$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df01aade-e946-3063-937a-7e128c9c6dc1.roa File: df01aade-e946-3063-937a-7e128c9c6dc1.roa (raw, json) Hash identifier: l7Wd7a2l99rd4EOKWbuDieo27dTaLbFsJrGD/Y63Ch8= Subject key identifier: 65:38:E1:00:99:17:1C:B2:26:7A:32:17:B6:90:71:9F:71:83:8C:1B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D604C1D62200AB725E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df01aade-e946-3063-937a-7e128c9c6dc1.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:1d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d6:04:c1:d6:22:00:ab:72:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=fe3a060d-d5d4-4f5e-84d0-c15a50410f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:03:0d:6a:4c:3b:3c:ef:89:af:19:4e:80:55: 4b:ad:78:20:4d:72:94:b7:68:33:ff:7d:b3:7d:1a: fb:3a:2d:30:94:0c:5b:a9:fd:ff:06:04:f0:2b:5b: 4d:27:46:7a:e5:3d:5b:21:eb:fc:66:f5:c1:bb:06: e9:f0:cb:98:bd:9c:08:17:df:fe:1f:d5:42:41:47: e0:ea:c0:9d:0b:45:fd:1a:03:1b:e3:ac:df:51:3a: bc:19:23:86:40:6c:14:b4:35:e5:51:2b:e8:51:4e: 39:f9:b3:b5:0b:9d:bf:b3:dc:59:9f:15:3d:12:2d: 93:ab:c1:a4:22:65:3c:f4:3d:67:97:a1:30:78:63: 54:4f:5e:5d:71:41:78:06:d8:d5:4f:a3:d3:c0:48: f9:e6:e6:19:8a:f8:ee:5d:03:7d:5a:ad:23:f6:88: 1b:bf:a3:be:96:8a:bd:c9:47:ce:44:6a:6f:15:3b: 64:fb:1a:b6:d8:dd:4b:b4:3a:43:cb:f5:d5:8d:93: 8b:60:a8:87:6b:39:27:3d:99:7c:d2:e1:30:37:8a: 22:b8:a7:80:9e:ad:b6:1b:94:65:3a:74:e4:04:25: a6:5c:bf:fd:2a:38:a2:2e:b6:1d:db:eb:4f:2b:39: 5f:b6:9f:8b:50:b5:2f:26:73:5e:3d:07:6a:84:ee: 7c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:38:E1:00:99:17:1C:B2:26:7A:32:17:B6:90:71:9F:71:83:8C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df01aade-e946-3063-937a-7e128c9c6dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:41:f7:b7:fe:27:8a:5b:91:45:13:3b:4a:68:19:a1:d1:e2: be:e2:41:df:71:14:b7:30:ae:9a:0f:cb:0a:1b:38:e6:20:6f: 11:0b:d4:44:ea:ee:50:2c:37:b6:48:39:9c:cc:59:ed:62:18: 1e:a1:7e:9f:02:1b:cd:01:55:12:5d:64:93:67:0c:8f:7e:fe: dd:29:40:66:0a:8d:52:5d:b7:3f:d8:1d:0d:94:53:a5:3f:3d: 55:11:ef:fe:29:0b:27:5b:b4:7f:53:a1:99:6b:cb:8e:bd:f6: 46:29:97:35:68:f3:10:49:4a:85:e6:7f:8b:97:32:87:3f:be: c2:09:66:88:cc:82:ec:1e:b9:fc:fd:57:6d:94:5f:82:70:6c: a0:1c:ad:d6:64:64:15:b3:7b:bc:80:f9:b4:b2:b9:55:78:e9: e7:6e:20:81:29:04:bc:46:83:1c:5a:e8:6b:65:e3:06:14:e3: 86:81:7a:cc:48:b2:1d:0f:b8:e7:84:20:0b:ce:5f:9c:5a:e7: 3b:23:2d:7f:ad:fb:b1:cb:47:8c:f7:87:73:d1:f0:e7:c8:f3: e7:b6:3f:ea:14:19:a2:aa:48:fc:a7:33:cb:8e:40:51:7d:a0: a5:dd:66:88:11:98:27:2a:63:46:df:55:f7:74:a6:0a:dd:01: d4:3a:86:af -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoNYEwdYiAKtyXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZmUzYTA2MGQtZDVkNC00ZjVlLTg0ZDAtYzE1YTUwNDEwZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AMNakw7PO+JrxlOgFVLrXggTXKUt2gz/32z fRr7Oi0wlAxbqf3/BgTwK1tNJ0Z65T1bIev8ZvXBuwbp8MuYvZwIF9/+H9VCQUfg 6sCdC0X9GgMb46zfUTq8GSOGQGwUtDXlUSvoUU45+bO1C52/s9xZnxU9Ei2Tq8Gk ImU89D1nl6EweGNUT15dcUF4BtjVT6PTwEj55uYZivjuXQN9Wq0j9ogbv6O+loq9 yUfORGpvFTtk+xq22N1LtDpDy/XVjZOLYKiHazknPZl80uEwN4oiuKeAnq22G5Rl OnTkBCWmXL/9KjiiLrYd2+tPKzlftp+LULUvJnNePQdqhO58zQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGU44QCZFxyyJnoyF7aQcZ9xg4wbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGYwMWFhZGUtZTk0Ni0z MDYzLTkzN2EtN2UxMjhjOWM2ZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLAB0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAakH3t/4niluRRRM7SmgZodHivuJB33EUtzCumg/LChs45iBvEQvU ROruUCw3tkg5nMxZ7WIYHqF+nwIbzQFVEl1kk2cMj37+3SlAZgqNUl23P9gdDZRT pT89VRHv/ikLJ1u0f1OhmWvLjr32RimXNWjzEElKheZ/i5cyhz++wglmiMyC7B65 /P1XbZRfgnBsoByt1mRkFbN7vID5tLK5VXjp524ggSkEvEaDHFroa2XjBhTjhoF6 zEiyHQ+454QgC85fnFrnOyMtf637sctHjPeHc9Hw58jz57Y/6hQZoqpI/Kczy45A UX2gpd1miBGYJypjRt9V93SmCt0B1DqGrw== -----END CERTIFICATE-----Generated at Wed Aug 6 16:08:01 2025 by rpki-client