$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9391badf-c7c5-3d55-a232-6fd977b29b8d.roa File: 9391badf-c7c5-3d55-a232-6fd977b29b8d.roa (raw, json) Hash identifier: 3/JwS8EiSUGOhqrwRXXTgXwZqP08SSMTE/B3cPl2EfU= Subject key identifier: BF:FA:35:EA:B7:2E:74:F8:1D:13:C1:EF:99:0F:B3:1C:C3:14:1F:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D6DFC615996B74768180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9391badf-c7c5-3d55-a232-6fd977b29b8d.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2607:faf8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d6:df:c6:15:99:6b:74:76:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=cfdab2ca-36a3-4665-9160-c0a66565d181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:27:37:3d:f6:d3:f4:42:24:22:b6:ba:e7: be:92:01:fe:a9:4b:10:8c:6f:7e:fc:cd:46:44:51: 5f:43:b4:c6:41:79:61:e2:d7:c9:ca:59:18:85:f9: 20:f2:72:02:99:24:88:b8:71:ff:7f:9d:9f:fd:a3: fd:d8:92:bb:10:59:a9:e5:5f:b5:4f:6b:5c:95:ed: 82:31:6f:4d:14:f4:d6:09:d4:90:97:20:7f:17:bb: d7:25:42:29:8d:ae:3e:ee:31:df:49:a3:ea:f4:05: 26:b9:80:01:dc:73:0c:57:cf:60:22:e7:9f:f7:42: 4a:14:80:03:a6:d1:12:19:d3:02:c7:78:8f:0e:43: 29:14:31:6a:8a:42:de:3f:f7:6d:39:bc:3b:83:4d: 8f:fd:b5:f1:21:e6:cf:53:72:4c:09:bd:a5:21:de: 50:6b:3c:76:e1:fb:b5:3e:f8:fe:87:b4:3e:d2:25: c9:90:99:a6:46:bb:93:f6:28:f5:d3:1d:2a:f4:2a: ca:02:c2:3d:3e:e5:c0:aa:9a:b4:ef:7f:d3:b8:8d: 95:bd:31:28:f6:39:ac:5a:8e:70:38:41:87:e2:c6: 6a:11:99:54:01:1e:af:3b:f7:77:4a:0c:93:bb:ef: d4:5d:b4:f8:81:84:9a:f2:4d:3f:5e:50:8b:32:ad: 3e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:35:EA:B7:2E:74:F8:1D:13:C1:EF:99:0F:B3:1C:C3:14:1F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9391badf-c7c5-3d55-a232-6fd977b29b8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:faf8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:dc:82:76:00:d6:24:5c:ac:78:51:cf:43:51:88:55:ce:00: 76:9a:89:5c:ba:2b:34:10:32:87:b3:fc:65:01:fe:80:35:24: 93:ec:5e:73:68:b0:d9:83:7b:54:f5:5e:64:e2:a1:02:12:eb: 7a:79:f9:fe:70:17:26:d0:63:24:48:a4:38:9b:39:c5:d5:dd: 62:49:d4:91:29:80:d1:84:90:32:1e:49:e5:21:d3:51:af:de: 0c:f3:22:e6:81:45:15:84:a5:a5:0b:c8:e1:11:95:c5:0b:93: a5:8c:d7:8a:b7:05:25:76:f4:fd:ce:15:e7:1a:43:39:18:38: f0:63:8b:46:96:6a:91:38:20:b4:c8:28:41:44:a9:24:7b:8e: d4:aa:99:e2:6d:38:98:31:c6:fd:60:17:fb:81:c5:de:3e:81: 45:ba:60:0b:04:7b:2d:b5:35:66:e5:02:8f:0b:38:15:a3:fe: 9a:1d:bd:80:82:ac:65:ce:41:5a:57:b8:db:48:27:3d:b7:33: 91:ed:1c:d3:25:5f:32:95:cb:51:28:22:71:08:06:67:37:9a: c7:96:5f:1d:8d:81:b8:07:91:35:61:84:a2:4e:6e:e1:f1:27: f2:a1:b1:75:0a:ce:21:56:50:68:3e:de:15:de:a6:82:f1:24: 7e:af:0a:f5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqQoNbfxhWZa3R2gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Y2ZkYWIyY2EtMzZhMy00NjY1LTkxNjAtYzBhNjY1NjVkMTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwQnNz320/RCJCK2uue+kgH+qUsQjG9+/M1G RFFfQ7TGQXlh4tfJylkYhfkg8nICmSSIuHH/f52f/aP92JK7EFmp5V+1T2tcle2C MW9NFPTWCdSQlyB/F7vXJUIpja4+7jHfSaPq9AUmuYAB3HMMV89gIuef90JKFIAD ptESGdMCx3iPDkMpFDFqikLeP/dtObw7g02P/bXxIebPU3JMCb2lId5Qazx24fu1 Pvj+h7Q+0iXJkJmmRruT9ij10x0q9CrKAsI9PuXAqpq073/TuI2VvTEo9jmsWo5w OEGH4sZqEZlUAR6vO/d3SgyTu+/UXbT4gYSa8k0/XlCLMq0+SQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL/6Neq3LnT4HRPB75kPsxzDFB/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTM5MWJhZGYtYzdjNS0z ZDU1LWEyMzItNmZkOTc3YjI5YjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6+DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAm3IJ2ANYkXKx4Uc9DUYhVzgB2molcuis0EDKHs/xlAf6ANSST7F5z aLDZg3tU9V5k4qECEut6efn+cBcm0GMkSKQ4mznF1d1iSdSRKYDRhJAyHknlIdNR r94M8yLmgUUVhKWlC8jhEZXFC5OljNeKtwUldvT9zhXnGkM5GDjwY4tGlmqROCC0 yChBRKkke47UqpnibTiYMcb9YBf7gcXePoFFumALBHsttTVm5QKPCzgVo/6aHb2A gqxlzkFaV7jbSCc9tzOR7RzTJV8ylctRKCJxCAZnN5rHll8djYG4B5E1YYSiTm7h 8SfyobF1Cs4hVlBoPt4V3qaC8SR+rwr1 -----END CERTIFICATE-----Generated at Mon Aug 4 19:00:05 2025 by rpki-client