$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/49d4a850-27cb-308b-a7ec-c5c0c7afa746.roa File: 49d4a850-27cb-308b-a7ec-c5c0c7afa746.roa (raw, json) Hash identifier: hgFZZ0XvGPY8Xj5GldUq4ronhZ0cVoSoElCAc7BccXw= Subject key identifier: BF:9B:43:0C:2D:88:A8:F8:37:0C:7C:96:02:BA:A8:28:1A:64:B1:80 Certificate issuer: /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f Certificate serial: 010D0C9F4328584A8C70C2A846914CDC0D0AC980 Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/49d4a850-27cb-308b-a7ec-c5c0c7afa746.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 18934 IP address blocks: 2605:9a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:c2:a8:46:91:4c:dc:0d:0a:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=21792162-52fa-4a40-9ff0-449e302c73e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:02:bb:9f:ad:5a:c4:80:92:63:85:9f:b1: b9:e9:d9:ca:7b:9d:09:6d:72:08:60:9c:7a:7b:b2: eb:2d:cb:7c:ec:91:03:17:a3:9a:dd:21:6a:3d:b1: 2d:85:1e:10:b3:7d:3d:e3:fd:95:65:f3:f1:0b:a6: 21:ef:44:cf:ab:e0:3c:1d:59:50:b4:77:96:91:61: 03:52:a4:ba:45:dc:4e:33:73:73:b3:2a:a3:5b:30: 25:02:5b:e8:a3:70:87:11:3d:ff:01:4a:47:28:e0: 5d:28:d1:7f:36:38:b8:bf:63:23:9f:22:f1:0b:0d: ae:6e:d8:5e:4f:b1:c7:ac:65:90:c5:91:c0:84:13: ff:2c:b6:49:70:c6:45:12:77:de:6e:a5:73:08:54: 6d:8b:79:b8:23:43:c9:1e:53:72:e7:50:e1:46:03: 0f:22:3f:5b:c0:18:50:1d:cb:45:d3:08:6e:7c:8a: 02:2b:40:59:1b:56:cf:2c:42:f2:33:cf:98:f4:f7: 0a:93:11:c0:c0:42:a8:d0:f9:8f:3a:ad:f2:bc:d7: ff:96:3e:b9:11:ad:d9:3b:12:f7:44:8a:13:69:35: da:5c:e7:0c:e8:d2:83:2f:11:5f:56:96:6c:f3:f5: 71:37:2d:90:39:c2:a8:41:a9:af:aa:38:cc:83:88: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9B:43:0C:2D:88:A8:F8:37:0C:7C:96:02:BA:A8:28:1A:64:B1:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/49d4a850-27cb-308b-a7ec-c5c0c7afa746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl X509v3 Authority Key Identifier: keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer sbgp-ipAddrBlock: critical IPv6: 2605:9a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:56:42:59:86:b0:03:ae:24:60:6e:2f:1a:98:83:f1:95:2e: c1:c5:65:2d:48:6e:bf:45:3e:e9:da:6d:14:bb:5e:f2:1f:4d: 42:0d:7c:2c:3d:10:8b:9d:da:d7:7a:16:ca:4e:c4:7c:6a:d1: 0e:0c:a8:46:70:22:f7:a4:92:b0:68:7e:1f:76:d8:35:10:73: 0f:f2:c2:28:5f:ee:f1:a5:4a:37:a6:1f:bb:75:a0:09:5b:ee: 00:34:a3:6c:1b:a1:0b:47:a0:5f:42:a2:99:81:54:06:41:dd: 78:ae:26:5d:12:55:9a:24:e9:71:de:9e:16:6e:b7:65:a9:10: d4:5c:54:07:bd:17:2b:b0:c9:03:16:c6:9d:18:76:43:42:bf: 8f:21:ca:61:a1:01:91:ce:b3:8a:0a:d2:df:0a:69:69:bd:88: d0:bd:30:9b:51:9b:45:06:4f:c8:54:be:ae:00:0f:bd:d0:9c: 12:e9:01:53:fe:18:62:03:51:82:ab:25:f9:06:81:e4:95:c1: c1:d4:0c:a8:9c:a3:e4:bc:11:bd:ac:0d:68:c2:66:5a:1f:0c: 3a:71:63:27:67:e2:b9:e1:53:44:90:3c:c2:32:ec:e4:5e:22: 78:d4:14:e4:88:97:7e:95:74:db:c6:a5:71:9c:21:6f:47:7e: a2:47:de:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqMcMKoRpFM3A0KyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk YjdmMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MjE3OTIxNjItNTJmYS00YTQwLTlmZjAtNDQ5ZTMwMmM3M2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb8Cu5+tWsSAkmOFn7G56dnKe50JbXIIYJx6 e7LrLct87JEDF6Oa3SFqPbEthR4Qs3094/2VZfPxC6Yh70TPq+A8HVlQtHeWkWED UqS6RdxOM3NzsyqjWzAlAlvoo3CHET3/AUpHKOBdKNF/Nji4v2MjnyLxCw2ubthe T7HHrGWQxZHAhBP/LLZJcMZFEnfebqVzCFRti3m4I0PJHlNy51DhRgMPIj9bwBhQ HctF0whufIoCK0BZG1bPLELyM8+Y9PcKkxHAwEKo0PmPOq3yvNf/lj65Ea3ZOxL3 RIoTaTXaXOcM6NKDLxFfVpZs8/VxNy2QOcKoQamvqjjMg4jPqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL+bQwwtiKj4Nwx8lgK6qCgaZLGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvNDlkNGE4NTAtMjdjYi0z MDhiLWE3ZWMtYzVjMGM3YWZhNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0 OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz NTgwY2RiN2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWaQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASVkJZhrADriRgbi8amIPxlS7BxWUtSG6/RT7p2m0Uu17yH01CDXws PRCLndrXehbKTsR8atEODKhGcCL3pJKwaH4fdtg1EHMP8sIoX+7xpUo3ph+7daAJ W+4ANKNsG6ELR6BfQqKZgVQGQd14riZdElWaJOlx3p4WbrdlqRDUXFQHvRcrsMkD FsadGHZDQr+PIcphoQGRzrOKCtLfCmlpvYjQvTCbUZtFBk/IVL6uAA+90JwS6QFT /hhiA1GCqyX5BoHklcHB1AyonKPkvBG9rA1owmZaHww6cWMnZ+K54VNEkDzCMuzk XiJ41BTkiJd+lXTbxqVxnCFvR36iR94F -----END CERTIFICATE-----Generated at Wed Aug 6 09:25:37 2025 by rpki-client