywiFuX dxq6m2fd3QnHqLcKS1ewvJSR3Zw2klQ2NkgB/a8m4lNJQ2Pa+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGKUTAftEACFtKFV6MrRmaMhGDiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2NmYjg4NTMtMjQyNi0z YjcyLWJkNGUtM2QxYmMxN2Q5ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASv7e0uAL2limpTZ1TH0J4On1RKS3zSBC+rY7m/JlAUZ3qIOYGd6D f9zLOjUDFAkBQ5IT+IjIkvF4MoFwc0tSeKpm71mQgVTFnofKytn1EW8d5Rjr1Ef3 Qj2la5Ez73LlCImS1pDWdDENOf+2/OvYrF6LHVA5AfPZY677727ueE8NcNj1ZxyF 5o2zNg/Pk/3rK13fK9pSLbld5M2R6K40v90swDfvwP0yqvGbJrjKG1i2SpoXdnRm JHeVDWLtZ+Ci7TRZcx01aeiPlRbsV0VR3/ix1nH4BNsRLCjH10aRRhomnysxRFJ9 J7DsrqMHK1QYF96dIuPE+yvfRyNTXRUACw== -----END CERTIFICATE-----Generated at Wed Aug 6 00:55:44 2025 by rpki-client