$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cf93025-4317-36ae-8a0b-2747749b1f8c.roa File: 9cf93025-4317-36ae-8a0b-2747749b1f8c.roa (raw, json) Hash identifier: IcZnsFo71BVtjTh4twZjUNaqvdbGGMses7ZVWzJ6JKM= Subject key identifier: 08:57:E9:6C:34:5D:87:76:E0:9B:87:96:5A:EA:3A:D4:EA:2C:4C:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D3370217F7220D609240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cf93025-4317-36ae-8a0b-2747749b1f8c.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d3:37:02:17:f7:22:0d:60:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=189db535-d7f1-46e0-a932-9d1397b97b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b2:8c:c9:8b:e2:84:08:4d:87:55:97:93:df: 71:0a:a6:64:40:af:48:5f:c7:c8:79:d7:fe:1a:0a: 29:45:9c:ba:a8:e7:7c:51:96:ff:76:7b:1b:3a:df: 12:2c:10:d4:a4:b0:35:44:57:48:00:66:a7:72:c8: 71:1a:b3:e7:23:35:f1:a9:a2:c9:f2:bd:07:7e:87: 42:a6:dc:a6:61:28:a9:e9:68:09:21:51:f9:c1:b1: 7f:be:dd:0d:62:16:1a:90:0e:0d:98:ae:4f:bf:01: 72:12:fa:3d:96:fd:66:9d:f2:5b:1a:e2:87:19:02: 41:39:3e:7f:d0:f3:cb:a6:b8:1a:40:b1:6f:30:f0: 89:19:75:ae:a0:ba:4d:b1:ba:0a:0a:ad:cc:63:02: eb:be:7c:63:69:14:c4:be:55:db:5d:31:60:53:ef: db:6d:b2:29:7d:27:06:6f:4e:9e:f2:b3:e7:23:cc: 4b:4c:bb:8d:68:3c:8e:c1:63:cd:b0:97:80:42:a5: 50:61:3b:e4:b6:1e:26:de:4d:49:7c:c0:09:97:2d: 20:74:79:8b:91:d1:a5:19:cc:61:2e:bc:fd:b4:23: 4e:71:bd:19:f5:5d:27:e9:73:63:af:2a:e5:a8:37: 17:e5:b6:96:f3:d1:b4:a4:87:6f:16:7d:af:37:66: 29:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:57:E9:6C:34:5D:87:76:E0:9B:87:96:5A:EA:3A:D4:EA:2C:4C:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cf93025-4317-36ae-8a0b-2747749b1f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:45:d3:51:28:9a:d7:b0:ee:b1:33:e9:9c:b3:38:9d:64:56: 0a:69:d7:23:c7:cd:b0:05:c6:b2:4c:3a:12:67:9c:2d:7a:8d: 20:15:5c:0c:8b:50:78:90:fd:94:e2:fb:24:6e:3a:0d:3a:df: ba:04:ec:83:5f:30:ba:f2:53:e7:73:a7:ee:e9:1f:aa:60:23: 50:9d:90:58:1e:ee:87:c6:40:cb:d9:f2:63:51:5b:97:cc:28: e8:fc:8e:29:68:bf:17:ad:fd:12:b0:90:ac:5c:29:da:76:55: f9:f7:b3:e1:90:46:03:f7:72:bf:ad:6a:eb:56:ff:5f:0a:22: 01:24:42:46:be:15:ba:49:08:d2:48:87:1c:a4:e5:f7:91:55: 65:e8:e9:90:d1:00:b8:70:db:59:3e:71:7f:36:49:63:55:27: 9b:2b:e7:ae:d6:d5:29:95:03:6e:e5:6e:4f:e9:ab:68:12:80: f3:a2:90:c0:78:bc:a2:f1:7c:fa:a9:3c:18:08:a3:96:39:1c: f7:70:7e:c0:66:d8:95:f0:99:18:6b:b8:e9:b6:86:11:30:81: bd:c8:94:64:c8:0a:af:9d:49:8c:36:9e:7e:cf:c8:8f:84:60: d3:08:3a:86:3e:c6:53:9c:45:3a:ce:b4:ed:79:ce:e5:ec:08: 1e:d3:41:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoNM3Ahf3Ig1gkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MTg5ZGI1MzUtZDdmMS00NmUwLWE5MzItOWQxMzk3Yjk3Yjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bKMyYvihAhNh1WXk99xCqZkQK9IX8fIedf+ GgopRZy6qOd8UZb/dnsbOt8SLBDUpLA1RFdIAGancshxGrPnIzXxqaLJ8r0HfodC ptymYSip6WgJIVH5wbF/vt0NYhYakA4NmK5PvwFyEvo9lv1mnfJbGuKHGQJBOT5/ 0PPLprgaQLFvMPCJGXWuoLpNsboKCq3MYwLrvnxjaRTEvlXbXTFgU+/bbbIpfScG b06e8rPnI8xLTLuNaDyOwWPNsJeAQqVQYTvkth4m3k1JfMAJly0gdHmLkdGlGcxh Lrz9tCNOcb0Z9V0n6XNjryrlqDcX5baW89G0pIdvFn2vN2Yp7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAhX6Ww0XYd24JuHllrqOtTqLEzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNmOTMwMjUtNDMxNy0z NmFlLThhMGItMjc0Nzc0OWIxZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABNF01Eomtew7rEz6ZyzOJ1kVgpp1yPHzbAFxrJMOhJnnC16jSAV XAyLUHiQ/ZTi+yRuOg0637oE7INfMLryU+dzp+7pH6pgI1CdkFge7ofGQMvZ8mNR W5fMKOj8jilovxet/RKwkKxcKdp2Vfn3s+GQRgP3cr+tautW/18KIgEkQka+FbpJ CNJIhxyk5feRVWXo6ZDRALhw21k+cX82SWNVJ5sr567W1SmVA27lbk/pq2gSgPOi kMB4vKLxfPqpPBgIo5Y5HPdwfsBm2JXwmRhruOm2hhEwgb3IlGTICq+dSYw2nn7P yI+EYNMIOoY+xlOcRTrOtO15zuXsCB7TQYE= -----END CERTIFICATE-----Generated at Fri Aug 8 10:17:46 2025 by rpki-client