$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa File: a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa (raw, json) Hash identifier: g95Wf500x0yrxtoR8I1YhsN6i3u2AzWc9HR9PDAs7z8= Subject key identifier: 0D:F7:AE:6D:48:5A:A2:45:AF:35:B8:38:48:65:A2:12:7D:85:58:9C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A10395B3681A8366CDE200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:03:95:b3:68:1a:83:66:cd:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=2bfcd768-2d40-4741-ac63-aa58d53f2819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:f6:f8:1e:6e:ef:31:e8:4e:36:55:72:1f: c8:c6:0e:b5:5b:7b:7c:09:ef:1b:d1:e9:ea:8a:51: 02:d2:8d:22:2d:99:f3:22:96:30:c5:cb:18:3c:93: 4b:2e:d5:e5:35:af:ca:00:2c:30:bc:36:df:de:ea: 18:92:9f:82:96:89:c6:da:54:17:ba:d2:8a:94:83: f2:71:de:84:de:f4:64:a2:a9:22:96:c3:4c:47:d5: 2a:2b:1a:57:26:4e:41:cb:4c:ea:14:ee:1b:8d:d1: 6e:a6:68:62:14:f8:85:55:80:44:61:f4:fd:05:c9: 49:97:6f:84:e2:79:a2:8b:42:19:f0:7f:00:3c:67: 11:88:3c:1f:1a:fd:51:c7:f0:2d:bb:93:51:33:70: 5d:96:67:54:7b:9f:75:c9:1b:e4:9b:cc:58:94:10: 63:60:c5:9c:a1:83:43:24:dc:d3:7a:bf:b4:a6:84: c9:b0:98:14:a4:2b:82:f9:d7:4e:6c:4f:bf:81:4a: 60:15:6c:79:28:61:aa:49:22:ed:05:6b:68:2f:c7: 92:de:f2:58:17:6e:45:a4:5f:b3:95:c8:a1:ce:3e: 3f:b6:6f:48:63:98:0a:75:a7:c7:25:52:06:a1:7e: 92:e5:39:62:61:31:ee:a5:20:fb:4c:38:89:31:85: 8e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F7:AE:6D:48:5A:A2:45:AF:35:B8:38:48:65:A2:12:7D:85:58:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9eb37c9-e69f-31fe-abcf-e8fff03e4560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:37::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:dd:bb:ea:c0:75:57:57:f3:6c:6a:6f:6b:b9:49:a0:96:4a: db:50:0a:24:c2:0b:ef:ea:12:55:a2:7b:91:49:63:02:3b:49: f8:88:6f:fb:32:1b:61:88:12:af:55:32:2e:eb:19:9f:1a:63: a3:8c:29:62:e7:9c:a5:b2:55:b3:79:9b:2f:4a:62:72:8a:6b: 63:f8:38:f6:05:35:96:e6:45:25:dc:38:94:a9:f0:76:cb:2a: 3a:6d:17:cd:a0:95:e3:0f:c4:5f:74:3a:4a:1a:ab:99:ab:9b: d6:a0:6f:71:c6:39:83:25:70:96:a9:85:95:51:83:9c:dd:b9: f8:30:a7:78:63:c7:0c:06:d8:5a:d8:ae:5d:8d:49:bc:e9:c7: 52:b7:31:38:2c:d9:50:8c:32:3c:41:43:69:7a:bf:46:31:9d: 29:26:ec:80:4d:57:f5:15:ce:9d:5f:c4:ce:ab:a4:0d:ec:35: 87:74:51:f9:ee:13:d3:85:e9:4e:a0:45:59:0c:b5:e7:b7:cb: 02:d2:58:49:af:f0:4f:cd:10:10:d6:5c:18:e9:6c:0a:ed:0a: 0a:51:75:e6:0d:2d:a5:67:e9:a6:2d:5b:cf:48:63:ac:8c:e5: ee:9e:17:1c:d3:52:18:f5:c1:c0:7f:7c:23:9d:4d:ae:97:29: e2:a7:64:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoQOVs2gag2bN4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MmJmY2Q3NjgtMmQ0MC00NzQxLWFjNjMtYWE1OGQ1M2YyODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV32+B5u7zHoTjZVch/Ixg61W3t8Ce8b0enq ilEC0o0iLZnzIpYwxcsYPJNLLtXlNa/KACwwvDbf3uoYkp+ClonG2lQXutKKlIPy cd6E3vRkoqkilsNMR9UqKxpXJk5By0zqFO4bjdFupmhiFPiFVYBEYfT9BclJl2+E 4nmii0IZ8H8APGcRiDwfGv1Rx/Atu5NRM3BdlmdUe591yRvkm8xYlBBjYMWcoYND JNzTer+0poTJsJgUpCuC+ddObE+/gUpgFWx5KGGqSSLtBWtoL8eS3vJYF25FpF+z lcihzj4/tm9IY5gKdafHJVIGoX6S5TliYTHupSD7TDiJMYWO+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA33rm1IWqJFrzW4OEhlohJ9hVicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTllYjM3YzktZTY5Zi0z MWZlLWFiY2YtZThmZmYwM2U0NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETdu+rAdVdX82xqb2u5SaCWSttQCiTCC+/qElWie5FJYwI7SfiI b/syG2GIEq9VMi7rGZ8aY6OMKWLnnKWyVbN5my9KYnKKa2P4OPYFNZbmRSXcOJSp 8HbLKjptF82gleMPxF90Okoaq5mrm9agb3HGOYMlcJaphZVRg5zdufgwp3hjxwwG 2FrYrl2NSbzpx1K3MTgs2VCMMjxBQ2l6v0YxnSkm7IBNV/UVzp1fxM6rpA3sNYd0 UfnuE9OF6U6gRVkMtee3ywLSWEmv8E/NEBDWXBjpbArtCgpRdeYNLaVn6aYtW89I Y6yM5e6eFxzTUhj1wcB/fCOdTa6XKeKnZHc= -----END CERTIFICATE-----Generated at Mon Aug 4 19:01:16 2025 by rpki-client