$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa File: bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa (raw, json) Hash identifier: uyP6Hv3gH9c1JFegjGQZyKdfAiCOcUlC/TvPre6WVB0= Subject key identifier: F0:BB:FD:42:E3:A5:E4:76:B8:D1:E9:06:A5:A5:0F:88:50:62:1F:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A103A45753E317F4215D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:03:a4:57:53:e3:17:f4:21:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=5fd3db09-9eea-4315-a2d4-bbc33c66e9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ca:2c:47:e4:fa:0a:3f:2f:7a:80:2c:15:8d: c9:15:3f:39:92:c0:33:0e:f2:3e:e0:6f:e6:22:01: 58:bf:84:f4:c8:89:52:ba:cf:6c:53:72:40:0f:5e: b6:68:a6:3a:b6:33:07:30:b9:f2:d3:2b:14:64:0b: bd:7d:c1:7e:c3:8d:df:b7:b2:73:37:bc:e9:2e:31: 44:b1:13:e7:13:9f:de:a3:8c:b4:cd:c1:09:12:a1: ba:97:67:48:7d:5d:0a:8c:75:05:16:b8:fc:9e:ee: 04:c7:af:c4:f9:82:a6:71:32:30:4e:80:13:da:f6: 70:15:2b:23:61:ad:37:7b:3e:fc:e3:37:d5:ba:b9: 4f:5a:8b:01:b1:60:7d:36:d1:bd:fd:b6:16:22:17: 32:24:42:af:10:7c:9a:a5:ff:04:52:84:d1:35:f9: 90:61:6f:57:36:0f:a9:11:b8:3c:66:52:53:fb:7e: 2b:d3:aa:3e:bf:7e:78:85:a7:3c:a9:c9:33:18:5a: 43:e7:14:35:d6:30:dc:4c:0d:8a:d3:dc:21:af:d5: cd:5d:49:57:c7:86:4d:55:20:88:ec:e7:e0:61:3a: dc:ef:44:b0:e2:9e:d3:90:0c:44:8c:ba:6e:7c:6b: 8b:6d:fe:4a:dd:50:97:70:c2:10:6e:3f:ad:e7:3d: 68:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BB:FD:42:E3:A5:E4:76:B8:D1:E9:06:A5:A5:0F:88:50:62:1F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:39::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0d:20:1b:8c:9e:2e:3f:93:13:da:95:5f:8d:39:3e:47:56: 80:54:e3:ab:d2:7a:0f:a9:51:86:2f:5e:b2:15:64:36:a8:24: b4:17:3f:b9:0d:76:b0:ee:b6:46:6e:df:f5:70:62:98:55:4f: bb:28:92:95:82:f6:b7:72:26:d0:2f:e4:55:ce:7a:b1:2e:2a: 34:a7:79:9f:e4:34:4e:05:af:f7:b6:6a:e3:8d:b4:dd:e3:dc: 39:37:9f:65:77:07:29:56:b0:62:e9:c1:5c:96:4c:b3:61:31: f0:1f:ac:49:bd:7c:2c:bf:c0:1e:77:f5:8d:77:b2:36:2a:86: d5:bc:e7:49:58:cd:ba:41:27:19:70:06:7e:af:ca:0d:dd:ba: 4c:ea:79:e3:41:09:56:0a:30:a0:04:61:ed:6c:d2:eb:92:60: 02:b4:af:6b:87:1f:81:82:e8:5e:12:b7:75:31:c3:c5:44:4e: df:3a:ac:60:c8:84:27:8f:83:7f:d2:2f:f6:b5:ea:5f:18:5c: 1b:1e:2b:aa:2d:4a:1b:74:55:3f:2f:d2:06:5d:01:29:be:ce: 88:fd:47:1d:00:4f:c0:94:4f:96:86:dc:b8:d6:31:3d:d3:da: 43:76:f3:04:28:79:14:2d:ca:2c:7c:80:8f:8f:8e:5c:de:96: bd:5c:cc:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoQOkV1PjF/QhXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NWZkM2RiMDktOWVlYS00MzE1LWEyZDQtYmJjMzNjNjZlOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsosR+T6Cj8veoAsFY3JFT85ksAzDvI+4G/m IgFYv4T0yIlSus9sU3JAD162aKY6tjMHMLny0ysUZAu9fcF+w43ft7JzN7zpLjFE sRPnE5/eo4y0zcEJEqG6l2dIfV0KjHUFFrj8nu4Ex6/E+YKmcTIwToAT2vZwFSsj Ya03ez784zfVurlPWosBsWB9NtG9/bYWIhcyJEKvEHyapf8EUoTRNfmQYW9XNg+p Ebg8ZlJT+34r06o+v354hac8qckzGFpD5xQ11jDcTA2K09whr9XNXUlXx4ZNVSCI 7OfgYTrc70Sw4p7TkAxEjLpufGuLbf5K3VCXcMIQbj+t5z1ovwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPC7/ULjpeR2uNHpBqWlD4hQYh+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmM1YTJmNGItYTZmYS0z NzJhLWI3YjEtZTk4YjY1ZTUxMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG8NIBuMni4/kxPalV+NOT5HVoBU46vSeg+pUYYvXrIVZDaoJLQX P7kNdrDutkZu3/VwYphVT7sokpWC9rdyJtAv5FXOerEuKjSneZ/kNE4Fr/e2auON tN3j3Dk3n2V3BylWsGLpwVyWTLNhMfAfrEm9fCy/wB539Y13sjYqhtW850lYzbpB JxlwBn6vyg3dukzqeeNBCVYKMKAEYe1s0uuSYAK0r2uHH4GC6F4St3Uxw8VETt86 rGDIhCePg3/SL/a16l8YXBseK6otSht0VT8v0gZdASm+zoj9Rx0AT8CUT5aG3LjW MT3T2kN28wQoeRQtyix8gI+Pjlzelr1czE4= -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:40 2025 by rpki-client