$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4090cc7-d59b-33be-9408-78258d3ef95f.roa File: a4090cc7-d59b-33be-9408-78258d3ef95f.roa (raw, json) Hash identifier: RUkp5AbiP85cCmIzp/B/fBEI1DXiPbsLTDlttGzfIZw= Subject key identifier: 3D:34:9D:28:AB:73:5A:71:96:35:ED:9F:C0:12:60:DF:68:D3:C5:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D43F8F14F27B976BFA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4090cc7-d59b-33be-9408-78258d3ef95f.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d4:3f:8f:14:f2:7b:97:6b:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=21a19ccb-c362-4de3-9e7d-d42ba2566e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:10:7e:ff:15:65:2c:cd:13:18:a6:f7:68:21: 87:44:6d:3b:78:08:6e:a1:72:a3:8c:5e:3a:7a:95: 5c:cc:92:df:66:44:57:31:7c:eb:5c:d3:24:8e:3b: 9f:1f:65:c5:fc:f0:4f:ab:2e:60:76:a8:bc:31:7b: 6a:95:97:0d:ad:94:00:3e:f5:de:e9:4a:29:6a:ac: 0b:80:c0:1e:63:e4:1d:dc:1f:96:1f:bc:e7:e8:f8: 9c:c0:5f:1b:a7:45:e4:0d:21:dd:bc:dd:7d:7e:e3: e8:1f:55:1a:ee:a8:06:71:cf:9c:16:28:ad:46:f6: c0:66:1b:0f:db:e8:e3:c6:85:be:ff:3f:64:8e:9e: 39:81:a7:d1:d7:61:d8:86:12:25:89:ac:83:c4:1b: 2b:16:d3:8a:ab:fa:80:6f:94:89:52:6e:1d:e5:d0: 73:41:82:e2:cf:74:0e:4c:48:07:39:90:fc:47:3c: 57:60:35:95:03:f0:60:88:e0:14:eb:38:91:2e:e8: e3:8a:3b:57:bf:7d:1a:d4:0a:fb:91:90:75:3f:6c: ee:2e:d7:9d:14:e4:79:6b:a1:5f:bd:22:db:a6:a4: 14:0c:1a:bc:f9:e0:0e:69:b9:71:4c:0a:04:56:5e: c9:a3:57:b8:be:d6:1a:c1:20:1a:5f:3d:b9:6a:19: 8d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:34:9D:28:AB:73:5A:71:96:35:ED:9F:C0:12:60:DF:68:D3:C5:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4090cc7-d59b-33be-9408-78258d3ef95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:24:bd:33:08:29:47:76:a7:b5:53:05:01:c2:b6:00:11:a7: 0b:38:35:cc:dd:93:8c:3a:2f:dc:dc:fd:bb:2b:e5:ba:8d:7b: da:9f:3f:70:d5:c4:8d:7f:ab:5a:7e:86:af:53:82:e3:db:0f: 2d:54:ef:bb:76:01:16:8d:cf:0f:8a:46:98:26:69:32:6e:0d: 90:53:63:69:a9:44:64:1a:f4:91:e1:03:1c:7f:c2:7e:ba:90: 7d:dc:f7:0b:a9:c3:4f:df:5a:3d:8c:fd:e7:2e:f8:13:c4:73: 52:cf:c2:b2:26:f1:ef:44:71:30:2d:4d:94:94:e7:45:0c:e1: a2:88:07:33:0b:38:0f:ac:96:99:81:da:1c:6c:80:b3:83:79: 4d:90:a0:8a:0b:85:cb:fe:00:51:00:ac:cf:13:38:9a:0c:2c: b1:a9:0f:55:47:b0:16:13:c6:61:71:a6:c3:41:c8:13:bb:94: e2:de:fa:da:3e:c2:09:59:a0:87:48:be:a6:f2:d0:91:74:38: 41:82:31:02:8d:2a:0a:93:fc:f6:52:41:65:1c:7e:39:cf:03: 13:91:01:de:3e:12:5f:a8:12:0f:e3:bc:5b:64:8a:12:4b:45: 34:df:cc:98:0b:0b:9c:f5:7c:2f:23:78:e4:4d:71:f2:e0:58: 02:06:e9:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoNQ/jxTye5dr+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MjFhMTljY2ItYzM2Mi00ZGUzLTllN2QtZDQyYmEyNTY2ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRB+/xVlLM0TGKb3aCGHRG07eAhuoXKjjF46 epVczJLfZkRXMXzrXNMkjjufH2XF/PBPqy5gdqi8MXtqlZcNrZQAPvXe6UopaqwL gMAeY+Qd3B+WH7zn6PicwF8bp0XkDSHdvN19fuPoH1Ua7qgGcc+cFiitRvbAZhsP 2+jjxoW+/z9kjp45gafR12HYhhIliayDxBsrFtOKq/qAb5SJUm4d5dBzQYLiz3QO TEgHOZD8RzxXYDWVA/BgiOAU6ziRLujjijtXv30a1Ar7kZB1P2zuLtedFOR5a6Ff vSLbpqQUDBq8+eAOablxTAoEVl7Jo1e4vtYawSAaXz25ahmNIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD00nSirc1pxljXtn8ASYN9o08WmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQwOTBjYzctZDU5Yi0z M2JlLTk0MDgtNzgyNThkM2VmOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUkvTMIKUd2p7VTBQHCtgARpws4Nczdk4w6L9zc/bsr5bqNe9qf P3DVxI1/q1p+hq9TguPbDy1U77t2ARaNzw+KRpgmaTJuDZBTY2mpRGQa9JHhAxx/ wn66kH3c9wupw0/fWj2M/ecu+BPEc1LPwrIm8e9EcTAtTZSU50UM4aKIBzMLOA+s lpmB2hxsgLODeU2QoIoLhcv+AFEArM8TOJoMLLGpD1VHsBYTxmFxpsNByBO7lOLe +to+wglZoIdIvqby0JF0OEGCMQKNKgqT/PZSQWUcfjnPAxORAd4+El+oEg/jvFtk ihJLRTTfzJgLC5z1fC8jeORNcfLgWAIG6bU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:38:07 2025 by rpki-client