$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa File: e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa (raw, json) Hash identifier: Sdr2Sfp6Jupz8q2GEzezqT4CPYtYcHHT9piNxoXz0hQ= Subject key identifier: 57:56:D2:D9:DE:C9:F8:37:92:B7:C5:F3:4D:32:3D:75:F1:E1:33:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D45C4E2631ADF1D75600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d4:5c:4e:26:31:ad:f1:d7:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=01e9dca3-b686-4dee-984f-1cc56294edaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:34:11:f3:70:5c:91:b1:2d:7c:0b:3f:6f:00: 1d:56:ab:30:4f:a0:3a:2b:0b:fb:b1:4a:d4:38:94: 8f:15:46:fc:b5:12:09:09:21:5e:80:b2:f4:8c:e8: dc:97:01:ba:97:3b:0b:54:29:dd:b6:59:89:e6:5c: 52:6d:2d:c3:d1:00:a1:82:d0:5f:2d:5f:6a:4a:64: db:e8:12:de:0a:8f:7e:c9:97:2d:84:b7:e9:53:8f: 87:08:c5:27:04:e0:99:10:35:d9:50:eb:67:9d:14: 69:0e:d7:55:fe:86:eb:0a:e5:95:e5:c1:4f:ea:3c: d8:f9:26:d4:dd:fe:5c:9d:6e:28:28:5d:6f:22:96: 52:9f:f4:13:e4:07:85:3d:b2:09:ea:85:53:8d:23: 5e:fb:ca:0d:4a:8f:d8:fc:aa:37:d3:83:f6:28:1b: c9:d9:25:a2:03:d4:0c:bc:9b:1a:b1:27:9b:a3:a9: b6:e5:b2:03:83:bf:31:93:7f:69:16:16:05:9a:2b: 70:85:3d:b2:6c:83:2e:c9:4c:00:16:e6:3a:e5:8c: 0a:03:70:ac:20:94:d9:0d:19:4c:03:d6:ce:66:22: 98:99:2b:04:61:05:06:db:e5:f3:1d:58:e3:11:8e: fe:63:5e:15:cb:28:07:4e:f6:61:dd:58:f5:13:3b: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:56:D2:D9:DE:C9:F8:37:92:B7:C5:F3:4D:32:3D:75:F1:E1:33:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e72d57b5-e9f1-34fb-8ac7-f4d0629d7ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ae:25:bb:99:c7:07:40:ad:c3:12:54:99:b6:40:a8:c9:64: a2:b0:67:21:d9:5a:ae:79:c2:0b:3d:a8:ea:32:60:1a:ea:10: 28:74:9a:c0:59:ba:50:ea:47:76:29:2e:88:95:f0:81:df:f6: 2c:26:1a:09:b1:17:e7:22:c4:86:6b:89:10:a7:5f:92:43:84: 17:67:94:5b:33:78:90:58:dc:41:ff:c2:76:52:9c:91:3d:d8: b6:0a:07:80:c6:c4:a3:fd:aa:fe:d4:7a:ac:1a:aa:60:74:7d: b6:6d:a2:2a:41:8c:38:e2:b0:ef:42:5e:65:41:5d:5f:01:be: c7:7f:21:44:77:b0:f1:9d:f9:21:e4:0b:6f:2f:03:bf:3a:86: c6:da:15:a5:af:b8:00:e8:69:b7:d2:54:7e:bb:34:ba:fd:84: 4c:44:5a:57:fc:a9:60:6d:25:7e:a2:6c:c3:4f:b2:6f:ff:ba: 68:4d:d6:d8:8f:49:8d:e1:03:43:1f:09:f4:a1:69:cf:51:fe: cf:8a:eb:8a:65:e5:87:ff:f1:78:f8:2c:b2:c9:b5:5c:83:2a: ee:45:be:03:84:9b:71:1f:44:7e:29:88:82:da:b4:4f:61:30: ee:f1:8a:8d:d7:31:22:9b:99:12:f9:79:d9:14:35:8a:ae:03: 8f:8f:ce:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoNRcTiYxrfHXVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDFlOWRjYTMtYjY4Ni00ZGVlLTk4NGYtMWNjNTYyOTRlZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTQR83BckbEtfAs/bwAdVqswT6A6Kwv7sUrU OJSPFUb8tRIJCSFegLL0jOjclwG6lzsLVCndtlmJ5lxSbS3D0QChgtBfLV9qSmTb 6BLeCo9+yZcthLfpU4+HCMUnBOCZEDXZUOtnnRRpDtdV/obrCuWV5cFP6jzY+SbU 3f5cnW4oKF1vIpZSn/QT5AeFPbIJ6oVTjSNe+8oNSo/Y/Ko304P2KBvJ2SWiA9QM vJsasSebo6m25bIDg78xk39pFhYFmitwhT2ybIMuyUwAFuY65YwKA3CsIJTZDRlM A9bOZiKYmSsEYQUG2+XzHVjjEY7+Y14VyygHTvZh3Vj1Ezv1bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFdW0tneyfg3krfF800yPXXx4TPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTcyZDU3YjUtZTlmMS0z NGZiLThhYzctZjRkMDYyOWQ3YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIeuJbuZxwdArcMSVJm2QKjJZKKwZyHZWq55wgs9qOoyYBrqECh0 msBZulDqR3YpLoiV8IHf9iwmGgmxF+cixIZriRCnX5JDhBdnlFszeJBY3EH/wnZS nJE92LYKB4DGxKP9qv7UeqwaqmB0fbZtoipBjDjisO9CXmVBXV8Bvsd/IUR3sPGd +SHkC28vA786hsbaFaWvuADoabfSVH67NLr9hExEWlf8qWBtJX6ibMNPsm//umhN 1tiPSY3hA0MfCfShac9R/s+K64pl5Yf/8Xj4LLLJtVyDKu5FvgOEm3EfRH4piILa tE9hMO7xio3XMSKbmRL5edkUNYquA4+Pzg4= -----END CERTIFICATE-----Generated at Mon Aug 4 19:12:53 2025 by rpki-client