$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89cdf212-8681-3edc-9906-86e614e29de0.roa File: 89cdf212-8681-3edc-9906-86e614e29de0.roa (raw, json) Hash identifier: KSlb6LcO/vNgl34ZsR47P1hM1GFtFD/dQveG+jRlvBQ= Subject key identifier: 25:5D:D8:52:48:73:B7:53:FC:86:3C:A5:8C:1B:10:CE:E7:61:9B:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A102FD54EF6511E6801690 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89cdf212-8681-3edc-9906-86e614e29de0.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:02:fd:54:ef:65:11:e6:80:16:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=466a34e0-a0e7-4cad-9ed1-30e4e0e381f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:ee:24:8c:fd:90:75:b0:ee:97:64:5f:eb: 17:02:71:ac:e2:53:d0:07:b6:e4:cf:0b:d3:15:9a: 62:e3:c6:e5:7b:76:b0:5e:19:62:87:40:82:e8:da: cc:a8:09:cd:cf:d4:8a:c0:38:6e:4b:34:c5:9e:76: 46:36:f5:a4:9e:77:ef:d7:2e:85:90:8d:f5:df:75: 8d:7e:a7:2c:49:12:73:64:58:25:7e:be:c1:4a:c6: 7a:2a:9a:d2:c0:ac:a5:d7:74:df:c9:97:73:2a:91: fb:dc:7b:69:53:cd:67:b4:54:56:e4:ef:05:6b:b6: d0:db:f6:15:b1:89:af:33:68:21:3c:68:35:b2:88: 93:6f:a9:8b:7c:ae:01:29:c4:46:1e:be:2d:b7:a9: 83:ff:70:a1:08:5c:ac:c4:e3:7b:1f:58:0f:85:59: 35:99:f4:ae:37:06:69:51:3c:e0:b4:5c:b3:79:60: 8e:75:f1:50:ee:f2:d8:0c:0b:3e:c3:ca:9f:d0:c0: 34:7a:d3:c0:00:4f:36:25:c9:95:aa:55:e6:2a:d1: 4c:0b:e6:95:c7:5c:a2:a2:7c:b2:81:29:dd:25:11: 28:89:31:84:2f:18:b1:79:78:92:fd:0d:4d:18:cd: 0a:b1:4b:5c:25:6f:fb:dd:59:03:0e:35:60:8d:63: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5D:D8:52:48:73:B7:53:FC:86:3C:A5:8C:1B:10:CE:E7:61:9B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89cdf212-8681-3edc-9906-86e614e29de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:11:20:be:c8:35:cf:40:77:07:dd:83:64:86:b2:1d:ef:ee: b5:e0:fa:49:1d:d9:f1:c7:88:79:58:b8:fe:09:3b:81:75:0f: 3f:d7:8c:9d:b1:21:ad:5b:81:08:6a:77:8a:7d:97:66:e7:ee: fd:10:63:4d:52:af:3e:b6:08:73:38:96:d7:eb:39:55:81:69: 46:c3:80:5f:43:7d:11:c1:39:62:2f:3e:fe:6a:fa:e2:29:4e: eb:09:bb:52:bb:3e:a9:34:18:9c:b3:b0:b9:7b:cc:dc:bc:12: 0f:cf:5e:1f:22:7f:a5:d7:0e:fa:f1:bf:a0:4c:45:80:81:9e: fc:2f:62:e6:67:d3:fd:24:05:6f:c8:fb:40:dd:02:08:25:fe: 4f:ad:50:4a:48:e0:3d:d2:ce:e3:e6:d2:a1:93:39:5c:a5:f6: 06:cc:a8:89:71:08:49:bb:90:5d:47:93:97:3c:6a:67:ed:46: 59:95:6f:ef:ae:2e:4c:fe:48:3a:29:4d:b0:c0:dc:c4:34:c5: 56:d1:5d:84:fa:bb:b2:e3:10:b0:27:80:8e:4b:44:54:dd:00: 10:a3:29:cc:3d:70:c0:c4:33:24:69:6c:d0:d3:cf:09:1c:c6: 9d:fc:c5:b4:5b:e7:b7:80:2b:62:ec:f4:cf:85:72:0b:44:6f: b1:e7:bf:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoQL9VO9lEeaAFpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NDY2YTM0ZTAtYTBlNy00Y2FkLTllZDEtMzBlNGUwZTM4MWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4XuJIz9kHWw7pdkX+sXAnGs4lPQB7bkzwvT FZpi48ble3awXhlih0CC6NrMqAnNz9SKwDhuSzTFnnZGNvWknnfv1y6FkI3133WN fqcsSRJzZFglfr7BSsZ6KprSwKyl13TfyZdzKpH73HtpU81ntFRW5O8Fa7bQ2/YV sYmvM2ghPGg1soiTb6mLfK4BKcRGHr4tt6mD/3ChCFysxON7H1gPhVk1mfSuNwZp UTzgtFyzeWCOdfFQ7vLYDAs+w8qf0MA0etPAAE82JcmVqlXmKtFMC+aVx1yionyy gSndJREoiTGELxixeXiS/Q1NGM0KsUtcJW/73VkDDjVgjWNjXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCVd2FJIc7dT/IY8pYwbEM7nYZuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODljZGYyMTItODY4MS0z ZWRjLTk5MDYtODZlNjE0ZTI5ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACoRIL7INc9Adwfdg2SGsh3v7rXg+kkd2fHHiHlYuP4JO4F1Dz/X jJ2xIa1bgQhqd4p9l2bn7v0QY01Srz62CHM4ltfrOVWBaUbDgF9DfRHBOWIvPv5q +uIpTusJu1K7Pqk0GJyzsLl7zNy8Eg/PXh8if6XXDvrxv6BMRYCBnvwvYuZn0/0k BW/I+0DdAggl/k+tUEpI4D3SzuPm0qGTOVyl9gbMqIlxCEm7kF1Hk5c8amftRlmV b++uLkz+SDopTbDA3MQ0xVbRXYT6u7LjELAngI5LRFTdABCjKcw9cMDEMyRpbNDT zwkcxp38xbRb57eAK2Ls9M+FcgtEb7Hnv1c= -----END CERTIFICATE-----Generated at Wed Aug 6 11:22:17 2025 by rpki-client