$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b47a6b-3fa3-3165-b83e-6f041e8060b2.roa File: b4b47a6b-3fa3-3165-b83e-6f041e8060b2.roa (raw, json) Hash identifier: 3XyfFf4UJpXZkZL+rZTpkrNgDztx/AvbmbMQ174+/9I= Subject key identifier: BE:EE:C7:15:6B:FC:33:2C:52:E9:B0:98:DD:F3:21:4B:14:F7:2E:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D4258C551B6D0C325E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b47a6b-3fa3-3165-b83e-6f041e8060b2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d4:25:8c:55:1b:6d:0c:32:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ded3bd00-f0b8-4a45-b62c-dfbeb4f4e212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:7c:63:01:b5:e8:53:9a:11:5f:8b:a3:cd: b9:95:8b:c7:fa:4d:b8:93:cc:38:ad:f7:71:97:df: 39:9a:7d:23:90:fd:db:05:66:d9:49:52:dd:40:f8: 13:c2:a7:ea:2e:b1:a1:4c:6a:fb:8d:98:68:89:c1: 17:cd:c3:05:1f:20:f0:6d:99:8a:f4:ed:5c:7b:0e: f4:3b:6d:9b:15:07:f1:2c:c0:6e:65:04:a0:69:29: 85:d8:b0:a9:8c:e1:06:52:9a:9e:ee:ce:93:f3:d9: 36:8a:21:c2:d6:a0:bc:7a:0e:0a:97:5a:f1:da:a3: 43:fc:42:af:4d:41:a9:34:c3:6a:db:3b:03:80:c0: 3d:75:e7:f3:6b:21:92:ab:72:cd:9e:b7:46:61:6b: b7:4a:a7:98:53:fe:2e:39:f7:1b:5a:ef:2e:32:a9: b2:f2:3a:ef:46:fc:98:f5:cd:2e:8c:84:b0:cc:5b: 75:63:c9:25:ae:46:6d:98:5c:a7:d1:d1:a1:39:8d: f0:19:79:d3:46:56:94:e5:5c:01:75:74:90:1b:46: 2e:ba:51:7f:4a:7b:8d:cd:d1:89:1c:db:5c:11:a0: 4c:3e:7f:ab:9d:38:7d:2d:8a:a7:59:63:8a:f3:56: 86:6f:0e:b4:8e:0b:76:f9:92:04:ef:3d:16:4b:bc: 1f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EE:C7:15:6B:FC:33:2C:52:E9:B0:98:DD:F3:21:4B:14:F7:2E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b47a6b-3fa3-3165-b83e-6f041e8060b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:26::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:72:3f:7e:22:53:65:9a:b6:b2:be:db:55:c9:3d:fb:82:11: 98:a0:ea:c1:b6:d2:5e:72:58:b2:93:d7:8f:9c:06:bb:19:fa: a4:d5:df:0e:17:96:80:ae:2c:79:07:91:64:67:10:40:3b:d3: 47:6a:74:ef:28:d6:f9:19:6d:f9:db:1c:7b:0e:fc:42:08:e4: 15:cd:04:f9:e2:65:43:94:15:bd:fb:d0:e7:69:21:dc:96:b9: df:0e:0e:ec:5a:5c:a3:bd:ec:d2:d6:e1:41:0b:cc:7a:62:e3: fd:35:20:43:dd:ee:65:c6:d8:9a:df:4f:d1:94:ca:18:7f:a2: 9b:8b:e1:1d:b1:8c:67:3c:02:26:d0:14:04:cd:d6:a1:a7:7a: 5b:7d:07:5c:8d:49:59:c7:ac:be:28:6e:c0:a6:cd:63:44:bb: b3:1c:26:5e:6d:ce:f7:dc:8b:b1:8c:1d:9d:a7:94:0d:94:43: de:59:64:64:ac:2f:23:b8:3e:cb:2a:8a:06:ed:0e:81:c3:46: 8a:4a:af:6b:08:37:b0:43:26:68:a4:9d:72:40:70:e4:e8:8d: 70:da:c3:12:1a:6d:ce:44:01:e0:83:08:37:9e:12:8b:d3:eb: cb:8f:d7:5e:6d:cf:ef:8c:f5:06:10:fe:5a:34:8a:d4:7a:1d: 8d:2f:84:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoNQljFUbbQwyXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZGVkM2JkMDAtZjBiOC00YTQ1LWI2MmMtZGZiZWI0ZjRlMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf98YwG16FOaEV+Lo825lYvH+k24k8w4rfdx l985mn0jkP3bBWbZSVLdQPgTwqfqLrGhTGr7jZhoicEXzcMFHyDwbZmK9O1cew70 O22bFQfxLMBuZQSgaSmF2LCpjOEGUpqe7s6T89k2iiHC1qC8eg4Kl1rx2qND/EKv TUGpNMNq2zsDgMA9defzayGSq3LNnrdGYWu3SqeYU/4uOfcbWu8uMqmy8jrvRvyY 9c0ujISwzFt1Y8klrkZtmFyn0dGhOY3wGXnTRlaU5VwBdXSQG0YuulF/SnuNzdGJ HNtcEaBMPn+rnTh9LYqnWWOK81aGbw60jgt2+ZIE7z0WS7wf4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL7uxxVr/DMsUumwmN3zIUsU9y5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjRiNDdhNmItM2ZhMy0z MTY1LWI4M2UtNmYwNDFlODA2MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVyP34iU2WatrK+21XJPfuCEZig6sG20l5yWLKT14+cBrsZ+qTV 3w4XloCuLHkHkWRnEEA700dqdO8o1vkZbfnbHHsO/EII5BXNBPniZUOUFb370Odp IdyWud8ODuxaXKO97NLW4UELzHpi4/01IEPd7mXG2JrfT9GUyhh/opuL4R2xjGc8 AibQFATN1qGnelt9B1yNSVnHrL4obsCmzWNEu7McJl5tzvfci7GMHZ2nlA2UQ95Z ZGSsLyO4PssqigbtDoHDRopKr2sIN7BDJmiknXJAcOTojXDawxIabc5EAeCDCDee EovT68uP115tz++M9QYQ/lo0itR6HY0vhO4= -----END CERTIFICATE-----Generated at Mon Aug 4 16:11:55 2025 by rpki-client