$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871a75c5-55b5-3b0f-a5f3-646c30049d12.roa File: 871a75c5-55b5-3b0f-a5f3-646c30049d12.roa (raw, json) Hash identifier: p+ZPDRkqm2Ams+WyAuJUamPYrQDvC9ERg8Gu8YOgmyU= Subject key identifier: E1:8C:7E:31:5C:3C:D0:5B:3B:6B:B2:1E:6A:F8:8E:B0:B2:E8:E5:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A1037B19E5391BE411B3D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871a75c5-55b5-3b0f-a5f3-646c30049d12.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:34::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:03:7b:19:e5:39:1b:e4:11:b3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=e236136c-75ba-4150-85da-271d53585c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:22:05:83:b5:65:da:f9:7c:9c:20:a4:2d:54: 64:5a:39:9a:98:b4:e6:0d:9a:82:56:9e:83:44:e7: 4c:94:3c:9f:76:9d:56:bd:fa:f4:5f:3b:72:4f:2a: ed:54:b0:15:eb:a6:9d:e5:16:b7:5e:ef:da:66:6c: 31:4a:1f:4b:a0:4f:b7:8d:70:d3:40:64:e7:18:4f: a2:ed:56:8f:82:a2:27:d3:09:89:bc:d2:ee:5a:85: cd:c0:3f:c8:29:76:9b:13:cb:a2:af:2e:8d:94:1c: 9a:92:90:19:7c:29:3b:30:89:51:c4:0d:9f:88:2d: c4:20:49:7e:93:71:92:ed:cb:8b:a0:96:63:a6:46: c9:37:4b:6e:56:af:d3:7b:2b:d8:0c:af:44:f1:86: 5f:7b:b7:a0:ba:23:c3:10:e9:12:f4:aa:b5:cf:71: ca:e6:c5:ce:f2:0c:ee:67:88:22:5f:bc:2e:65:c5: 96:5e:92:65:2e:13:c2:23:fd:54:04:59:65:88:48: 75:83:c1:a5:cc:e2:2f:56:07:80:92:52:01:c4:e2: 2d:40:d5:0f:c3:ba:94:53:46:fb:63:93:9e:dc:5e: 7c:0d:5f:da:98:8d:73:1c:0b:01:4b:cc:93:39:c0: 9e:41:5c:01:f1:df:4b:72:14:7d:a5:ac:49:9a:5c: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:7E:31:5C:3C:D0:5B:3B:6B:B2:1E:6A:F8:8E:B0:B2:E8:E5:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871a75c5-55b5-3b0f-a5f3-646c30049d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:34::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:be:bb:cd:6d:ab:fc:08:35:b3:9a:82:c2:51:66:e4:09:c1: 77:3e:db:f6:12:e7:a6:dc:50:ec:c3:d2:07:cc:97:cd:83:32: a6:91:0d:51:c9:c4:65:2c:cd:4d:91:08:34:37:40:4c:3e:d0: 92:6f:1c:82:12:2f:a5:65:26:3f:3f:8d:b3:f7:0b:5a:53:c2: 5e:e0:78:6b:25:b8:b8:d5:61:a8:79:fe:a8:76:1c:17:9d:00: da:6c:be:74:db:68:36:ca:41:ec:70:5a:fa:58:fb:8d:ba:22: fc:93:b3:42:2a:1f:db:43:05:18:1a:e8:52:14:db:9b:ea:df: 8c:8f:fb:42:2b:3b:41:37:e1:23:6a:fc:41:a1:de:c0:90:34: b5:02:6b:8c:02:10:28:20:bf:1e:4e:12:38:60:5e:c6:80:48: c8:ee:18:98:78:64:36:a9:8e:73:8f:c1:22:d1:08:a9:4d:ed: de:5d:f6:34:6c:57:0a:60:70:c3:ad:35:91:45:da:d7:66:ff: 2c:b7:e7:2a:fa:97:57:35:5d:f8:b5:b9:f6:a6:32:c9:5c:e4: 26:de:45:6d:5b:ed:19:2f:73:b7:c4:25:a2:b4:38:b2:2e:45: cf:66:22:db:b4:9b:5c:10:98:e4:f4:11:a7:96:2e:57:56:52: e6:4e:7a:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoQN7GeU5G+QRs9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTIzNjEzNmMtNzViYS00MTUwLTg1ZGEtMjcxZDUzNTg1YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyIFg7Vl2vl8nCCkLVRkWjmamLTmDZqCVp6D ROdMlDyfdp1Wvfr0XztyTyrtVLAV66ad5Ra3Xu/aZmwxSh9LoE+3jXDTQGTnGE+i 7VaPgqIn0wmJvNLuWoXNwD/IKXabE8uiry6NlByakpAZfCk7MIlRxA2fiC3EIEl+ k3GS7cuLoJZjpkbJN0tuVq/TeyvYDK9E8YZfe7eguiPDEOkS9Kq1z3HK5sXO8gzu Z4giX7wuZcWWXpJlLhPCI/1UBFlliEh1g8GlzOIvVgeAklIBxOItQNUPw7qUU0b7 Y5Oe3F58DV/amI1zHAsBS8yTOcCeQVwB8d9LchR9paxJmlz+PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOGMfjFcPNBbO2uyHmr4jrCy6OU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODcxYTc1YzUtNTViNS0z YjBmLWE1ZjMtNjQ2YzMwMDQ5ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACO+u81tq/wINbOagsJRZuQJwXc+2/YS56bcUOzD0gfMl82DMqaR DVHJxGUszU2RCDQ3QEw+0JJvHIISL6VlJj8/jbP3C1pTwl7geGsluLjVYah5/qh2 HBedANpsvnTbaDbKQexwWvpY+426IvyTs0IqH9tDBRga6FIU25vq34yP+0IrO0E3 4SNq/EGh3sCQNLUCa4wCECggvx5OEjhgXsaASMjuGJh4ZDapjnOPwSLRCKlN7d5d 9jRsVwpgcMOtNZFF2tdm/yy35yr6l1c1Xfi1ufamMslc5CbeRW1b7Rkvc7fEJaK0 OLIuRc9mItu0m1wQmOT0EaeWLldWUuZOeuE= -----END CERTIFICATE-----Generated at Tue Aug 5 16:50:13 2025 by rpki-client