$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa File: 9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa (raw, json) Hash identifier: Y86qBAwO8crBaUKFwimv44lMvINv5IfrWnmmoKwvwJw= Subject key identifier: A0:00:0F:20:48:C8:D3:8F:DA:0A:22:7C:FD:94:EC:F9:BD:D3:A3:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A96369B286894E31B0AFF7B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 2604:cb00:4300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:9b:28:68:94:e3:1b:0a:ff:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=dcac306c-855d-45c8-b1a5-04d09750b4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:3a:bf:a8:ef:8b:4e:71:99:56:6b:23:b1: af:f2:a3:4b:26:9c:85:c9:27:07:d3:87:a7:34:a9: db:24:7b:76:69:99:ce:67:68:7e:16:2d:7e:de:83: db:35:2c:9e:bd:54:9a:c3:bc:4e:9c:60:a3:e3:a9: 83:6d:39:35:fe:e6:54:2e:bf:0d:ce:a9:16:67:18: d2:ac:78:ab:ae:34:59:cc:0a:bc:02:4d:c2:3c:f7: f1:dd:ef:cf:60:d4:7a:6d:24:bc:ec:3f:43:d6:c9: e3:b1:9b:15:bb:2c:cd:ca:d4:b4:32:c3:71:68:92: a1:cc:76:20:b8:42:ba:06:1f:07:5a:da:32:ae:e7: 2b:e9:39:71:33:83:6e:59:43:b5:1d:0d:53:18:8d: 90:fc:1b:b3:23:b3:a4:19:91:c3:31:f0:cc:4f:89: 3d:3a:b8:49:bc:b5:60:25:a3:7d:16:ba:d9:83:2d: 63:d9:6b:bd:3a:c0:8f:eb:32:0f:a9:42:d6:34:eb: ac:eb:93:aa:e8:49:53:5b:fd:90:75:42:4b:b6:d5: 92:dc:c9:20:55:bc:cd:1d:3a:95:2a:16:7b:74:ab: 47:1c:71:93:48:39:f7:ce:18:12:4c:ec:19:46:4e: 94:49:15:0a:53:6f:4f:b6:3a:a6:e6:cd:c2:8b:b1: 8d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:00:0F:20:48:C8:D3:8F:DA:0A:22:7C:FD:94:EC:F9:BD:D3:A3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cd146a0-2d0c-310b-a5e3-d74d0254b0f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:4300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:81:88:d5:3f:11:df:80:eb:46:fc:d7:c5:fd:76:a6:7c:9b: b9:e8:ec:bf:91:a8:cc:a6:5d:fc:55:ee:b6:28:37:d3:2b:49: 3c:9a:80:8c:a6:a6:c8:55:09:2d:43:a2:a4:cb:74:66:ca:03: 11:6e:ce:98:0c:87:85:35:a2:9a:6d:ec:47:98:15:17:01:93: a0:0e:cb:d7:c5:7f:1e:51:58:92:8f:e7:03:9e:d2:ac:47:2a: b1:c4:8d:76:41:25:3d:d7:a1:92:14:4b:87:ac:a1:44:5b:69: 4c:cd:0d:6f:06:49:4b:08:3a:3d:1a:89:82:39:08:c1:9d:14: 77:d3:79:b0:bd:cc:53:32:ac:91:0d:77:39:6d:ed:15:71:12: 3e:ed:cb:48:55:18:0a:f4:f2:62:b4:10:87:c3:57:7d:da:27: 67:a1:31:c7:0c:be:88:06:a8:94:9f:22:57:d2:09:bb:f4:ae: 2b:5f:a3:c8:dd:4d:42:8b:76:68:cc:80:c4:9c:50:de:b4:78: be:bb:ef:b9:fb:a5:fa:9d:c9:3a:08:d7:4b:c5:14:88:47:21: fa:66:8a:08:99:85:98:4c:19:53:22:51:a2:18:34:aa:19:1b: f5:21:ce:7a:3c:76:32:3b:77:3e:ee:9f:dd:9f:74:f1:af:3e: a7:da:83:59 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqWNpsoaJTjGwr/e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZGNhYzMwNmMtODU1ZC00NWM4LWIxYTUtMDRkMDk3NTBiNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Q6v6jvi05xmVZrI7Gv8qNLJpyFyScH04en NKnbJHt2aZnOZ2h+Fi1+3oPbNSyevVSaw7xOnGCj46mDbTk1/uZULr8NzqkWZxjS rHirrjRZzAq8Ak3CPPfx3e/PYNR6bSS87D9D1snjsZsVuyzNytS0MsNxaJKhzHYg uEK6Bh8HWtoyrucr6TlxM4NuWUO1HQ1TGI2Q/BuzI7OkGZHDMfDMT4k9OrhJvLVg JaN9FrrZgy1j2Wu9OsCP6zIPqULWNOus65Oq6ElTW/2QdUJLttWS3MkgVbzNHTqV KhZ7dKtHHHGTSDn3zhgSTOwZRk6USRUKU29Ptjqm5s3Ci7GN+wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKAADyBIyNOP2goifP2U7Pm906MlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNkMTQ2YTAtMmQwYy0z MTBiLWE1ZTMtZDc0ZDAyNTRiMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAEMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjIGI1T8R34DrRvzXxf12pnybuejsv5GozKZd/FXutig30ytJPJqA jKamyFUJLUOipMt0ZsoDEW7OmAyHhTWimm3sR5gVFwGToA7L18V/HlFYko/nA57S rEcqscSNdkElPdehkhRLh6yhRFtpTM0NbwZJSwg6PRqJgjkIwZ0Ud9N5sL3MUzKs kQ13OW3tFXESPu3LSFUYCvTyYrQQh8NXfdonZ6Exxwy+iAaolJ8iV9IJu/SuK1+j yN1NQot2aMyAxJxQ3rR4vrvvuful+p3JOgjXS8UUiEch+maKCJmFmEwZUyJRohg0 qhkb9SHOejx2Mjt3Pu6f3Z908a8+p9qDWQ== -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:59 2025 by rpki-client