$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec3eca9b-03d7-300f-822a-3b44e00a104b.roa File: ec3eca9b-03d7-300f-822a-3b44e00a104b.roa (raw, json) Hash identifier: 0kPlKq6nQaa4W0jQhyfRjGlt7k9EQ8wVjXCDXN9ZLi8= Subject key identifier: E4:8C:58:0C:D1:2F:47:EA:B6:27:3D:C8:18:45:12:A8:84:39:F2:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D5B8D5598464B831A979 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec3eca9b-03d7-300f-822a-3b44e00a104b.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:1700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d5:b8:d5:59:84:64:b8:31:a9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=1cbf8b74-8de0-4140-834f-a4c10358271d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:21:2c:c0:d8:4f:cf:92:30:15:c0:d6:54: bc:90:97:ca:b8:79:9a:72:fa:3e:7c:57:71:e6:42: ff:4d:bd:a8:26:0d:e5:4f:d2:d0:0d:9b:2f:4c:93: 8d:9a:53:5a:f2:7c:d4:71:2e:0d:97:fe:a6:da:00: e1:14:1d:0f:7e:f2:33:04:9a:92:1f:ea:bb:66:c5: a0:0b:c0:8c:1a:d7:bd:31:8f:83:87:a8:48:0e:98: e8:4c:00:5a:3a:47:4d:55:a4:94:cf:86:9d:c2:bf: 1b:55:76:3c:4a:74:1f:c9:5c:ed:b9:a3:e2:35:c8: c6:01:5f:db:19:e2:1c:5f:91:62:03:c5:50:ef:a8: ce:5e:70:34:fa:52:4d:83:41:91:45:21:23:8c:1d: c3:29:1a:47:84:21:e3:d7:02:dc:cc:d2:91:e3:b7: f7:a2:a3:3c:ac:1a:28:62:c7:4a:e6:a6:d2:73:21: da:3f:f2:c8:be:8e:45:8c:49:57:7b:5c:e3:52:7b: 90:e3:45:fe:e8:32:9a:0c:02:c4:f4:59:ae:33:fc: 1b:24:68:bb:85:9a:d2:af:d6:03:c0:ff:e2:f1:17: ee:97:64:d6:6d:11:ef:44:2a:44:f4:04:91:0d:9d: 85:38:6e:0c:2e:b6:c9:75:20:3c:be:39:90:f7:e2: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8C:58:0C:D1:2F:47:EA:B6:27:3D:C8:18:45:12:A8:84:39:F2:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec3eca9b-03d7-300f-822a-3b44e00a104b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:1700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ea:a2:4c:15:d0:ce:2a:fc:7d:84:60:45:ab:60:8a:cc:58: 30:d6:1e:dd:bc:49:e7:72:19:ad:71:8e:6f:c0:6c:d3:da:c4: c5:ed:8a:9d:88:8c:dc:9d:7a:a7:9e:a5:b1:0e:ba:9b:2d:66: 10:33:ce:86:60:a3:3d:2d:fb:27:72:74:84:e2:6a:f5:0f:c6: 59:36:70:11:8e:a8:89:2b:21:08:48:e3:ee:7f:9a:f7:9d:7a: eb:f7:8d:7b:52:67:e2:8e:21:7a:c5:2e:5c:7f:3a:69:ad:f8: ae:b1:b8:dc:af:d5:9e:71:88:eb:81:c3:1b:77:38:eb:8e:f1: bd:aa:27:fd:99:64:62:99:47:6c:7f:48:22:47:59:ac:cb:d0: 14:93:a6:d3:13:20:9d:fb:36:fe:b3:8c:a9:c3:5a:f7:28:5b: 62:8b:b3:e9:54:2e:56:de:31:ee:d7:0c:29:8f:b4:41:8e:16: 22:2c:a5:bc:15:37:62:c6:22:e9:12:19:15:6a:f9:2b:12:e4: ed:a1:ac:88:ba:c0:df:cd:8d:9f:d9:99:e8:fa:bd:8b:cb:fa: 10:fc:57:52:44:10:4a:a7:3b:2d:ef:39:27:71:1f:7b:b5:29: 92:d8:bb:9b:2e:5a:ac:38:68:6e:fe:d4:d7:fb:8c:3d:a9:82: b7:9c:d3:62 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoNW41VmEZLgxqXkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MWNiZjhiNzQtOGRlMC00MTQwLTgzNGYtYTRjMTAzNTgyNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdMhLMDYT8+SMBXA1lS8kJfKuHmacvo+fFdx 5kL/Tb2oJg3lT9LQDZsvTJONmlNa8nzUcS4Nl/6m2gDhFB0PfvIzBJqSH+q7ZsWg C8CMGte9MY+Dh6hIDpjoTABaOkdNVaSUz4adwr8bVXY8SnQfyVztuaPiNcjGAV/b GeIcX5FiA8VQ76jOXnA0+lJNg0GRRSEjjB3DKRpHhCHj1wLczNKR47f3oqM8rBoo YsdK5qbScyHaP/LIvo5FjElXe1zjUnuQ40X+6DKaDALE9FmuM/wbJGi7hZrSr9YD wP/i8Rful2TWbRHvRCpE9ASRDZ2FOG4MLrbJdSA8vjmQ9+Jx1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOSMWAzRL0fqtic9yBhFEqiEOfLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWMzZWNhOWItMDNkNy0z MDBmLTgyMmEtM2I0NGUwMGExMDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLABcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPeqiTBXQzir8fYRgRatgisxYMNYe3bxJ53IZrXGOb8Bs09rExe2K nYiM3J16p56lsQ66my1mEDPOhmCjPS37J3J0hOJq9Q/GWTZwEY6oiSshCEjj7n+a 95166/eNe1Jn4o4hesUuXH86aa34rrG43K/VnnGI64HDG3c4647xvaon/ZlkYplH bH9IIkdZrMvQFJOm0xMgnfs2/rOMqcNa9yhbYouz6VQuVt4x7tcMKY+0QY4WIiyl vBU3YsYi6RIZFWr5KxLk7aGsiLrA382Nn9mZ6Pq9i8v6EPxXUkQQSqc7Le85J3Ef e7Upkti7my5arDhobv7U1/uMPamCt5zTYg== -----END CERTIFICATE-----Generated at Wed Aug 6 05:21:16 2025 by rpki-client