$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa File: b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa (raw, json) Hash identifier: CV9OD0mi1QK7I1CnRiLSm2lp2nDX5EYjV+Splp9OsIw= Subject key identifier: 82:D2:7D:33:B6:43:04:D0:A7:51:33:70:DB:AE:92:F7:AF:6D:11:9C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D3A50DEFD00003871940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d3:a5:0d:ef:d0:00:03:87:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=88cd7b4c-5f3a-4083-8de3-019b34e70db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:1e:65:8a:fa:9c:6a:cb:72:ef:f2:4f:bf: d4:ea:17:e3:4a:83:d4:0d:cf:84:fa:81:d5:3b:26: 84:e3:3f:fb:5f:67:92:41:95:21:44:b5:ff:2c:38: 50:80:62:b2:79:7b:d3:d0:5a:a5:dc:22:0a:9e:f3: 72:0c:7f:18:3d:c4:e2:04:39:a6:7f:9b:85:c9:b5: fb:4b:e9:a1:1e:8a:c4:36:6c:e3:36:ae:4c:f3:61: f1:06:8d:b1:5e:9d:ee:05:48:2f:ef:b5:85:dc:f5: 3a:32:66:49:ce:aa:35:a7:93:f4:18:f1:39:a1:ce: 83:e9:e3:63:eb:37:20:c6:8e:71:54:86:fe:f4:f5: e3:69:0c:ba:7a:0e:49:54:90:c2:1a:bb:08:70:ca: d4:37:66:8a:5d:80:22:17:fa:ad:c3:0e:31:a1:89: 39:d6:ec:f4:93:b2:c4:8e:48:1d:3d:06:e5:65:20: 04:84:22:aa:d7:78:98:35:15:28:ec:ec:ac:2a:51: de:af:4b:12:a2:a0:f4:7d:d1:c1:76:4b:70:d3:63: 60:6f:e1:04:dc:3f:3c:36:b3:aa:43:9f:d7:9f:f3: 90:dc:9c:da:41:67:ae:7d:de:a9:3e:d4:f8:ad:09: 52:3e:ab:07:68:ed:f4:07:3b:18:fe:47:78:77:8a: d3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D2:7D:33:B6:43:04:D0:A7:51:33:70:DB:AE:92:F7:AF:6D:11:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3716f36-9d51-3a48-bc1a-a6b5f7e28655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:da:60:73:a9:19:0d:18:85:29:0e:e5:07:63:11:c1:ed:5d: 28:8c:92:ff:1b:58:c2:9d:13:1d:a0:5a:50:8e:55:3d:d6:36: d8:fb:31:1e:80:03:fa:4a:66:e7:43:4a:60:72:f6:08:f1:1a: 03:8e:d7:48:7e:02:2e:14:59:8e:5a:3f:33:3e:7c:77:b1:8f: b3:21:fe:2a:34:bc:ab:9f:16:0d:1e:42:a7:07:46:84:2d:5a: 5f:e9:12:25:d9:85:78:03:16:cc:f9:0c:40:02:e4:8b:b5:dd: 0f:34:70:b0:f7:42:a5:28:3b:6b:f8:c4:dc:49:1a:fd:ab:1b: 87:d3:6e:d9:15:2a:3b:77:06:7c:27:0d:63:c9:f9:b0:10:b2: 68:d8:52:65:27:35:82:7f:2a:4b:14:8c:8d:30:b9:9a:38:7e: 02:f2:35:d0:eb:36:03:f1:42:6a:23:34:3d:9d:42:7f:69:97: c2:9d:c1:87:bb:28:e3:4c:39:e8:0d:95:a2:98:15:1e:f1:cb: 65:c6:31:47:f2:4f:a0:7f:77:f6:ca:a2:4c:5f:e3:99:a4:1a: 96:2c:67:71:5d:6b:44:cd:67:ba:c0:41:73:f7:bc:51:9b:bb: ed:08:dd:50:1f:e3:ac:8c:2f:ce:24:79:c0:14:f2:97:56:27: 16:f7:b0:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoNOlDe/QAAOHGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ODhjZDdiNGMtNWYzYS00MDgzLThkZTMtMDE5YjM0ZTcwZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqQeZYr6nGrLcu/yT7/U6hfjSoPUDc+E+oHV OyaE4z/7X2eSQZUhRLX/LDhQgGKyeXvT0Fql3CIKnvNyDH8YPcTiBDmmf5uFybX7 S+mhHorENmzjNq5M82HxBo2xXp3uBUgv77WF3PU6MmZJzqo1p5P0GPE5oc6D6eNj 6zcgxo5xVIb+9PXjaQy6eg5JVJDCGrsIcMrUN2aKXYAiF/qtww4xoYk51uz0k7LE jkgdPQblZSAEhCKq13iYNRUo7OysKlHer0sSoqD0fdHBdktw02Ngb+EE3D88NrOq Q5/Xn/OQ3JzaQWeufd6pPtT4rQlSPqsHaO30BzsY/kd4d4rTMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFILSfTO2QwTQp1EzcNuukvevbRGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjM3MTZmMzYtOWQ1MS0z YTQ4LWJjMWEtYTZiNWY3ZTI4NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABfaYHOpGQ0YhSkO5QdjEcHtXSiMkv8bWMKdEx2gWlCOVT3WNtj7 MR6AA/pKZudDSmBy9gjxGgOO10h+Ai4UWY5aPzM+fHexj7Mh/io0vKufFg0eQqcH RoQtWl/pEiXZhXgDFsz5DEAC5Iu13Q80cLD3QqUoO2v4xNxJGv2rG4fTbtkVKjt3 BnwnDWPJ+bAQsmjYUmUnNYJ/KksUjI0wuZo4fgLyNdDrNgPxQmojND2dQn9pl8Kd wYe7KONMOegNlaKYFR7xy2XGMUfyT6B/d/bKokxf45mkGpYsZ3Fda0TNZ7rAQXP3 vFGbu+0I3VAf46yML84kecAU8pdWJxb3sP4= -----END CERTIFICATE-----Generated at Wed Aug 6 00:42:00 2025 by rpki-client