$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8379a836-0017-3489-a434-2d4413874467.roa File: 8379a836-0017-3489-a434-2d4413874467.roa (raw, json) Hash identifier: g4eFS3j9KC7WTnDGJdLy33Y5p5hwbpCIcGeV2Ex6oN8= Subject key identifier: 9A:92:42:F8:B9:68:58:82:70:19:F0:33:73:51:AA:28:46:8C:EE:56 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A104DC0BC9FAF3CC974D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8379a836-0017-3489-a434-2d4413874467.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:2b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:04:dc:0b:c9:fa:f3:cc:97:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f40125fa-c8cd-4af5-ad10-140a0082b8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:df:5e:b3:43:50:5e:a3:ab:ea:42:01:4f:b2: 09:d4:65:6b:80:46:7e:4f:b3:7b:0a:a4:c6:15:8b: ba:1d:92:1c:7f:05:cd:7a:bd:cd:0a:79:e6:33:85: 30:e5:8e:4b:2a:3e:1a:67:de:8e:da:17:06:8b:96: 00:b9:08:e4:24:a1:2d:b3:16:e6:9c:48:0f:23:35: e5:e3:fb:5b:27:c7:d2:fa:4c:7f:5c:f6:51:b2:6a: cf:f6:97:45:9d:95:dc:62:08:ed:14:75:fb:34:1c: b0:a9:2b:5d:1a:f8:14:17:ae:9e:37:00:2f:3b:7e: 39:be:da:33:62:3c:be:db:7d:e7:3c:1a:67:35:ec: 68:2e:8f:46:5b:3d:78:de:d7:b1:62:3f:37:31:73: 17:60:57:78:9b:fe:a8:08:16:9c:3f:09:1f:81:b5: 10:92:27:16:ca:d4:37:60:5c:22:5d:5d:b6:45:61: 91:5e:96:be:c1:3a:ac:6f:d4:f9:4c:44:3d:71:6d: 52:dc:3a:33:17:9d:78:08:ef:9e:18:d5:46:fc:4f: 76:53:a4:56:47:07:bb:ec:84:54:21:c2:8c:88:4a: ad:b2:47:88:44:ae:76:b5:da:85:8d:a2:a3:eb:5e: b9:05:c7:1e:c1:a4:65:82:3d:35:78:32:bd:7c:82: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:92:42:F8:B9:68:58:82:70:19:F0:33:73:51:AA:28:46:8C:EE:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8379a836-0017-3489-a434-2d4413874467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a0:b6:86:5b:25:dc:bf:62:fe:05:3a:e5:29:a8:30:dc:c7: a7:e2:a8:b1:18:b6:f2:e9:0b:e3:37:73:be:d7:a6:51:c7:47: c6:8e:56:23:77:ca:a8:a3:b9:58:b2:1f:22:3d:d4:a7:41:1c: 4d:43:89:56:64:13:ce:97:56:dc:80:db:77:83:70:01:ea:69: 55:d1:9d:7e:cd:7c:f5:35:29:66:d8:8e:f8:59:58:3b:cd:64: 2e:57:51:d7:f6:03:32:05:d9:e0:c8:8c:93:67:22:bb:6a:88: 8d:16:1e:b3:ae:dc:1d:e6:69:1c:b8:ff:29:b0:90:c0:61:0f: 8d:9d:ad:4e:03:bd:f9:b5:45:c7:3a:78:a4:6d:15:38:55:87: 59:69:20:10:73:51:19:7e:1f:a7:38:ac:42:a4:18:69:8e:0e: b9:66:3f:5d:ef:b1:b3:3d:78:d9:98:44:a1:71:60:0d:ea:fb: 89:2a:b6:00:71:66:3b:d9:1a:b5:13:9d:f7:4a:dc:76:de:60: 4d:28:16:e7:f6:55:eb:2c:ae:10:c4:94:cc:57:7e:5d:81:d5: ff:ab:c0:66:50:a7:f8:60:d5:c8:2d:4d:f9:3c:04:e3:e5:63: 02:c4:15:d3:df:23:7e:1f:d1:9f:1d:ad:20:82:f7:36:ca:a0: 4e:d9:c5:00 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoQTcC8n688yXTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjQwMTI1ZmEtYzhjZC00YWY1LWFkMTAtMTQwYTAwODJiOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA299es0NQXqOr6kIBT7IJ1GVrgEZ+T7N7CqTG FYu6HZIcfwXNer3NCnnmM4Uw5Y5LKj4aZ96O2hcGi5YAuQjkJKEtsxbmnEgPIzXl 4/tbJ8fS+kx/XPZRsmrP9pdFnZXcYgjtFHX7NBywqStdGvgUF66eNwAvO345vtoz Yjy+233nPBpnNexoLo9GWz143texYj83MXMXYFd4m/6oCBacPwkfgbUQkicWytQ3 YFwiXV22RWGRXpa+wTqsb9T5TEQ9cW1S3DozF514CO+eGNVG/E92U6RWRwe77IRU IcKMiEqtskeIRK52tdqFjaKj6165BccewaRlgj01eDK9fIKfzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJqSQvi5aFiCcBnwM3NRqihGjO5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODM3OWE4MzYtMDAxNy0z NDg5LWE0MzQtMmQ0NDEzODc0NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJaC2hlsl3L9i/gU65SmoMNzHp+KosRi28ukL4zdzvtemUcdHxo5W I3fKqKO5WLIfIj3Up0EcTUOJVmQTzpdW3IDbd4NwAeppVdGdfs189TUpZtiO+FlY O81kLldR1/YDMgXZ4MiMk2ciu2qIjRYes67cHeZpHLj/KbCQwGEPjZ2tTgO9+bVF xzp4pG0VOFWHWWkgEHNRGX4fpzisQqQYaY4OuWY/Xe+xsz142ZhEoXFgDer7iSq2 AHFmO9katROd90rcdt5gTSgW5/ZV6yyuEMSUzFd+XYHV/6vAZlCn+GDVyC1N+TwE 4+VjAsQV098jfh/Rnx2tIIL3NsqgTtnFAA== -----END CERTIFICATE-----Generated at Fri Aug 8 19:23:52 2025 by rpki-client