$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c647cc5a-170a-36ba-9e36-30f3ec122c8c.roa File: c647cc5a-170a-36ba-9e36-30f3ec122c8c.roa (raw, json) Hash identifier: dfbaN3wtw9XszxSxcdLGE3WlKSvlZhtlG9eAMSdpuIw= Subject key identifier: 24:6B:28:39:D9:E0:14:8A:4A:57:8B:95:0C:BA:4E:68:DD:E4:2D:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D5878B1AB7E720709900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c647cc5a-170a-36ba-9e36-30f3ec122c8c.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:1300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d5:87:8b:1a:b7:e7:20:70:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=7c735e4c-bedc-4cea-86ab-d8042094cba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:d8:eb:c6:c9:2d:22:37:09:30:ff:e5:b9: 38:85:44:0d:e6:6c:93:59:bf:0f:9f:31:31:fa:99: eb:78:a0:81:39:a6:0e:f0:7f:23:49:dc:84:be:d8: 08:ec:c1:c6:41:6b:fb:19:75:d1:cc:f8:f5:7a:9e: e6:d8:91:cd:06:bf:83:3e:71:94:02:ca:da:5f:79: 6e:9d:05:ce:fd:fb:25:17:4f:59:8f:42:78:80:5a: 92:89:10:fa:84:f0:14:fd:14:ae:2b:68:4d:dc:6f: ae:92:8f:2a:15:30:1f:0a:68:e5:16:85:1e:83:f5: f4:03:e6:ee:94:59:d7:68:44:fd:65:a3:13:2c:52: d7:fe:71:ae:3a:75:70:2e:be:e1:16:12:7b:10:d1: b1:cf:d3:74:78:3e:cc:af:8e:e0:63:0d:73:58:70: 8b:ec:e9:e6:c4:b8:8b:09:81:15:02:18:6f:26:b3: 4b:19:d7:0d:03:7b:de:05:ae:64:3d:29:d3:be:31: 10:aa:67:f9:3e:50:d4:d2:c9:78:32:59:48:e6:7f: 54:5f:2a:14:73:c0:68:9d:fb:9f:a2:ce:a7:f5:9a: c9:79:72:45:8c:7b:2e:bf:52:62:e2:f6:1a:4c:b7: a9:cd:7b:44:7b:30:fb:9e:02:df:79:ec:8f:81:3b: 42:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6B:28:39:D9:E0:14:8A:4A:57:8B:95:0C:BA:4E:68:DD:E4:2D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c647cc5a-170a-36ba-9e36-30f3ec122c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:db:f1:c1:b8:17:40:41:7f:35:af:79:41:c9:eb:94:18:0e: 46:8b:58:b6:18:53:f3:85:fe:ee:50:2d:f1:35:98:61:83:fe: a3:2f:9a:de:c8:7f:64:bd:20:d6:fe:35:b7:b4:85:1b:c0:63: 40:ca:88:b2:da:be:8e:f2:85:59:c2:4e:80:d6:28:7d:51:13: d0:8f:56:16:65:08:3d:b0:11:67:ea:8d:4c:34:48:bf:85:dd: 48:96:54:63:01:fb:30:19:ad:05:83:a9:67:dc:d4:d7:ff:db: 3f:7d:ca:f8:52:95:04:28:e3:05:f2:e8:af:c3:ff:6d:f0:54: b0:54:cc:cf:9f:5b:36:00:84:92:3c:05:8e:93:c5:07:58:ba: 3c:8f:b4:aa:71:5d:e0:78:66:f9:23:ca:15:bf:79:02:fd:67: 91:9e:65:97:31:46:ee:ad:eb:41:f1:9f:13:bc:79:83:5a:77: cf:41:c1:98:df:2a:45:9f:35:38:35:59:a2:98:df:dc:9a:30: a1:2e:c1:dc:22:4e:19:68:3b:a0:a3:5e:86:3b:e3:ee:6b:75: 35:a0:46:b5:f3:67:99:02:f7:55:eb:7b:d9:b8:32:fe:7f:f4: 01:bc:31:df:d6:6c:64:d9:d6:55:4b:f1:f7:e9:d7:33:6c:fc: ea:f4:68:34 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoNWHixq35yBwmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk N2M3MzVlNGMtYmVkYy00Y2VhLTg2YWItZDgwNDIwOTRjYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJvY68bJLSI3CTD/5bk4hUQN5myTWb8PnzEx +pnreKCBOaYO8H8jSdyEvtgI7MHGQWv7GXXRzPj1ep7m2JHNBr+DPnGUAsraX3lu nQXO/fslF09Zj0J4gFqSiRD6hPAU/RSuK2hN3G+uko8qFTAfCmjlFoUeg/X0A+bu lFnXaET9ZaMTLFLX/nGuOnVwLr7hFhJ7ENGxz9N0eD7Mr47gYw1zWHCL7OnmxLiL CYEVAhhvJrNLGdcNA3veBa5kPSnTvjEQqmf5PlDU0sl4MllI5n9UXyoUc8Bonfuf os6n9ZrJeXJFjHsuv1Ji4vYaTLepzXtEezD7ngLfeeyPgTtChwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCRrKDnZ4BSKSleLlQy6Tmjd5C2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzY0N2NjNWEtMTcwYS0z NmJhLTllMzYtMzBmM2VjMTIyYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAa9vxwbgXQEF/Na95QcnrlBgORotYthhT84X+7lAt8TWYYYP+oy+a 3sh/ZL0g1v41t7SFG8BjQMqIstq+jvKFWcJOgNYofVET0I9WFmUIPbARZ+qNTDRI v4XdSJZUYwH7MBmtBYOpZ9zU1//bP33K+FKVBCjjBfLor8P/bfBUsFTMz59bNgCE kjwFjpPFB1i6PI+0qnFd4Hhm+SPKFb95Av1nkZ5llzFG7q3rQfGfE7x5g1p3z0HB mN8qRZ81ODVZopjf3JowoS7B3CJOGWg7oKNehjvj7mt1NaBGtfNnmQL3Vet72bgy /n/0Abwx39ZsZNnWVUvx9+nXM2z86vRoNA== -----END CERTIFICATE-----Generated at Wed Aug 6 13:15:16 2025 by rpki-client