$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa File: fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa (raw, json) Hash identifier: I7bke7t31yMLTdP2Jb8wlzJ7aBFVz8H6vE929eOQjR8= Subject key identifier: A9:14:6A:85:7D:BA:58:39:E6:1D:94:C0:30:B6:F8:B1:2E:33:E5:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A104CF9069D1EF6B4831C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 2604:cb00:2900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:04:cf:90:69:d1:ef:6b:48:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=fc2d256f-ed7f-4b80-bdd6-4a12bea58384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:7e:ab:2f:f8:6f:b1:84:01:94:f1:e4:9e: e4:d8:e2:2a:a8:9e:f7:46:b8:c6:53:b3:7c:8c:87: d4:5a:6a:43:3a:9d:6e:4e:72:35:dc:a5:aa:89:ea: ad:84:51:5e:9b:4b:ee:02:7e:db:e9:39:bf:8e:25: 3e:b0:72:43:91:51:a1:47:b1:1c:e6:92:be:d7:2d: 85:58:d3:b7:c5:c6:a9:45:a1:de:d0:a5:99:f4:22: 8d:6c:a8:c2:9a:f6:5b:07:c7:c6:cd:8c:16:e4:3c: 90:7d:1c:7e:83:b2:db:57:ab:99:64:a2:1a:02:ab: b9:69:38:12:a2:8a:8a:e1:a8:0d:d3:ec:75:cf:26: af:d9:e7:21:c5:33:fd:57:20:47:1c:6f:59:b0:f8: 33:67:a5:cf:6f:5f:4b:55:c5:0a:4b:56:18:3d:67: 5b:66:70:6e:de:03:49:7b:cd:06:64:10:8b:f4:2c: 48:a8:71:1a:bc:ad:e9:81:dd:61:ff:24:cc:f0:69: e5:7f:13:69:65:e3:df:95:33:0c:e6:24:57:38:47: 47:1a:ef:93:44:b2:96:07:60:a1:11:b6:1e:3a:e1: d1:0f:57:ec:64:76:34:a4:c1:b3:2e:f6:3a:3f:3f: 98:69:f2:e3:8a:92:cc:97:5a:7c:fd:39:04:5e:16: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:14:6A:85:7D:BA:58:39:E6:1D:94:C0:30:B6:F8:B1:2E:33:E5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fed1c67c-db22-3483-b2e3-f596e07dbcc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:2900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:99:61:09:81:fb:fd:b8:17:36:15:ba:54:58:eb:1d:d5:84: 49:6f:e7:bb:86:f6:89:29:22:87:99:f8:d6:56:38:26:27:65: 2a:57:61:55:2d:75:06:e3:cb:8a:99:bc:3f:03:79:3e:f1:3d: 4d:f2:a9:ab:ef:aa:4b:5c:9f:55:e8:50:c7:ff:1f:86:61:d7: b7:95:e0:0a:be:3b:5a:8c:36:03:67:c3:fb:90:0c:a1:8b:25: 43:2a:1b:3d:51:54:85:9f:0a:44:a6:b6:3c:76:46:b9:6b:de: 4b:a6:0d:21:fc:52:cf:6d:bf:a7:39:ef:29:bc:96:37:65:18: 23:3b:cb:1d:64:78:31:57:8f:e3:7b:d2:0a:49:93:1f:b9:89: 15:bb:53:5e:1a:d0:e9:c9:3a:62:ae:02:84:7d:32:ab:dd:3b: 30:a3:46:c6:e6:f0:0b:1f:bf:13:e0:3b:07:64:a0:aa:c2:c5: 5b:58:bd:d1:03:11:8b:96:a5:a8:97:c8:16:1c:af:cd:f5:61: 25:db:20:6b:35:e7:80:02:f5:85:56:20:d1:10:00:47:6c:a6: a0:9f:8d:74:69:a2:c6:6a:2c:d4:18:16:19:25:bb:35:e3:32: 7f:f8:1d:c9:ec:27:11:5e:8e:60:90:bd:2d:a0:05:83:b6:48: c5:d5:df:6c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqQoQTPkGnR72tIMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZmMyZDI1NmYtZWQ3Zi00YjgwLWJkZDYtNGExMmJlYTU4Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpt+qy/4b7GEAZTx5J7k2OIqqJ73RrjGU7N8 jIfUWmpDOp1uTnI13KWqieqthFFem0vuAn7b6Tm/jiU+sHJDkVGhR7Ec5pK+1y2F WNO3xcapRaHe0KWZ9CKNbKjCmvZbB8fGzYwW5DyQfRx+g7LbV6uZZKIaAqu5aTgS ooqK4agN0+x1zyav2echxTP9VyBHHG9ZsPgzZ6XPb19LVcUKS1YYPWdbZnBu3gNJ e80GZBCL9CxIqHEavK3pgd1h/yTM8GnlfxNpZePflTMM5iRXOEdHGu+TRLKWB2Ch EbYeOuHRD1fsZHY0pMGzLvY6Pz+YafLjipLMl1p8/TkEXhbIywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKkUaoV9ulg55h2UwDC2+LEuM+U1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmVkMWM2N2MtZGIyMi0z NDgzLWIyZTMtZjU5NmUwN2RiY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTLACkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaplhCYH7/bgXNhW6VFjrHdWESW/nu4b2iSkih5n41lY4JidlKldh VS11BuPLipm8PwN5PvE9TfKpq++qS1yfVehQx/8fhmHXt5XgCr47Wow2A2fD+5AM oYslQyobPVFUhZ8KRKa2PHZGuWveS6YNIfxSz22/pznvKbyWN2UYIzvLHWR4MVeP 43vSCkmTH7mJFbtTXhrQ6ck6Yq4ChH0yq907MKNGxubwCx+/E+A7B2SgqsLFW1i9 0QMRi5alqJfIFhyvzfVhJdsgazXngAL1hVYg0RAAR2ymoJ+NdGmixmos1BgWGSW7 NeMyf/gdyewnEV6OYJC9LaAFg7ZIxdXfbA== -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:20 2025 by rpki-client