$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa File: 7812d5a6-8aa4-3831-abe7-befad072a1d3.roa (raw, json) Hash identifier: wL51Nqa53SG5ifhnr7jGIlA2DmEC/5Vphe0Ui+DyBqE= Subject key identifier: 3C:FC:E8:EB:E0:DC:C5:31:61:32:C6:FB:25:FE:3B:1E:C9:AD:60:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D517D8C03108013D8840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d5:17:d8:c0:31:08:01:3d:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=03c5cd5c-b707-4d3f-a34e-9164ebb86ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:c9:c6:f7:3f:f8:73:6d:f2:8e:fe:dc:4e: 8d:7d:12:aa:4c:bf:fb:ae:d3:a8:91:82:70:66:db: ae:10:43:e0:21:44:f4:a4:b5:a3:bf:95:07:81:4a: b0:dc:cf:39:bd:bb:52:df:04:7c:86:35:98:72:fc: ed:c2:5d:58:d7:03:c5:39:fc:ee:06:88:a1:76:6b: 1c:5e:f4:58:45:f8:cc:af:0e:d2:da:27:8d:ff:ea: d5:5d:fa:c7:3d:23:f5:20:04:ec:e8:ce:bc:df:0a: 60:42:b4:0b:95:1f:73:e4:5b:f8:37:5a:42:d7:a4: ae:d3:54:da:3b:f7:18:df:ee:11:98:f8:f2:f9:d1: f8:93:94:1e:26:6d:ac:78:4e:80:b2:b1:90:4c:db: bb:d6:26:6f:75:a1:79:49:61:fa:96:2f:10:8d:c3: d9:03:61:e0:88:14:28:da:b4:4d:18:bc:e9:7d:b3: 35:3a:7b:99:4d:f4:5a:d9:d1:1a:72:bc:27:fe:40: 2a:9d:1c:6c:e0:2b:cc:fb:b3:3e:2d:a6:4f:11:0e: 8c:62:28:9b:22:25:6f:f0:db:76:83:96:d2:59:46: 61:71:3f:8d:06:cb:6f:05:2b:2f:dd:5b:eb:1c:98: fa:9b:52:d8:1d:66:f4:c1:b4:52:09:dc:9d:0c:37: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FC:E8:EB:E0:DC:C5:31:61:32:C6:FB:25:FE:3B:1E:C9:AD:60:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7812d5a6-8aa4-3831-abe7-befad072a1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:78:48:50:de:52:5a:65:e5:7c:47:07:ba:d9:fb:1e:22:1b: fc:a0:9d:ed:1b:4f:15:ee:53:da:a3:dc:8a:11:ae:b6:ba:6d: ed:bf:20:8a:9a:5e:d4:73:fb:81:68:b4:56:22:67:9e:84:6f: 16:00:47:0d:4d:42:55:8d:1d:62:da:5b:fa:6d:09:17:bb:e2: b1:43:44:53:ba:05:5f:31:7f:2e:1f:55:8b:0d:c6:05:85:da: c4:0d:1e:7d:62:23:1a:11:02:cb:cb:95:a8:ef:9b:9f:d4:dc: 85:cc:b4:21:03:ff:6e:26:39:99:89:44:04:48:a0:05:3f:d6: ed:0c:d3:09:6c:20:f9:00:0e:c4:6d:5f:0d:5a:7c:86:64:c5: 7a:26:fe:c1:6d:37:a1:7b:54:b2:9f:0d:88:fb:95:fe:99:03: 30:85:9c:c3:d9:a0:1c:ce:98:80:cf:61:3e:3a:4d:b5:1b:55: bc:14:62:eb:44:a5:07:ec:56:27:3f:e4:2f:79:ae:95:e8:47: 10:de:ee:fb:2f:ce:df:08:df:93:62:bd:08:c1:ab:c3:55:19: 41:3e:84:82:80:f5:0c:46:3e:cf:de:e4:7f:69:1e:7d:b1:30: 8d:5a:3a:46:01:db:51:77:ed:59:23:d6:6b:f7:a2:94:39:5d: 1a:35:10:96 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoNUX2MAxCAE9iEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDNjNWNkNWMtYjcwNy00ZDNmLWEzNGUtOTE2NGViYjg2ZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT3Jxvc/+HNt8o7+3E6NfRKqTL/7rtOokYJw ZtuuEEPgIUT0pLWjv5UHgUqw3M85vbtS3wR8hjWYcvztwl1Y1wPFOfzuBoihdmsc XvRYRfjMrw7S2ieN/+rVXfrHPSP1IATs6M683wpgQrQLlR9z5Fv4N1pC16Su01Ta O/cY3+4RmPjy+dH4k5QeJm2seE6AsrGQTNu71iZvdaF5SWH6li8QjcPZA2HgiBQo 2rRNGLzpfbM1OnuZTfRa2dEacrwn/kAqnRxs4CvM+7M+LaZPEQ6MYiibIiVv8Nt2 g5bSWUZhcT+NBstvBSsv3VvrHJj6m1LYHWb0wbRSCdydDDfZjwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDz86Ovg3MUxYTLG+yX+Ox7JrWADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzgxMmQ1YTYtOGFhNC0z ODMxLWFiZTctYmVmYWQwNzJhMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAknhIUN5SWmXlfEcHutn7HiIb/KCd7RtPFe5T2qPcihGutrpt7b8g ippe1HP7gWi0ViJnnoRvFgBHDU1CVY0dYtpb+m0JF7visUNEU7oFXzF/Lh9Viw3G BYXaxA0efWIjGhECy8uVqO+bn9Tchcy0IQP/biY5mYlEBEigBT/W7QzTCWwg+QAO xG1fDVp8hmTFeib+wW03oXtUsp8NiPuV/pkDMIWcw9mgHM6YgM9hPjpNtRtVvBRi 60SlB+xWJz/kL3mulehHEN7u+y/O3wjfk2K9CMGrw1UZQT6EgoD1DEY+z97kf2ke fbEwjVo6RgHbUXftWSPWa/eilDldGjUQlg== -----END CERTIFICATE-----Generated at Fri Aug 8 10:22:22 2025 by rpki-client