$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4860b14-fc91-3c9c-be91-a370e2ede5fc.roa File: e4860b14-fc91-3c9c-be91-a370e2ede5fc.roa (raw, json) Hash identifier: vZ1th1v7MbOKAgETQU1FyF2jGuDo5Q3LvXxvG0l42pg= Subject key identifier: D3:C6:9C:92:1E:D3:DA:CD:0A:87:14:1E:CD:3A:15:1B:31:61:EB:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AC5ABA2910FFED40D41091CE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4860b14-fc91-3c9c-be91-a370e2ede5fc.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a2:91:0f:fe:d4:0d:41:09:1c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=6234b82a-b85d-4964-8214-2d6c2e157cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:26:93:a5:25:65:6d:06:87:5e:d3:53:a2: c0:66:e8:cd:9b:a7:e3:b9:ae:f6:82:f6:5d:ed:9d: 5c:8c:e4:35:1c:b9:d5:41:8f:5f:b7:7f:a3:02:e0: 61:29:46:7c:1a:e7:35:50:b7:f9:59:ec:cf:da:ff: 07:a2:3b:90:54:a2:ba:3d:ff:8c:ae:c3:c3:49:5a: 6a:6f:ca:3b:e9:0d:ea:32:6f:e0:8b:2d:3f:60:a2: 4a:33:d4:12:7e:58:2c:37:d4:e7:fc:f2:a0:ad:85: 11:9d:04:c6:c3:59:b9:11:f7:1a:c8:8a:18:32:77: 66:2e:da:cc:9f:e4:b2:f5:b4:dc:72:d4:60:58:11: 38:0e:fe:60:70:0c:03:8a:0f:0c:a9:26:af:38:f6: 12:14:6b:45:b3:50:21:b2:a6:ab:19:ab:99:df:75: 0b:32:6a:23:8c:52:bc:01:51:05:48:58:ce:fe:de: 14:6a:77:0d:69:7a:12:a2:58:7a:55:71:16:98:15: 12:12:cb:54:98:e8:e2:31:0a:81:b3:2c:ef:f0:34: 74:d6:1c:6d:c7:6f:a2:d0:f0:57:51:db:26:59:9d: e3:77:13:39:8a:7d:5d:a8:8f:26:c6:b1:39:e4:10: 53:06:4e:11:bb:36:c0:55:48:9e:e5:85:96:a2:9a: ed:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C6:9C:92:1E:D3:DA:CD:0A:87:14:1E:CD:3A:15:1B:31:61:EB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4860b14-fc91-3c9c-be91-a370e2ede5fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:09:ed:ff:62:c0:35:f9:83:f1:b2:f5:ee:a1:50:ab:a2:f8: 95:94:5a:12:03:59:e5:12:54:0f:32:0e:bb:45:60:26:27:87: 4b:ee:89:7e:01:67:55:84:ae:05:da:7b:47:e4:9d:3f:db:08: 51:54:b1:bc:51:e5:d4:0e:4f:d1:e4:60:19:44:e3:21:27:9a: a6:11:47:83:9d:9f:2c:c8:02:d3:a2:65:11:bf:6d:11:87:e5: 76:a6:b6:50:5a:17:c9:2e:44:0e:b2:d7:2d:1f:ba:83:26:a4: db:3f:96:f8:4d:c8:6f:8f:5d:32:b9:e2:30:8f:0f:9d:ab:ce: eb:6e:53:ce:2e:56:23:72:3f:5f:3b:73:6b:1d:dc:f5:45:b9: 44:ad:b6:3a:cc:94:ed:32:d2:9b:6a:d8:e7:b4:27:27:b4:2c: 5f:f1:12:3c:4e:46:7d:62:83:a8:e7:bf:50:47:0c:8b:04:3a: e2:8d:37:a5:e0:bd:b7:3c:be:03:9e:6c:60:56:1f:1e:48:32: e6:66:04:33:01:d9:8b:fd:fa:6e:4d:86:48:15:62:74:6e:49: 5a:e2:9e:30:bc:a6:ca:ec:06:99:89:47:c6:22:6d:d6:92:91: b3:08:8d:a2:97:f1:70:82:e3:1e:d9:ca:ba:40:cc:06:6e:47: 78:75:ef:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErFq6KRD/7UDUEJHOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NjIzNGI4MmEtYjg1ZC00OTY0LTgyMTQtMmQ2YzJlMTU3Y2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgwmk6UlZW0Gh17TU6LAZujNm6fjua72gvZd 7Z1cjOQ1HLnVQY9ft3+jAuBhKUZ8Guc1ULf5WezP2v8HojuQVKK6Pf+MrsPDSVpq b8o76Q3qMm/giy0/YKJKM9QSflgsN9Tn/PKgrYURnQTGw1m5EfcayIoYMndmLtrM n+Sy9bTcctRgWBE4Dv5gcAwDig8MqSavOPYSFGtFs1AhsqarGauZ33ULMmojjFK8 AVEFSFjO/t4UancNaXoSolh6VXEWmBUSEstUmOjiMQqBsyzv8DR01hxtx2+i0PBX UdsmWZ3jdxM5in1dqI8mxrE55BBTBk4RuzbAVUie5YWWoprtCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPGnJIe09rNCocUHs06FRsxYesnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTQ4NjBiMTQtZmM5MS0z YzljLWJlOTEtYTM3MGUyZWRlNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH0J7f9iwDX5g/Gy9e6hUKui+JWUWhIDWeUSVA8yDrtFYCYnh0vu iX4BZ1WErgXae0fknT/bCFFUsbxR5dQOT9HkYBlE4yEnmqYRR4OdnyzIAtOiZRG/ bRGH5XamtlBaF8kuRA6y1y0fuoMmpNs/lvhNyG+PXTK54jCPD52rzutuU84uViNy P187c2sd3PVFuUSttjrMlO0y0ptq2Oe0Jye0LF/xEjxORn1ig6jnv1BHDIsEOuKN N6Xgvbc8vgOebGBWHx5IMuZmBDMB2Yv9+m5NhkgVYnRuSVrinjC8psrsBpmJR8Yi bdaSkbMIjaKX8XCC4x7ZyrpAzAZuR3h179M= -----END CERTIFICATE-----Generated at Sat Aug 23 13:25:08 2025 by rpki-client