$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa File: dfae6790-4364-3d1e-9409-6da10de1af43.roa (raw, json) Hash identifier: 91FyB+STPAhLyQKg1i77b2PTqDUpkIOaKPZA1EnMk6Y= Subject key identifier: 34:17:76:2B:8D:77:1D:77:8A:C1:85:9C:41:A7:3F:82:93:BC:0D:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D5F5033B3D38DFCA7770 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:1c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d5:f5:03:3b:3d:38:df:ca:77:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8bbeb247-4419-43b5-84e8-81528ebdff3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:87:fa:e1:4e:bb:62:74:39:67:98:c3:c6: 89:8a:bb:e1:eb:35:ea:6f:af:0a:f0:15:a3:cf:16: 3a:29:e4:fe:f6:14:7a:0b:72:42:7a:49:61:0e:0e: 02:1d:97:f9:4c:d0:1f:a5:4d:56:35:45:59:87:a4: f4:2f:12:33:f0:4b:76:6d:36:9f:31:1e:01:63:fd: 6d:bf:2c:4b:5a:cb:cb:60:ea:49:a7:ae:2d:b3:be: 11:ae:e9:50:94:fd:03:cb:74:5c:fa:c1:cd:bf:46: 15:10:cc:53:ea:33:fd:46:c8:2b:0c:02:37:ae:98: b1:5c:15:61:5a:f1:85:d1:31:2d:4c:a3:47:c7:26: 0c:2e:3b:30:e7:23:59:38:cd:1b:3a:19:2f:7c:e6: 67:b0:bd:00:6b:7a:fe:e0:2c:eb:fc:1e:12:fd:f1: d2:9b:2c:04:87:ae:95:84:3a:c9:1d:7a:9a:73:3b: b0:ad:08:8d:1e:16:5d:ef:98:8b:68:08:e8:1c:b7: 20:91:35:df:61:7b:21:ca:2f:27:00:9c:31:a7:93: 63:c7:55:09:bb:50:0c:04:da:8a:ba:90:24:72:c3: b3:45:5c:96:b1:0e:5d:dc:1c:cf:90:28:29:db:1f: 5f:10:47:01:ac:34:65:34:18:5f:85:b6:cb:50:be: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:17:76:2B:8D:77:1D:77:8A:C1:85:9C:41:A7:3F:82:93:BC:0D:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfae6790-4364-3d1e-9409-6da10de1af43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1c00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:da:c6:4c:ef:08:d5:1f:bd:fa:7b:bd:b4:0c:3b:e3:0d:76: 77:7c:0a:64:7b:7c:8a:ec:f5:c7:29:ed:fc:bb:69:7b:b1:34: a4:b1:36:1c:98:63:c1:f1:20:37:6c:9c:20:9a:d8:21:66:56: 88:47:2c:15:f9:a2:02:7b:f5:e5:6e:3d:46:5e:dc:4d:1c:58: 24:6f:4d:be:10:21:47:cb:dd:f4:6a:2f:48:01:b4:5f:a7:1d: 03:58:ca:ad:ad:5b:0c:16:64:2f:c9:3b:51:65:8c:ac:c2:74: 38:4d:46:74:65:79:f2:b5:2b:2c:76:c8:f5:a4:ea:a2:e5:44: ca:7d:77:97:17:c1:a4:12:0f:ea:89:fd:88:15:11:30:72:51: 4f:65:32:95:1a:38:55:6b:43:b9:2b:ee:16:b1:ff:65:5b:c2: e8:fb:c5:ee:1a:95:c7:2d:5f:c1:ea:ed:ed:32:28:13:f2:f9: b6:9d:7a:57:9d:91:f1:56:73:73:30:30:14:78:8e:55:46:f1: c2:e5:37:c3:22:46:d9:a3:b5:46:4a:60:7e:c8:74:50:04:1b: 09:6d:37:4a:4b:c1:80:ee:96:43:84:c7:f2:6e:69:f2:ec:39: f7:99:a0:31:d2:16:c7:31:74:ca:72:47:10:5c:02:49:97:aa: 58:bf:7b:d4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoNX1Azs9ON/Kd3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGJiZWIyNDctNDQxOS00M2I1LTg0ZTgtODE1MjhlYmRmZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgCH+uFOu2J0OWeYw8aJirvh6zXqb68K8BWj zxY6KeT+9hR6C3JCeklhDg4CHZf5TNAfpU1WNUVZh6T0LxIz8Et2bTafMR4BY/1t vyxLWsvLYOpJp64ts74RrulQlP0Dy3Rc+sHNv0YVEMxT6jP9RsgrDAI3rpixXBVh WvGF0TEtTKNHxyYMLjsw5yNZOM0bOhkvfOZnsL0Aa3r+4Czr/B4S/fHSmywEh66V hDrJHXqaczuwrQiNHhZd75iLaAjoHLcgkTXfYXshyi8nAJwxp5Njx1UJu1AMBNqK upAkcsOzRVyWsQ5d3BzPkCgp2x9fEEcBrDRlNBhfhbbLUL6iBwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDQXdiuNdx13isGFnEGnP4KTvA0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZhZTY3OTAtNDM2NC0z ZDFlLTk0MDktNmRhMTBkZTFhZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcNrGTO8I1R+9+nu9tAw74w12d3wKZHt8iuz1xynt/Ltpe7E0pLE2 HJhjwfEgN2ycIJrYIWZWiEcsFfmiAnv15W49Rl7cTRxYJG9NvhAhR8vd9GovSAG0 X6cdA1jKra1bDBZkL8k7UWWMrMJ0OE1GdGV58rUrLHbI9aTqouVEyn13lxfBpBIP 6on9iBURMHJRT2UylRo4VWtDuSvuFrH/ZVvC6PvF7hqVxy1fwert7TIoE/L5tp16 V52R8VZzczAwFHiOVUbxwuU3wyJG2aO1Rkpgfsh0UAQbCW03SkvBgO6WQ4TH8m5p 8uw595mgMdIWxzF0ynJHEFwCSZeqWL971A== -----END CERTIFICATE-----Generated at Wed Aug 6 05:55:00 2025 by rpki-client