$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa File: b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa (raw, json) Hash identifier: MWiu5GaZSKM6WJD/Hrldami3/DO4oGTNlrPRfyR22gs= Subject key identifier: D1:38:08:5E:6A:A2:18:EF:17:28:CA:9E:79:B8:AD:29:22:15:EB:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D69C0100FA1F5C1D1C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:3900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d6:9c:01:00:fa:1f:5c:1d:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=9ec76f1f-cfe2-41ab-81d4-f0506ada81f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:26:ef:1f:e8:63:69:8b:f0:de:e3:88:77:30: 70:1c:71:44:6a:f8:09:dd:0b:29:3d:02:d8:42:c7: ae:70:86:24:23:f4:fa:78:58:8a:98:e7:c4:99:de: e3:a1:db:a8:c1:cd:86:ea:c4:67:8a:f6:69:91:53: c6:c9:21:67:d9:d9:53:82:61:b0:f5:e3:25:64:e2: 1e:28:95:a8:e1:d2:51:d4:79:f1:ec:ec:22:01:99: 4e:43:14:27:2f:09:eb:35:87:c1:2d:9d:69:5f:0b: cf:e2:50:a3:96:e0:d5:f9:e7:9a:2c:35:6d:e6:0b: e7:e6:9a:dc:c3:60:a3:f7:d7:02:8d:95:61:f5:61: 22:3e:55:66:01:a6:3e:02:c0:1d:25:8c:67:b3:25: 66:2d:5f:65:03:9f:42:99:94:cb:8e:5e:28:dd:ea: ee:d1:a0:de:5d:73:5b:ae:ea:77:3f:8b:f4:9b:d4: 32:83:df:5f:bf:63:be:06:74:46:5b:04:e7:d5:ca: 1f:f0:4d:1b:0c:32:0d:82:88:cc:63:c8:af:55:46: de:8d:99:48:0c:02:c8:1b:7c:ae:87:df:dd:d1:48: 25:38:0f:31:8c:4d:cb:4b:52:a8:8a:77:f7:07:29: b8:73:47:98:f6:66:fd:fa:23:b2:f8:df:80:c4:94: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:38:08:5E:6A:A2:18:EF:17:28:CA:9E:79:B8:AD:29:22:15:EB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9daad4a-2536-3d1e-b6f3-7e25d28cb875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ce:92:d5:5b:dc:3c:2f:69:09:5d:3a:1f:3c:85:f2:01:c5: 19:ba:aa:5a:0a:0e:7c:45:c4:b2:19:0e:28:0d:47:01:5d:1f: 82:ef:79:21:55:37:df:29:60:3a:43:b1:b4:e3:da:0f:ec:36: 3a:9d:6c:7d:6a:d0:bb:99:03:50:d5:ee:0a:d6:22:16:11:26: d3:ab:d1:9d:cb:00:32:a6:d4:a4:6e:62:fe:49:f1:0c:17:31: 92:07:ed:a4:7c:89:da:be:72:ce:35:4c:1b:3e:ec:24:ba:6f: e5:1b:3f:19:7e:1a:4b:a4:50:f5:c0:23:fe:8a:d7:19:96:0e: dd:fe:bf:60:b6:c1:ee:ac:84:fb:c2:b9:8d:2d:dd:ed:be:da: be:f6:63:78:66:a8:a2:41:a2:94:12:d4:51:58:ae:24:ab:85: 42:30:66:7e:f0:af:fd:65:7d:df:0a:59:00:93:2c:c0:8f:9b: 15:f4:97:30:01:94:f7:22:13:99:55:8b:6a:b3:6d:ee:0e:ce: 72:e9:c1:1e:62:6e:b1:72:91:ca:c1:d9:e4:d0:26:94:2d:05: a4:e7:b7:39:e1:bc:0d:f1:90:15:92:a8:a8:88:aa:22:a3:f1: c8:cf:53:d9:9e:d7:93:65:6b:61:06:87:c4:74:f2:e1:63:63: 71:a7:07:d8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoNacAQD6H1wdHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OWVjNzZmMWYtY2ZlMi00MWFiLTgxZDQtZjA1MDZhZGE4MWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSbvH+hjaYvw3uOIdzBwHHFEavgJ3QspPQLY QseucIYkI/T6eFiKmOfEmd7joduowc2G6sRnivZpkVPGySFn2dlTgmGw9eMlZOIe KJWo4dJR1Hnx7OwiAZlOQxQnLwnrNYfBLZ1pXwvP4lCjluDV+eeaLDVt5gvn5prc w2Cj99cCjZVh9WEiPlVmAaY+AsAdJYxnsyVmLV9lA59CmZTLjl4o3eru0aDeXXNb rup3P4v0m9Qyg99fv2O+BnRGWwTn1cof8E0bDDINgojMY8ivVUbejZlIDALIG3yu h9/d0UglOA8xjE3LS1Koinf3Bym4c0eY9mb9+iOy+N+AxJSWfwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNE4CF5qohjvFyjKnnm4rSkiFet5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjlkYWFkNGEtMjUzNi0z ZDFlLWI2ZjMtN2UyNWQyOGNiODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLADkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKs6S1VvcPC9pCV06HzyF8gHFGbqqWgoOfEXEshkOKA1HAV0fgu95 IVU33ylgOkOxtOPaD+w2Op1sfWrQu5kDUNXuCtYiFhEm06vRncsAMqbUpG5i/knx DBcxkgftpHyJ2r5yzjVMGz7sJLpv5Rs/GX4aS6RQ9cAj/orXGZYO3f6/YLbB7qyE +8K5jS3d7b7avvZjeGaookGilBLUUViuJKuFQjBmfvCv/WV93wpZAJMswI+bFfSX MAGU9yITmVWLarNt7g7OcunBHmJusXKRysHZ5NAmlC0FpOe3OeG8DfGQFZKoqIiq IqPxyM9T2Z7Xk2VrYQaHxHTy4WNjcacH2A== -----END CERTIFICATE-----Generated at Wed Aug 6 07:52:57 2025 by rpki-client